Privacy

Peptun is a record you keep about your own protocol, so a lot of what you put in it is health information. This page explains what we collect, why, who helps us run the service, and how to get your data out or deleted. Peptun is operated by Tropiguna LLC (“we”).

What we collect

If you join the waitlist: your email address, and your answer to “what are you running right now?” if you give one.

If you have an account: your email address and first name, plus whatever you add to your record. That can include:

• Profile details: age, sex assigned at birth, height and weight, goals, pregnancy status, other medications, and whether a clinician is involved.
• Your protocol: compounds, doses, schedules, what you took or skipped, side effects, symptoms, and body measurements.
• Lab results you enter or import, and the rules (Gates) you set against them.
• Your chat messages and the answers you receive.

Lab PDFs: when you import a lab report, the PDF is sent to our processing provider to read the values. We keep the extracted values you confirm and the file's name. We don't keep the PDF itself.

Visits to this site: we count page views. For each one we store only the page, the date (not the time), and the name of the site that linked you here, if any. No IP address, no device details, no identifier, and no cookie for this.

Cookies and browser storage: a sign-in cookie to keep you logged in, a cookie with your time zone so your day starts at the right time, your light or dark preference saved in your browser, and one temporary flag so a single visit isn't counted twice. None of these are used for advertising or tracking across other sites.

How we use it

• To run Peptun: show your record, check your labs against your rules, do dose math, and build your Handoff.
• To answer your questions in chat, using the relevant parts of your record.
• To email you: the waitlist confirmation, your invite, sign-in links, and the digest if you leave it on. You can turn the digest off on your Account page.
• To keep the service secure and working, and to fix problems.

We don't use your data for advertising, and we don't sell or rent it to anyone.

Who processes your data

These providers handle data on our behalf, only to run the service:

• Supabase: database and sign-in. Your record is stored here.
• Vercel: hosts the website and app.
• Our AI model provider: generates chat answers and reads imported lab PDFs. It receives your messages and the parts of your record needed to answer them. It keeps request data for up to 30 days for safety and security, then deletes it, and under its commercial terms it does not use this data to train its models.
• Resend: sends our emails.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business. If that last one happens, this policy keeps applying to your data unless you agree otherwise.

Peptun and HIPAA

Peptun is a tool you use for yourself. It isn't a healthcare provider or health plan, so the health information you enter generally isn't covered by HIPAA. We still treat it as sensitive, and this policy is our commitment for how we handle it.

How long we keep it

We keep your record for as long as your account is open. When you ask us to delete your account, we delete your record within 30 days. If we hold backups, copies there are removed as those backups expire. Our AI model provider deletes request data within 30 days on its own. Waitlist entries are kept until you're invited or ask to be removed.

Your choices

• Get a copy of your data, or correct it: most of your record can be edited in the app. For a full export, email us.
• Delete your account and record: email us from the address on your account.
• Leave the waitlist: email us and we'll remove your entry.
• Stop the digest: turn it off on your Account page.

Depending on where you live, you may have more rights over your data. Rights specific to health data, including in Washington, Nevada, and Connecticut, are covered in our Consumer Health Data Policy. We honor all of these requests through the same email, and we won't treat you differently for making one.

Security

Data travels over encrypted connections, and access to your record is limited to your signed-in account. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you.

Age

Peptun is for adults 18 and over, and everyone confirms this when they set up their account. We don't knowingly collect data from anyone younger; if we learn we have, we delete it.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll email you before it takes effect.

Contact

Questions or requests: support@peptun.com. Tropiguna LLC. See also our Terms.