PEP Social
Consumer Health Data Privacy Policy
Effective 1 September 2026
This policy is published by PEP Social, LLC under the Washington My Health My Data Act (RCW 19.373) and comparable consumer health data laws in Nevada and Connecticut. It describes only our handling of consumer health data and the rights you have over it. Our general Privacy Policy covers everything else.
Contents
1. Categories of consumer health data we collect, and why
We collect the following categories of consumer health data. Everything in this section is provided by you, and most of it is optional.
| Category | Examples | Purpose, and how it is used |
|---|---|---|
| Health interests and goals | Goals such as fat loss, recovery or longevity; what you find difficult; your stated experience level with peptides; how you describe yourself | To personalise the posts, topics and people shown in your feed. Collected during onboarding; you may skip any question. |
| Demographic data linked to health | Date of birth, gender | Date of birth is used to enforce our 18+ age requirement. Gender is optional and used only to personalise your feed. |
| Content you choose to publish | Posts, comments and videos describing compounds you have used, doses, protocols, duration, outcomes and side effects | To operate the community. Anything you post is public and visible to anyone, including people without an account. |
| Private dose and supply logs | Compound, vial strength, dose taken, injection site, how you felt, dates, remaining supply | To power the in-app Tracker and dose reminders. Private to you. Never shown to other members. |
| Questions you ask our AI assistant | Anything you type to Peppy, which may describe your health, symptoms or protocols | To generate an answer, and to enforce a daily usage limit. |
| Inferences from your use of the app | Which compounds and topics you view, save or search for | To rank your feed. Under Washington law, seeking information about health supplies is itself consumer health data. |
2. Where we collect it from
- Directly from you — onboarding answers, your profile, posts, comments, videos, messages, Tracker entries, and questions to the AI assistant.
- From your activity in the app — what you open, save, search and view.
We do not buy consumer health data, and we do not obtain it from data brokers or advertising networks.
3. Categories we share
We share only what is necessary to run the service:
- Content you publish — posts, comments and videos are shared publicly by design, because you chose to publish them.
- Questions you ask the AI assistant — sent to our AI provider to generate a response.
- All categories above — stored by our hosting and infrastructure providers on our behalf.
Your private Tracker logs are never shared with other members, and never with advertisers. They are visible only to you and, to the extent they are stored, to our hosting provider acting on our instructions.
4. Third parties and affiliates we share it with
PEP Social, LLC has no affiliates. We share consumer health data with the following categories of third parties, each acting as a service provider on our behalf and contractually restricted to that purpose:
| Category | Provider | What it receives |
|---|---|---|
| Cloud hosting & database | Supabase, Inc. | All categories listed in section 1, stored on our behalf |
| AI assistant provider | OpenAI, L.L.C. | Only the questions you send to the AI assistant, and the peptide reference notes used to answer them |
| Video hosting | Cloudflare, Inc. | Only videos you publish |
| Error monitoring | Functional Software, Inc. (Sentry) | Crash and error diagnostics, not the contents of your health data |
| App distribution & payments | Apple Inc. | Subscription and purchase information. Apple does not receive your health data from us. |
We do not share consumer health data with advertisers, data brokers, analytics networks or social platforms. We will disclose data if legally compelled, and we will notify you unless prohibited from doing so.
5. We do not sell consumer health data
PEP Social does not sell consumer health data, and has never sold it. We do not offer it in exchange for money or anything else of value. If that ever changed, Washington law would require us to obtain your separate, written, signed authorization first — we would ask you explicitly, and you could refuse.
6. Your rights and how to exercise them
You have the right to:
- Confirm and access — find out whether we collect, share or sell consumer health data about you, and get a copy of it.
- Withdraw consent — withdraw your consent to our collection and sharing of your consumer health data.
- Delete — have your consumer health data deleted. When we delete it, we also instruct our service providers to delete their copies.
In the app
- Withdraw consent: Settings → Privacy → Health data consent.
- Delete everything: Settings → Account → Delete Account permanently deletes your account, posts, comments, messages, Tracker logs and stored files.
By email
Email support@pepsocialapp.com with the subject line "Health data request" and tell us which right you are exercising. Send it from the email address on your account so we can verify it is you; if we cannot verify you, we will tell you rather than act on the request.
We respond within 45 days. If we need more time we may take one further 45 days, and we will tell you within the first 45 why. There is no charge.
7. How to appeal a refused request
If we refuse a request, we will explain why in writing. You may appeal by replying to that email, or by emailing support@pepsocialapp.com with the subject line "Health data appeal". We respond to appeals in writing within 45 days.
If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
8. Changes to this policy
We will not collect, use or share categories of consumer health data, or use it for purposes, that are not described above without first updating this policy and obtaining your affirmative consent.
9. Contact
PEP Social, LLC
423 W Market St, Suite 4, Leesburg, VA 20176, United States
support@pepsocialapp.com