Consumer Health Data Policy

This policy covers “consumer health data” as defined by Washington's My Health My Data Act and similar laws in Nevada and Connecticut: information that identifies you and relates to your physical or mental health. It adds to our Privacy Policy, which covers everything else. Peptun is operated by Tropiguna LLC (“we”).

What we collect, and why

• Profile details: age, sex assigned at birth, height, weight, goals, pregnancy status, other medications, and whether a clinician is involved. Used to tailor your record and its safety checks.
• Your protocol: compounds, doses, schedules, what you took or skipped, side effects, symptoms, and body measurements. Used to keep your record and show your history.
• Lab results you enter or import, and the rules you set against them. Used to check your labs against your rules and show trends.
• Chat messages about your health, and the answers you receive. Used to answer your questions.
• Waitlist answer: if you choose to tell us what you're running when you join the waitlist. Used to plan invites.

We use consumer health data only to provide Peptun to you, keep it secure, and meet legal obligations. We don't use it for advertising.

Where it comes from

From you: what you type, log, or upload, including lab report PDFs you import. We don't buy health data or collect it from other companies.

Who receives it

We don't sell consumer health data. Only these categories of service providers (processors) receive it, under contract, to run Peptun for us:

• Database and sign-in provider: stores your record.
• Hosting provider: runs the website and app.
• AI model provider: generates chat answers and reads imported lab PDFs. It keeps request data for up to 30 days for safety and security, and does not use it to train models.
• Email provider: sends account and waitlist emails. It receives your email address, not your health record.

We have no affiliates that receive consumer health data. We share it with anyone else, such as a clinician, only when you do it yourself, for example by handing over your Handoff. We'd disclose it beyond this only where the law requires.

Your rights

You can:

• Confirm and access: ask whether we hold your consumer health data, get a copy, and get a list of every service provider that received it.
• Delete: have it deleted, including from our service providers.
• Withdraw consent: at any time. We'll stop collecting and delete what we hold.
• Appeal: if we turn down a request, reply to our answer to appeal and we'll review it.

Email support@peptun.com from the address on your account. We'll verify it's you and respond within 45 days. We won't treat you differently for using these rights.

Consent

We ask for your consent before collecting consumer health data: when you set up your account, and separately if you answer the optional question on the waitlist.