Last updated: September 25, 2026
Peptalab is made by NextMVP Solutions LLC ("we", "us"). This policy explains what we collect when you use the Peptalab app, why, and the controls you have. The short version: we collect what the product needs to work, we don't sell it, and deleting your account erases it.
Peptalab uses AI models to power its core features: when you use the lab-report scanner, the photo or PDF you choose is sent once to extract the printed values for your review, and is not stored by us; when you photograph a vial label, that image is sent once to transcribe what is printed on it; when you use insights or ask a question, a summary of your own logs (counts, dates, injection sites, bloodwork values, weight and the symptoms you reported) is sent so the answer can be drawn from your own records. No progress photos, no location, and nothing is used to train models. AI requests are processed by Anthropic and OpenAI. API providers process requests under their business terms and do not use API inputs or outputs for model training by default. AI outputs are automated suggestions, not professional advice.
If you turn on the Apple Health connection, Peptalab reads your weight, body fat percentage, waist measurement and resting heart rate, and writes back the weight, body fat and waist measurements you enter in Peptalab. Only body measurements are exchanged. Your doses, the compounds you track, your injection sites, the symptoms you report and your bloodwork values are never written to Apple Health.
Health data is used only to show you your own measurements inside the app. It is never used for advertising or marketing, never sold, never shared with third parties, and never sent to our analytics or attribution providers. You can turn the connection off at any time in Peptalab, and you control what it may read or write in Apple's Health app under Sharing.
To provide and improve the product, keep your content synced and recoverable, provide support, prevent abuse, and understand aggregate usage. We do not sell your personal data for money and we do not show third-party ads inside Peptalab. We do measure our own advertising, as described next.
We advertise Peptalab on Meta (Facebook and Instagram). To learn which ads lead to sign-ups and purchases, and to show our ads to people likely to be interested, we use Meta's Pixel and Conversions API on our website and an attribution provider (AppsFlyer) in the mobile app. This shares with Meta the ad click identifier, a browser or device identifier, your IP address and browser type, a hashed (irreversibly encoded) email address and account ID, and the step you took (for example, account created, checkout started or purchase). Under some US state laws this may count as "sharing" personal data for cross-context behavioural advertising.
In the EU/EEA, the UK and Switzerland we do this only after you allow it in our consent banner. Elsewhere it is on by default, and you can turn it off at any time under Settings → Analytics & personalized ads where the app offers it, or by emailing [email protected]; turning it off does not affect your access to Peptalab. Product analytics may count visits without cookies (a daily-rotating, non-reversible identifier) so we can see how the product is used in aggregate.
Only processors that run the product: our hosting provider (servers in the United States), Anthropic and OpenAI (AI processing), RevenueCat (subscriptions), PostHog (analytics), Sentry (crash reporting), AppsFlyer (attribution), Expo (push delivery), and Resend (transactional email), plus Meta Platforms for advertising measurement as described above. Each receives only what its function requires. We disclose data if the law requires it.
Your data is kept while your account exists. Deleting your account (Settings → Delete my account) permanently and immediately erases your account and all synced content from our servers. You can also email [email protected] and we'll do it for you.
All traffic is encrypted in transit (TLS). Data is stored on access-controlled infrastructure, and content is tied to your account alone.
Depending on where you live (GDPR, UK GDPR, CCPA and similar), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to processing. Deletion and access are built into the app; for anything else, email [email protected]. We don't discriminate for exercising your rights.
Peptalab is not directed to children under 13, and we don't knowingly collect their data.
Our servers are in the United States. If you use Peptalab from elsewhere, your data is processed in the US with the safeguards described here.
If this policy changes materially, we'll update this page and note the new date above. Continued use after a change means you accept it.
NextMVP Solutions LLC — [email protected]