Privacy Policy
PepLedger is designed as a local-first journal. This notice explains what the app stores, what we measure to improve the product, and what service providers may process when you use subscriptions or device features.
Local journal data
Peptides, plans, logs, notes, inventory entries, injection sites, reminders, and settings are stored locally on this device in encrypted app storage.
The app does not run an account system and does not upload your journal data to a PepLedger server.
PepLedger does not sell personal journal data.
Apple Health and Health Connect
If you connect Apple Health (iOS) or Health Connect (Android), PepLedger reads weight, body fat percentage, and waist measurements that you choose to share. The connection is opt-in and can be revoked at any time from the Health app on iOS or Health Connect on Android.
PepLedger only reads from these systems — it never writes back to Apple Health or Health Connect.
Imported measurements are stored on this device in the same encrypted journal storage as the rest of your data.
Product analytics
PepLedger uses PostHog to understand how features are used so we can improve the app. Events include screen views, feature taps, and the onboarding choices you make — for example your primary goal, experience level, and whether you enabled notifications or health integrations.
Journal content — the peptides, doses, notes, photos, weights, measurements, and reminders you record — is never sent to PostHog or any other analytics service.
PostHog identifies your installation with an anonymous identifier. It is not linked to your name, email address, contact information, or your device advertising identifier (IDFA on iOS, Advertising ID on Android).
Subscriptions
If you subscribe, Apple, Google, RevenueCat, and Superwall may process purchase identifiers, paywall events, and subscription status so the app can unlock Premium features.
Payment details are handled by the app store. PepLedger does not receive your full card number or biometric payment approval data.
iCloud backup
If you opt in to iCloud backup, your journal is stored in your private iCloud container using CloudKit. The backup lives in your own iCloud account; PepLedger does not receive or hold a copy on its own infrastructure.
Body measurements imported from Apple Health or Health Connect are excluded from the iCloud backup. Reconnect Apple Health or Health Connect on each device to re-import them. Measurements you enter yourself in PepLedger are included.
When enabled, the backup updates automatically after edits and can be turned off at any time in Settings. You can also delete the iCloud copy from the iCloud Backup screen or from your iOS account settings.
iCloud backup is opt-in and disabled by default.
Notifications and app lock
Reminder notifications are scheduled locally on this device after you enable notifications.
Biometric app lock uses the operating system authentication prompt. The app does not receive or store biometric templates.
Deletion and support
Delete all data in Settings removes personal journal records from local app storage on this device.
For support, contact [email protected]. The current Privacy Policy is also published at https://pepledger.app/privacy/.