1. Introduction
This Privacy Policy applies when you visit peppydiary.com, create an account, use calculator or tracking features, connect Telegram, purchase a plan, or contact support.
Peppy Diary is a personal recordkeeping service. Some information you choose to enter may relate to your health or routines. We treat that information as sensitive tracker data. We do not use it to provide medical advice, make medical decisions, or target advertising.
2. Information we collect
Account and authentication information. We collect the name and email address you provide, password credentials in hashed form, account settings, plan/access status, session information, and account activity needed to operate the service. If you choose Google sign-in, we receive and store the Google account identifier, name, and email needed to authenticate you.
Tracker and health-related information you choose to enter. This can include routine or compound names, vial and reconstitution details, schedules, dates, dose and draw values, injection history and site fields, inventory, reminders, notes, symptoms, weight, measurements, goals, and progress photos. This information may be sensitive personal information.
Telegram information. If you connect Telegram, we store the chat identifier, connection status, reminder times, and time zone. Telegram receives the reminder message required to deliver the feature. In the current product, a reminder can include a compound name, scheduled dose, and draw value. You can disconnect Telegram in Account Settings.
Purchase information. Lemon Squeezy processes payments. We receive and store the transaction, customer, subscription, store, plan/variant, and payment-status identifiers needed to activate and manage access. We do not receive or store full payment-card numbers.
Support and service email information. When you email support or receive an account email, we process the email address, message content, and information you choose to include so we can respond or deliver the service message.
Technical and measurement information. We receive limited technical information needed to operate, protect, and troubleshoot the service. With your consent for non-essential measurement, we measure basic conversion and performance information, such as the page or product surface, selected plan, sign-in method, and site-performance metrics. We do not send peptide names, doses, draw values, weight, injection sites, symptoms, notes, free text, or progress photos to Vercel Analytics or Vercel Speed Insights.
3. How we use information
- Create, authenticate, and secure accounts.
- Provide the tracker, calculator, reports, optional progress-photo storage, and optional Telegram reminders.
- Activate and administer paid access, purchases, and subscriptions.
- Send requested account and service email.
- Respond to support, privacy, and account requests.
- Prevent fraud, abuse, and security incidents.
- Understand basic product conversion and site performance only when non-essential measurement consent is given.
Necessary account, security, and service functions work without marketing or non-essential measurement consent. Declining non-essential measurement does not change access to the service.
4. Service providers, sharing, and analytics
We do not sell personal information or use sensitive tracker data for advertising. We share information only as needed to operate Peppy Diary, complete a request you make, comply with law, protect rights and safety, or support a corporate transaction subject to appropriate protections.
Our service providers may process information for the following purposes:
| Provider or provider type | What it may process | Purpose |
|---|---|---|
| Vercel | application requests, technical service data, and optional progress-photo storage | hosting, delivery, and private photo storage |
| Neon | account, tracker, billing-reference, and service records | managed database storage |
| Google Identity Services, if selected | Google sign-in identity information | authentication |
| Resend | account email address, name, and service-email content | welcome and password-reset email delivery |
| Lemon Squeezy | payment and buyer information under its own checkout terms | payments, subscriptions, and purchase support |
| Telegram, if connected | chat identifier, reminder preferences, and reminder message content | optional reminders |
| Vercel Analytics and Vercel Speed Insights, only after consent | limited conversion and performance data | non-essential product and performance measurement |
| Zoho Mail | support email and information included in a request | receiving and responding to support requests |
Sensitive tracker data is excluded from Vercel Analytics and Vercel Speed Insights. Telegram is separate from measurement: if you connect it, Telegram receives the reminder content needed to deliver that feature.
5. Analytics preferences
Necessary account, security, and service functions work whether or not you allow non-essential measurement. If you allow it, we measure basic conversion and performance information only, never peptide names, doses, weight, injection sites, symptoms, notes, or other health-record content.
6. Retention and deletion
We retain account, tracker, and settings information while your account is active, and only as long as needed to provide the service, resolve a request or dispute, maintain security, or meet legal obligations. Lemon Squeezy may retain payment records under its own policies and legal obligations.
You can request account deletion from Account Settings. Deleting an account removes the account-linked records from Peppy Diary's active application database and ends access, subject to an active subscription needing to be cancelled first. We take steps to delete linked progress photos from private storage; limited technical deletion records may be kept temporarily while cleanup completes. De-identified or aggregated information may be retained only where it cannot reasonably identify you.
7. Your choices and rights
You can review and update information in the app, disconnect Telegram, manage a subscription through the available billing flow, and request access, correction, export, deletion, or information about processing by emailing support@peppydiary.com from the account email address. We may need to verify your identity before completing a request. You may also decline or withdraw non-essential measurement consent without losing necessary service functions.
8. International transfers
Our providers may process information in countries other than the one where you live. When information is transferred, we use providers and safeguards appropriate to the service and applicable requirements. Their processing is also subject to their own terms and privacy practices.
9. Children
Peppy Diary is for adults age 18 and older only. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information, contact support@peppydiary.com so we can review and remove it.
10. Changes and contact
We may update this Privacy Policy when the service or our practices change. The effective date will appear at the top of the policy. For questions or privacy requests, email support@peppydiary.com or visit the Contact page.