Privacy Policy — Peptide Journal

1. Who we are

Peptide Journal is published by YATOFIX. For privacy questions, contact [email protected].

2. Local storage and private iCloud sync

The app keeps a local SwiftData copy of your journal so it can work offline. When iCloud is available, trackers and entries are configured to synchronize with a private CloudKit database associated with your Apple account. The saved journal is not hosted on a YATOFIX backend; optional import uses the temporary service described below. The app stores:

• Trackers you create (peptide name, dose, unit, interval, reminder time, status such as active / paused / archived).
• Journal entries you log (taken, skipped, time, amount, and any notes).
• Preferences (reminder on/off, whether notifications may include peptide names, discreet mode, Face ID lock, audience measurement choice, onboarding state).
• Information about the next scheduled dose, copied to a shared container on the device for the widget; it stays on the device.
• Local technical flags needed to run the app.

Tracker and journal records, including associated identifiers and dates, may be sent to Apple for this synchronization in the iCloud.com.medsamir.PeptideJournal container. App preferences stay local. Offline changes wait for network and iCloud availability. The existing journal is not sent to YATOFIX for synchronization or to RevenueCat. Only items you select for optional import are sent for analysis.

Private means the database is associated with your Apple account; it is not a guarantee that all of its fields are end-to-end encrypted. Protection and availability depend on Apple's services and your account settings. Synchronization is not an independent backup.

3. Notifications, widget and lock

Reminders are optional. You can use the journal without enabling them. If you enable reminders, Apple delivers local notifications on your device. If you allow peptide names in notifications, those names can appear on the Lock Screen. You can change or disable this in Settings and in iOS Settings. A notification may offer an action to log the dose directly; this action is processed locally on the device, like an entry made in the app.

The Home Screen and Lock Screen widget shows the next dose using data stored locally in a shared container on the device. On the Lock Screen, this information may be visible without unlocking the device; discreet mode lets you hide peptide names.

The Face ID lock is optional. Authentication is handled by iOS: the app only receives the result of the check and receives no biometric data.

4. Purchases and RevenueCat

Premium is sold as Apple In-App Purchase. Apple processes the payment. We use RevenueCat to check whether your purchases have an active entitlement (monthly, yearly, or lifetime) and to restore purchases. RevenueCat may process purchase history, product identifiers, subscription status, and an anonymous app user ID for app functionality. Peptide names, doses, and journal timestamps are not sent to RevenueCat. Selected import content is processed separately with your permission.

5. What we do not collect

• No YATOFIX app account and no email sign-in. iCloud uses the Apple account on your device.
• No HealthKit, no Clinical Records, no motion/health sensors.
• No advertising network and no ads in the app, no App Tracking Transparency prompt. YATOFIX does not link app data with other companies’ data for advertising purposes.
• No biometric data: the Face ID lock is handled by iOS.
• No Microsoft Clarity recording without your consent (see “Audience measurement”).
• Built-in product logs, if any, do not include peptide names, doses, or journal times.

6. Third parties

• Apple: private iCloud/CloudKit storage and synchronization, App Store, In-App Purchase, Restore, subscription management, operating-system notifications, and Face ID.
• RevenueCat: entitlement and purchase status, as described above.
• OpenAI (OpenAI, L.L.C., United States): AI analysis of only the notes and files selected for optional import, with your explicit permission.
• Microsoft (Microsoft Corporation): Microsoft Clarity audience measurement, only with your consent.
• Cloudflare: secure routing and network protection for requests to our server (import and anonymous counters).

Those parties apply their own privacy policies to data they process.

Optional import: online analysis

With your explicit permission on the import screen, YATOFIX sends only the selected text, photos and documents, plus language and time zone, to its server and then to OpenAI, the AI analysis provider. This content may include substance names, quantities, dates, notes, weights and health information. Your already saved journal is not sent.

The purpose is to propose journal entries for your review before saving. Based on your notes, the server may also generate clarifying questions and suggest trackers: nothing is saved to your journal without your confirmation. Online import is optional; manual entry remains available. You may refuse transfer, cancel an analysis or stop using this feature. Accepting the terms does not replace the specific permission for this transfer. Legal basis: your explicit consent, which you may withdraw at any time for future transfers.

Temporary conversion files are deleted after processing. Analysis results remain in our server’s memory for at most ten minutes. Public app-verification keys, counters and technical quotas are stored separately without your notes. Technical durations and error codes do not include this content. Cloudflare carries HTTPS requests and applies network protection.

Analysis is performed by OpenAI, L.L.C. (United States) through its Responses API, using a GPT-6 family model as of the date of this policy. Requests are sent with the “store: false” setting, which asks OpenAI not to store the response for later reuse through the API. Under OpenAI’s policy, data sent through the API is not used to train its models by default. OpenAI may nevertheless retain submitted content for up to 30 days to detect and prevent abuse, under its terms. We therefore do not promise zero retention by this provider, and deletion on our servers does not cause immediate deletion by it.

This processing takes place outside the European Economic Area, in the United States. According to the provider’s commitments, these transfers rely on the European Commission’s standard contractual clauses or on the EU-U.S. Data Privacy Framework where it applies. We do not promise exclusively European hosting. Contact YATOFIX with any question about these safeguards, before transfer if needed.

Access, correction, deletion, withdrawal of consent and questions: [email protected]. You may also contact the competent data-protection authority, including the CNIL in France.

OpenAI’s commitments for API data

Audience measurement

Microsoft Clarity. Only if you agree, the app records pseudonymized sessions and interactions (taps and navigation between screens) with Microsoft Clarity, a service of Microsoft Corporation, to improve the app. Clarity assigns a random technical identifier that is not linked to your name or your Apple account. You are asked on the first screen, with two equally weighted choices, and you can change your choice at any time in the app’s Settings, under Privacy. Nothing is recorded before you agree. Input fields and screens containing health data (doses, peptide names, notes, history) are masked and are not recorded. Withdrawing your consent stops future recording and does not affect your access to the app. Legal basis: your consent. Microsoft processes this data under its own terms and privacy statement, including outside the European Economic Area.

Anonymous onboarding counters. If you have not accepted Microsoft Clarity, or have not answered yet, the app sends our server the name of an onboarding step (for example “welcome screen viewed” or “trial started”) and the app language. The server keeps only a total per day, per step and per language. It keeps no IP address, no device identifier and no health data, and none of this data can identify a person. Purpose: aggregated measurement of the onboarding flow. Legal basis: our legitimate interest in improving the app, as this is strictly aggregated audience measurement. Like any HTTPS request to our server, this request passes through Cloudflare.

Microsoft privacy statement

7. Retention and deletion

You can permanently delete a tracker and its entries in the app. When synchronization is available, that deletion is intended to propagate to your other devices through CloudKit; an offline deletion waits for the next synchronization. Archiving is not deletion.

Deleting the app removes its local copy but does not necessarily delete iCloud data, which may return after reinstallation. Also manage the app's iCloud data through the Apple settings available on your device. YATOFIX does not host your journal and cannot remotely export or reconstruct it. Purchase records are subject to Apple's and RevenueCat's retention rules; deleting the app does not cancel a subscription. Contact [email protected] for questions.

8. Children

Peptide Journal is not directed at children. Do not use it if you are under 13, and do not store another person’s health-related information in the journal.

9. Changes

If this policy changes, we will update this page and the date above.

10. Related documents

Terms of Use, Support, and Data details are linked from this project’s page on yatofix.com.