Consumer Health Data Privacy Policy

Who This Covers

This policy describes how Peptide Schedule handles consumer health data, as defined by Washington's My Health My Data Act, Nevada's consumer health data privacy law, Connecticut's consumer health data rules and similar state laws. It sits beside our Privacy Policy. Where the two differ about consumer health data, this policy controls.

What We Collect, Where It Comes From, and Why

• Health answers

  Your goal, experience level, your answers to four safety questions and the date you last answered them.

  Source

  You, during setup, in the planner or on your profile.

  Why

  To show on your profile and decide which safety warnings you see.

• Older health profile answers

  Age range, sex, weight, height, body fat, waist size, 0-10 ratings, lab values and a research mode setting, if you gave them to an older version of the site.

  Source

  You.

  Why

  Nothing on the site uses them now. They stay in your account until you clear them on your profile.

• Protocols and dose logs

  The peptides, doses, schedules and notes in your protocols, each scheduled dose, and each dose you log: done or skipped, the time, the injection site, notes and check-ins such as pain, energy, sleep, weight or side effects.

  Source

  You, in the planner and tracker.

  Why

  To run your schedule, reminders, calendar feed and dose checks.

• Supplies

  Vial sizes, how much is left, spare vials, and any batch, lot, storage or expiry notes you type.

  Source

  You, in Supplies.

  Why

  To estimate doses left and add low-supply reminders.

• Saved peptides you sync

  Each peptide you saved to My research and the date you saved it. If you sign out, or a different account signs in on this browser, the peptides synced to your account are removed from this browser. They stay in your account.

  Source

  You, on My research, only after you agree to sync.

  Why

  To show your list on every device where you sign in.

• Votes that you used a peptide

  If you are signed in, the vote is stored with your account.

  Source

  You, on peptide and protocol pages.

  Why

  To show community counts on pages.

• Where your sign-up visit started

  The first page of the visit in which you created your account. It can be a peptide page.

  Source

  Your browser.

  Why

  To learn which pages lead people to create accounts.

• Feature counts that name a peptide

  For example, which peptide a calculator was used for, with the vial size and dose typed in, or which peptide was saved. These records hold no account ID.

  Source

  Your browser.

  Why

  To learn which tools are used and to fix problems.

• Messages you send us

  Anything health-related you write in the contact form or the feedback button.

  Source

  You.

  Why

  To answer you.

Who We Share It With

• Service providers that run the site for us: Supabase (database and sign-in) and Vercel (hosting).
• Analytics.On public pages, Google Analytics and similar tools see page visits and feature use. Some feature events name the peptide a page or tool is about, for example which peptide's calculator was used, saved or shared. They never include the vial size or dose you type, your account ID, your health answers or your logs. They are linked to a random browser ID, not to your account. These tools don't run on the planner and tracker (/protocol), share links (/share), My research, or your profile, settings and other account screens.
• Where you direct it:your calendar app if you subscribe to a feed, your browser's push service for reminders (encrypted before they leave our servers), anyone who opens a share link or Protocol Page you publish, and an AI assistant you choose to open with an Ask AI button.
• When the law requires it,or to protect someone's safety.

Free to use. Your logs and saved lists are never sold, and not shared except where you choose.

Your Consent

Syncing saved peptides to your account starts only after you agree on the consent screen. You can withdraw that consent at any time: tap "Stop syncing" on My research, which deletes the copy in your account, or email us.

The rest of your health data comes from what you enter to use a feature. You can change or delete it in your account, or delete your account on the /settings page.

Your Rights

You can ask us to:

• Confirm whether we collect, share or sell your consumer health data, and give you a copy of it.
• List the third parties we have shared it with, and how to contact them.
• Delete it.
• Correct it. You can also change most of it in your account.
• Withdraw your consent to syncing saved peptides.

How to Ask

Delete your account on the /settings page. That deletes the health data linked to your account right away. Votes and messages you sent us stay, with the link to your account removed; email us to delete a message. Database backups and the sign-in audit log can keep a copy for a limited time. Or email hello@peptideschedule.com from the address on your account, with the subject "Health data request". We use that address to confirm the request is yours.

We answer within 30 days. If we need more time, we tell you why within those 30 days and answer within 45 more days. We don't treat you differently for using these rights.

Appeals

If we turn down a request, reply to our answer with "Appeal". We decide appeals within 45 days and explain the result in writing. If you disagree with the result, you can contact the attorney general of your state.

If You Don't Have an Account

What you create without an account stays in your browser, and we can't see it. Clear it in your browser settings, or with "Clear this device" on /protocol. Our feature counts hold no account ID, so we can't find your records in them.

Location

We don't collect your precise location, and we don't set up virtual boundaries (geofences) around health care facilities.

Contact

Questions about your health data? Email hello@peptideschedule.com.