Privacy Policy

Effective October 11, 2026 · Contact: jennyg.edits@gmail.com

This policy describes how PepCurious LAB ("we," "our") handles information when you use the PepCurious LAB web application. The app is a personal observation and tracking tool, not a healthcare provider or electronic medical record system.

Information we collect

• Account information: When you sign in through an available provider such as Google or Facebook, our authentication service processes an account identifier and, when provided and authorized, your email address, name, or basic profile details. Facebook sign-in may be limited to authorized testers until the feature is approved for public access. We do not request access to posts, friends, or contacts for sign-in.
• Information you enter: Compound/vial details, reconstitution details, journal dates, recorded amounts, observations, stacks, body measurements, and notes.
• Technical information: Hosting, authentication, and database providers may process technical logs, device/browser information, and IP addresses to operate and secure their services.

How information is used

We use information to authenticate your account, save and display your records, support exports, troubleshoot problems, maintain security, and respond to support or deletion requests. We do not use journal entries to provide medical diagnoses or treatment recommendations.

Service providers and storage

The app uses Google and (when enabled) Facebook as sign-in providers, Supabase for authentication and cloud database storage, and Netlify for website hosting. These providers process data as needed to deliver their services. Your cloud records are protected by account-based access controls, but storage is not end-to-end encrypted and no system can guarantee absolute security.

Sharing

We do not offer a feature that intentionally publishes your journal or measurements to other members. Information may be accessible to service providers operating the app, and may be disclosed if legally required or necessary to address abuse or security incidents. We do not claim that your records are protected under HIPAA.

Your choices and requests

You can export available records using the app's Privacy & backups section. To request access, correction, or deletion of your account and associated records, email jennyg.edits@gmail.com from your account email and describe your request. We may need to verify your identity before acting. Account deletion is currently handled manually by email request; there is no self-service deletion feature. We will verify your identity before processing the request. Backups and provider logs may have separate retention periods.

Retention

Records generally remain in your account until deleted or the service is discontinued. We have not established a fixed universal retention period; contact us to request deletion or ask about a specific record. Legal and operational obligations may require limited retention.

Age and sensitive information

The service is intended for adults 18 and older. Compound and body records can reveal sensitive health-related information. Please consider this before entering data; do not upload information you do not want stored in a cloud service.

Changes and contact

We may revise this policy as the service changes. The effective date above will be updated when material revisions are published. For privacy questions or requests, contact jennyg.edits@gmail.com.