Data — Peptide Journal

On your iPhone or iPad

Peptide names you select or type, doses, units, intervals, taken/skipped entries, timestamps, reminder preferences, notification presentation preferences, discreet mode, Face ID lock, and your audience measurement choice.

For the Home Screen and Lock Screen widget, information about the next dose is copied to a shared container on the device; discreet mode lets you hide names on the Lock Screen. A notification action to log a dose is processed locally. Face ID is handled by iOS: the app receives no biometric data.

Apple iCloud / CloudKit synchronization

Tracker and journal records, including identifiers, dates, and any notes, may synchronize in the private iCloud.com.medsamir.PeptideJournal CloudKit container associated with your Apple account. Preferences stay local. The journal works offline; changes wait for iCloud availability. A private database alone does not guarantee end-to-end encryption of every field.

Apple purchases and RevenueCat

Purchase history, product IDs, subscription or lifetime entitlement status, and an anonymous app user ID, so Premium can be unlocked and restored. No journal contents.

Optional import: online analysis

With your explicit permission on the import screen, YATOFIX sends only the selected text, photos and documents, plus language and time zone, to its server and then to OpenAI, the AI analysis provider. This content may include substance names, quantities, dates, notes, weights and health information. Your already saved journal is not sent.

The purpose is to propose journal entries for your review before saving. Based on your notes, the server may also generate clarifying questions and suggest trackers: nothing is saved to your journal without your confirmation. Online import is optional; manual entry remains available. You may refuse transfer, cancel an analysis or stop using this feature. Accepting the terms does not replace the specific permission for this transfer. Legal basis: your explicit consent, which you may withdraw at any time for future transfers.

Temporary conversion files are deleted after processing. Analysis results remain in our server’s memory for at most ten minutes. Public app-verification keys, counters and technical quotas are stored separately without your notes. Technical durations and error codes do not include this content. Cloudflare carries HTTPS requests and applies network protection.

Analysis is performed by OpenAI, L.L.C. (United States) through its Responses API, using a GPT-6 family model as of the date of this policy. Requests are sent with the “store: false” setting, which asks OpenAI not to store the response for later reuse through the API. Under OpenAI’s policy, data sent through the API is not used to train its models by default. OpenAI may nevertheless retain submitted content for up to 30 days to detect and prevent abuse, under its terms. We therefore do not promise zero retention by this provider, and deletion on our servers does not cause immediate deletion by it.

This processing takes place outside the European Economic Area, in the United States. According to the provider’s commitments, these transfers rely on the European Commission’s standard contractual clauses or on the EU-U.S. Data Privacy Framework where it applies. We do not promise exclusively European hosting. Contact YATOFIX with any question about these safeguards, before transfer if needed.

Access, correction, deletion, withdrawal of consent and questions: [email protected]. You may also contact the competent data-protection authority, including the CNIL in France.

OpenAI’s commitments for API data

Audience measurement

Microsoft Clarity. Only if you agree, the app records pseudonymized sessions and interactions (taps and navigation between screens) with Microsoft Clarity, a service of Microsoft Corporation, to improve the app. Clarity assigns a random technical identifier that is not linked to your name or your Apple account. You are asked on the first screen, with two equally weighted choices, and you can change your choice at any time in the app’s Settings, under Privacy. Nothing is recorded before you agree. Input fields and screens containing health data (doses, peptide names, notes, history) are masked and are not recorded. Withdrawing your consent stops future recording and does not affect your access to the app. Legal basis: your consent. Microsoft processes this data under its own terms and privacy statement, including outside the European Economic Area.

Anonymous onboarding counters. If you have not accepted Microsoft Clarity, or have not answered yet, the app sends our server the name of an onboarding step (for example “welcome screen viewed” or “trial started”) and the app language. The server keeps only a total per day, per step and per language. It keeps no IP address, no device identifier and no health data, and none of this data can identify a person. Purpose: aggregated measurement of the onboarding flow. Legal basis: our legitimate interest in improving the app, as this is strictly aggregated audience measurement. Like any HTTPS request to our server, this request passes through Cloudflare.

Microsoft privacy statement

Not used

Advertising, an advertising network, an App Tracking Transparency prompt, HealthKit, biometric data, a YATOFIX journal backend, and an app-account profile.

Deletion

Delete a tracker and its entries in the app, then allow the deletion to synchronize. Deleting the app does not necessarily remove iCloud copies and does not cancel a subscription. Data may return after reinstallation if it still exists in iCloud. Email [email protected] for purchase or policy questions.