Privacy Policy

1. Information We Collect

When you use The Peptide Volt, we collect the following information:

• Account Information: Email address, display name, and authentication credentials managed through Firebase Authentication.
• Research Data: Any data you voluntarily enter, including peptide selections, injection logs, vial records, dosing protocols, body metrics, and notes.
• Usage Data: Basic usage information such as login timestamps and last active dates to maintain account security.
• Health Metrics and Lab Data: Any health measurements, body metrics, or lab result values you voluntarily enter into the platform.
• Referral Attribution: If you arrived via a referral link or marketing campaign, we record that attribution at registration for internal analytics only. This data is not shared with third parties.

2. How We Use Your Data

We use your information exclusively to:

• Provide and operate the platform and its features
• Authenticate your identity and protect your account
• Display your research data back to you within the platform
• Generate analytics and insights from your own data for your use
• Maintain platform security and integrity

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored securely using the following services:

• Firebase Authentication: Manages user authentication securely with industry-standard encryption.
• Cloud Firestore: Stores your research data with Firestore Security Rules that ensure each user can only access their own data.
• HTTPS: All data is transmitted over encrypted connections.

We implement role-based access control and audit logging for administrative actions to maintain platform integrity.

4. Third-Party Services

We use the following third-party services:

• Google Firebase: Authentication and database services. Subject to Google's Privacy Policy.
• Payment Processor: Stripe handles Premium subscription payments. Stripe's own privacy policy governs all payment data. We do not store card details on our servers. See Stripe's Privacy Policy.
• Email Delivery Service: We use a third-party service to send transactional emails such as welcome messages, account notifications, and digest emails. Your email address is shared with this service for delivery purposes only.
• Rate-Limiting Service: A third-party service enforces fair-use limits on certain platform features by storing temporary request counts. No personal data is retained beyond the rate-limit window.
• Hosting Provider: Our platform runs on third-party hosting infrastructure. Server access logs may include IP addresses, retained in accordance with the provider's data processing terms.

5. Push Notifications

If you opt in to push notifications, we store your device push subscription endpoint in your account profile. This endpoint is used solely to deliver dose reminders you have chosen to receive. It is removed from your profile when you revoke notification permission, log out, or delete your account.

6. Progress Photos

Progress photos you upload are stored in secure cloud storage and are accessible only to you. Photos are permanently deleted when you remove them from the platform or close your account.

7. Your Rights

You have the right to:

• Access your personal data stored on the platform
• Update or correct your account information through the Settings page
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time

To exercise these rights, contact us through our contact page.

Account data is deleted within 30 days of a confirmed account deletion request.

8. Cookies & Local Storage

We use essential cookies and local storage for authentication session management and platform functionality (such as maintenance mode bypass). We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, please visit our contact page.