Summary
This notice explains how PepPin handles consumer health data — information about your body and your protocol that you enter in the app or share from Apple Health. It adds detail to our Privacy Policy and applies wherever you use PepPin, on iPhone and on Android. PepPin is a personal logging and tracking tool made and sold by VidZenith L.L.C‑FZ (“VidZenith”, “we”, “us”); it does not provide medical care.
Health Data We Collect
Profile. Age, biological sex, body weight, goals and how familiar you are with peptides.
Protocol and logs. The compounds you track, doses, schedules, injection sites, skipped doses, vial inventory, check‑ins and notes.
Measurements, food and lab reports. Weight, waist, body fat, lean mass; the food you log, such as protein, fibre, water, carbohydrates, fat and energy; and lab reports (bloodwork) you add. Lab reports are read on your phone. Barcode and nutrition‑label scans are read on your phone; for a barcode, only the barcode number is looked up in Open Food Facts, a public food database.
Progress photos, which stay on your phone. On iPhone they are copied to iCloud only if you turn on Sync photos to iCloud.
Apple Health metrics (iPhone). Only after you tap Connect Apple Health and allow each type in Apple’s permission sheet: weight, waist, body fat, lean mass, sleep, steps, resting heart rate, and the food values protein, fibre, water, carbohydrates, fat and energy. Data from other apps and devices (such as Oura, Whoop, Garmin or Withings) reaches PepPin only through Apple Health, if you have connected them there. PepPin can write the weight, waist and food entries you log back to Apple Health. Apple Health data is read on your iPhone, never sent to Chat, and never stored on our server or in iCloud.
Health Connect (Android). Not used. The current Android release reads and writes nothing in Health Connect and asks for no Health Connect permissions.
Meal estimates (iPhone). A meal photo, any note you add, or a description you type or dictate, and the estimated foods, portions and nutrient values returned. Speech audio stays on your iPhone. These inputs are sent only after the separate meal-estimate consent screen, as explained in our Privacy Policy.
Chat (iPhone). Your Chat questions, the replies, your chat history and the memory Chat saves. Chat is not available on Android yet.
What PepPin calculates. From what you log, PepPin calculates streaks, stock remaining, daily food totals and the Estimated levels chart on your phone. These are simple estimates, not measurements or diagnoses.
We collect health data from no other source.
Why We Use It
We use health data only to provide PepPin’s features to you: your protocol and schedule, reminders, the calculator, inventory, food log and progress, personalized Chat replies and meal estimates you request. We do not use it for advertising or marketing, we do not sell it, and we do not use it to train AI models.
Where It Is Stored and Who Receives It
On your iPhone and in your iCloud. Your records are stored on your iPhone and, if Sync with iCloud is on, in the private database of your own iCloud account, which we cannot read. Apple Health data is never stored in iCloud.
On your Android phone. Your records are stored on your phone and, if your phone backs up apps to your Google Account, in that Android backup, which Android encrypts end to end when your phone has a screen lock. We cannot read it. The Android app sends no health data to anyone.
Anthropic, our AI provider. On iPhone, Anthropic receives the content you choose to send through Chat or optional meal estimates. Chat receives the question and permitted context described in our Privacy Policy; the meal feature receives only your selected photo, note or meal description and instructions for estimating it, without automatically adding your other health records. Meal speech is transcribed on your iPhone and its audio is not sent. Separate consent is requested before using each feature. Anthropic does not use this API content to train its models and normally deletes inputs and outputs within 30 days, except flagged content may be kept for up to 2 years or longer where required by law. Apple Health data, existing food-log entries, progress photos and lab reports are not automatically added to meal requests; anything you choose to include in a meal photo or description is part of the request.
Our servers do not store raw meal photos or descriptions or Chat messages. To avoid duplicate model calls, a checked meal estimate, including food names and nutrient values, and request hashes are kept under your pseudonymous account ID for up to 15 minutes, then deleted. Usage counters and limited operational logs remain as explained in our Privacy Policy. We do not share health data with affiliates and disclose it to others only where legally required, to the extent required.
Your Consent
On iPhone you give consent separately for the following features, and you can take each one back at any time:
Apple Health permissions, asked only when you tap Connect Apple Health, and changed in iOS Settings › Health › Data Access & Devices › PepPin. Taking it back stops PepPin reading or writing Apple Health data.
The Chat consent screen, shown before your first question. Taking it back (by turning off AI features) stops Chat sending anything.
The meal-estimate consent screen, shown before the first photo or words are sent to Anthropic. Tap Not now or dismiss the screen to send nothing. Turning off AI features stops future meal requests.
Include health data, in Profile › Privacy & data. Turning it off stops health context being added to Chat questions.
AI features, in Profile › Privacy & data. Turning it off stops all sharing with our AI provider.
Taking consent back stops future collection and sharing. It does not delete data you already have — to delete, see our Data Deletion page.
Retention and Deletion
Health data you save on your phone, in your iCloud and in your Android backup stays until you delete it or delete your account. Profile › Privacy & data › Delete account deletes your PepPin data from your iPhone and your iCloud, or, on Android, from that phone. Our server does not store Chat messages or raw meal inputs; temporary meal estimates and request hashes are kept for up to 15 minutes. Counts of free Chat messages and meal estimates already used survive account deletion to prevent the allowance being reclaimed. Inputs and outputs held by Anthropic are normally deleted within 30 days, with the exceptions described in our Privacy Policy. Our Data Deletion page explains each step and what remains.
Your Rights
You can ask us to confirm whether we collect, share or sell your health data (we do not sell it), to access it, to give you a list of the third parties that have received it (for Chat and meal estimates, Anthropic, PBC) and how to contact them, to delete it, and to withdraw consent. Email [email protected] with the subject “Health data request”. We may ask you to confirm your identity, we will respond within 45 days, and we will never treat you differently for exercising these rights.
If we deny your request, reply to our response with the subject “Health data appeal” and a different person will review it within 45 days. We will explain the outcome in writing and, if we deny the appeal, how to complain to the attorney general or data protection authority where you live.
Changes and Contact
We will post any update to this notice at peppin.health/health-data with a new “last updated” date, which is also the date it takes effect. Questions: [email protected].