Legal

Privacy Policy

Effective Date: April 17, 2026 · CoreBit Labs LLC

CoreBit Labs LLC ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the PepChart application.

1. Information We Collect

We collect the following categories of information:

Account information: Email address and display name provided at signup.
Profile data: Name, weight, height, age, and gender that you optionally provide.
Health tracking data: Dose logs, injection sites, timestamps, active protocols, vial records, side effect logs, body metrics, symptom logs, and logbook entries that you voluntarily enter.
Usage data: App activity and feature usage for service improvement.

2. How We Use Your Information

We use your information solely to provide and improve the PepChart service. Specifically: to operate and maintain your account, to display your tracking data within the app, to improve app features and performance, and to communicate with you about your account when necessary.

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in this policy.

3. Data Storage & Security

Your data is stored securely using Supabase, a third-party database provider. All data is encrypted in transit using TLS. We implement row-level security to ensure each user can only access their own data. While we implement reasonable measures to protect your data, no method of electronic storage is 100% secure.

4. Third-Party Services

We use the following third-party service providers to operate the app:

Supabase — database and authentication (supabase.com). Your data is stored on their servers in accordance with their privacy policy.
Netlify — app hosting (netlify.com). Hosts the application files only; no user data is stored with Netlify.

We do not share your personal information with any other third parties except as required by law.

5. Health Data

This app collects health-related information including body measurements and self-reported wellness data. This information is classified as sensitive personal data under applicable privacy laws. We handle this data with heightened care and do not share it with any third parties. This data is used exclusively to provide your personal tracking experience within the app.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your personal data is immediately erased from our database. We retain only anonymized aggregate statistics that cannot be linked back to you. Auth account records may take up to 30 days to be fully purged from our authentication provider.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Update or correct inaccurate data (editable within the app).
Deletion: Delete your account and all associated data via Profile → Delete Account.
Portability: Request an export of your data by contacting us at peptrackr@gmail.com.

For users in the European Economic Area, you have additional rights under GDPR including the right to object to processing and the right to lodge a complaint with a supervisory authority.

8. Children's Privacy

This app is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes where practicable. Continued use of the app after changes constitutes acceptance of the revised policy. The effective date at the top of this document indicates when it was last updated.

10. Contact Us

For privacy-related questions, data requests, or concerns: peptrackr@gmail.com