Your privacy
Consumer Health Data Privacy Policy
Effective date:
1. Who We Are and Scope
Blanket LLC owns and operates PepTrac. Our mailing address is 1209 Mountain Road Place Northeast #5747, Albuquerque, NM 87110, United States. Contact team@peptrac.app for consumer health privacy questions and requests.
This separate policy describes consumer health data collected through PepTrac, including data covered by Washington’s My Health My Data Act and Nevada’s consumer health privacy law. “Consumer health data” means information protected by those laws, including information linked or reasonably linkable to you that identifies your health status or health-related activities. Rights depend on the law that applies to you.
2. Categories of Consumer Health Data We Collect
Depending on what you enter, authorize, or request, we collect:
- Peptide, GLP-1, and other compound information; vial/inventory details; reconstitution records; protocols and schedules; dose amounts/history; routes; injection sites; and related notes.
- Age, sex or gender selection, height, current and goal weight, weight history, goals, and experience information linked to your health tracking.
- Nutrition and meal records, servings and nutrients, hydration, sleep, activity, exercise and workout records, and wellness or symptom information you choose to record.
- Health information contained in AI messages, selected images, voice recordings/transcripts, support communications, and feedback you choose to submit.
- Authorized Apple Health height, weight, steps, active energy, and walking/running distance. Height and weight are saved to your cloud account; the current activity flow reads activity values for local views and reports.
- Derived estimates and inferences, including nutrition estimates, calorie or nutrient targets, modeled level ranges, adherence, streaks, and inventory forecasts.
We do not use precise GPS location or healthcare-facility geofencing to identify or target people seeking health services. The current App does not connect to Android Health Connect.
3. Sources
Consumer health data comes from you through entries, settings, logs, messages, recordings, uploads, support requests, and feedback; from Apple Health when you authorize access; and from calculations or AI outputs generated from information you provide. We do not purchase health profiles from data brokers.
4. Purposes and Processing
We collect and process data to provide tracking, protocols, dose history, inventory, reminders, fitness, nutrition, wellness records, reports, calculators, and educational features you request; save and sync records; generate relevant estimates; deliver requested AI chat, image analysis, nutrition estimates, and transcription; maintain security and reliability; and respond to support/privacy requests.
Processing may involve reading, storing, organizing, computing, transmitting, and deleting information. Cloud storage and processing are used for account records. Some workout records, drafts, settings, reports, and activity values are processed or stored on your device.
We collect and share consumer health data to the extent necessary to provide a product or service you request, or with the separate consent required by applicable law. A general acceptance of this policy does not replace a required health-data consent or authorization. Access by our personnel is limited to necessary support, security, legal compliance, or another authorized purpose; we do not routinely review private chat content for product improvement.
5. Categories We Share and Recipients
| Recipient category and provider | Consumer health data involved and purpose |
|---|---|
| Cloud infrastructure: Supabase and Vercel | Saved tracking and chat records, uploaded images, and request information needed to store/sync your data, run the API, and deliver requested features. |
| AI processing: OpenAI | Messages and relevant conversation/tracking context, selected images, meal photos, food/serving descriptions, and voice recordings needed for the AI feature you request. Saved weight imported from Apple Health can enter AI chat context. |
| Notification delivery: Expo and applicable platform services, including Apple | Notification payloads you enable, which may reveal use of PepTrac or an activity/streak; device delivery information. Local reminders need not use cloud push delivery. |
| Email/support service providers | Health information you choose to include in a support/privacy message, to receive and resolve your request. Routine welcome emails do not include your tracking history. |
| Apple Health, when you authorize writes | Saved height and weight exported to Apple Health. |
| Recipients you choose | Information contained in a PDF report, shared workout image, or other output you direct us to share. |
| Other signed-in PepTrac users | Health information you choose to disclose in feature-request titles, descriptions, or comments. Do not post private health records there. |
Subscription providers do not receive your private tracking history as part of our subscription integration. Food-reference providers receive your food search text, identifiers, or barcodes without your PepTrac account identifier or tracking history; search text can itself reveal health-related interests.
Consumer health data may also be disclosed where applicable law permits or requires a valid legal or safety disclosure. If a business transfer occurs, the successor remains subject to applicable consumer health obligations. This policy does not establish a routine disclosure to affiliated businesses for their own use.
We do not sell or license consumer health data, share it for targeted advertising, use it for advertising, or train PepTrac-owned AI models on it. We do not authorize advertising trackers to collect consumer health data across websites or online services through PepTrac. Independent third-party services you choose to visit have their own practices.
6. Your Choices and Rights
Where applicable, you may request confirmation of collection/sharing/sale, access to your consumer health data, information about third-party recipients and required contact details, withdrawal of consent or cessation of specified processing, correction, and deletion. Washington and Nevada rights differ; we will apply the law governing your request.
You can edit or delete many records in the App. Delete Tracking Data removes supported tracking records while keeping the account/profile/settings and certain other records. Delete Account removes the account and associated active-system records. The PDF report is not a complete copy of every account record. For broader access, deletion, recipient information, or consent withdrawal, email team@peptrac.app with the subject “Consumer Health Data Request.”
Use your account email if possible and identify the request without sending unnecessary health details. We use proportionate identity checks and do not require you to create a new account. Authorized representatives may act where law permits, subject to identity/authority verification. We do not unlawfully discriminate against you for exercising these rights.
We respond within applicable legal deadlines. Washington consumer health requests ordinarily receive a response within 45 days of receipt, with a permitted additional 45 days explained before the original deadline. Nevada consumer health requests ordinarily receive a response within 45 days of authentication, with a permitted additional 45 days explained. Nevada consumer health deletion requests are acted on within 30 days of authentication, subject to legally permitted backup handling. Other laws may require a different period.
We notify relevant processors and recipients of deletion requests where required. Backup deletion may be delayed only as permitted by the applicable law; Washington limits qualifying backup delays to six months after authentication; Nevada permits qualifying backup delays of up to two years as necessary to restore archived or backup systems. Provider retention schedules do not override those obligations. Copies you independently share with a recipient may require a separate request to that recipient.
You can revoke Apple Health permissions in Apple Health or your device settings. The App’s Disconnect control stops automatic sync on that device but does not revoke the operating-system permission, delete previously imported records, or erase Apple Health source data. A manual sync can reconnect the integration. If you withdraw permission needed by a feature, that feature may no longer work.
7. Appeals
If we decline a consumer health request, reply to the decision or email team@peptrac.app with the subject “Consumer Health Privacy Appeal.” We will provide a written explanation within the applicable deadline. Washington appeals receive a response within 45 days; Nevada appeals receive a response within the period required by its law, ordinarily 45 days.
If we deny an appeal, we will provide the required regulator contact method. You may also contact the Washington Attorney General or Nevada Attorney General, as applicable.
8. Changes and Contact
We will update this policy when our consumer health practices change. Material changes receive appropriate notice, such as email or an in-App notice, before or when they take effect and earlier where required. We obtain any legally required consent or authorization before new processing begins; continued use alone is not a substitute.
Blanket LLC — Owner and operator of PepTrac
1209 Mountain Road Place Northeast #5747
Albuquerque, NM 87110, United States
Email: team@peptrac.app