Privacy Policy

Provider

PepLoom is developed and operated by Charbel Samaha (“we”, “us”). The App Store lists the seller account through which the app is distributed.

Contact

csamaha655@gmail.com

Governing law

This policy is governed by the laws of Lebanon. This does not limit any rights you have under the data-protection laws of the place where you live.

Effective date

16 October 2026

Summary

We do not show ads. We do not use advertising identifiers, analytics SDKs or tracking SDKs. We do not sell your data. PepLoom does not read Apple Health or use your camera, contacts or location.

1.Records stored on your iPhone

What: these are the records you enter:

• Peptide or medication names you type or pick from the built-in name list
• Schedules: amounts, units, days, times, start and end dates, pauses, and your own instructions or notes
• Dose records: taken or skipped, the actual amount and time, notes, and optionally an injection location pinned on a front or back body illustration
• Stacks, which are groups you create
• Journal check-ins, made of a mood rating and an optional note
• Vial inventory: name, remaining amount and expiry date
• Weight entries: your weight, the unit you used, and the date and time
• Reminder preferences

Where: these records are saved in PepLoom’s private app storage on your iPhone, using iOS file protection. When a restore or replacement would overwrite your records, PepLoom first keeps a copy of the earlier file in protected app storage (“Previous saved files”).

Device backups: PepLoom excludes your records from iCloud Backup and from computer backups of your iPhone. To move your records to a new iPhone, use PepLoom’s optional private cloud backup (Section 3), or export a JSON file and restore it on the new device (Section 6).

We do not receive these records. They leave your iPhone only when:

• you export or share a file (Section 6), or
• you turn on optional cloud backup (Section 3).

During the introduction, PepLoom may ask “What brings you here?” Your answer is optional. It only changes the introduction text on your device and is not sent to us or to RevenueCat.

2.Purchases (Apple and RevenueCat)

PepLoom requires a paid plan (monthly, yearly or lifetime) to use its tracking features. Apple processes all payments. We never receive your card or bank details. Apple’s privacy policy governs Apple’s processing.

We use RevenueCat, Inc. to validate purchases, check subscription status, restore purchases and see aggregate purchase reporting. RevenueCat acts as our service provider (data processor). When you open the app or make or restore a purchase, the RevenueCat SDK sends RevenueCat:

• an anonymous app user identifier, generated randomly by the SDK and not based on your name, email or Apple Account
• purchase and transaction information from the App Store, such as product, purchase date, expiry, trial status and the App Store receipt or transaction record
• technical request information: device model, operating system version, app version and build, preferred languages, App Store country, and Apple’s identifier for vendor (IDFV). IDFV is a device identifier specific to apps from the same developer. It is not the advertising identifier. RevenueCat’s servers also see your IP address as part of the connection.

We do not request or use the advertising identifier (IDFA). We set up the SDK with its attribution-related automatic device-identifier collection and its SDK diagnostics turned off, and we do not set custom attributes. RevenueCat retains purchase records under its own privacy policy.

PepLoom never sends RevenueCat your peptide names, amounts, notes, injection locations, journal entries or any other health record. We use purchase information to give you access to the plan you bought and to understand purchases in aggregate. We do not use it for advertising.

3.Optional private cloud backup

Cloud backup is off unless you turn it on. PepLoom works fully on your iPhone without it.

How you sign in

You sign in with Sign in with Apple. PepLoom does not request your name or email address from Apple. Our server stores Apple’s stable identifier for your PepLoom sign-in, which is an opaque identifier and not your Apple Account email. It also stores an account number that we generate.

What is sent, and when

Nothing is uploaded until you turn on backup. You can turn it on in two places: on the optional last page of the welcome screens, which shows this notice above the “Continue with Apple” button, or later in Settings → Private cloud backup, where signing in alone never uploads anything until you choose to back up. The notice reads:

“When you choose to back up, PepLoom sends a complete copy of your records — schedules, dose records, injection locations, notes, journal check-ins, weight entries and inventory — to PepLoom’s private server, operated on Cloudflare. It is linked to your Sign in with Apple account, encrypted in transit and stored by Cloudflare, but it is not end-to-end encrypted. PepLoom does not ask Apple for your name or email. Your iPhone keeps its own copy and works offline. You can erase the cloud copy or delete your cloud account at any time. Deleted data may persist in Cloudflare’s infrastructure backups for a limited period.”

After that, while the app is open, PepLoom keeps the cloud copy up to date with your iPhone. Copies that differ are never merged silently. You choose which version to keep, and PepLoom saves the other version as a file on your iPhone.

What our server stores for your account

• the backup copy itself, limited to 1 MiB
• its size, a SHA-256 checksum, a revision number and the time it was last updated
• sign-in sessions, stored only as one-way hashes of the session token, with a 30-day expiry. At most 20 sessions are kept per account.
• records of recent changes (operation IDs, checksums and revision details, but no record content) for your latest 1,024 changes, used to prevent duplicate uploads

Abuse protection

To protect the service from abuse, such as repeated sign-in attempts, our server and Cloudflare may process technical data such as your IP address transiently. We do not use it to identify or locate you, and we do not add it to your account or your backup.

Who operates it

We operate the server. Cloudflare, Inc. hosts it as our infrastructure provider, using Cloudflare Workers and D1 on Cloudflare’s Workers Free plan. The backup database is hosted in Cloudflare’s Western Europe region. Request logging for the PepLoom server is turned off. Cloudflare may still process connection metadata to operate and protect its network under its own privacy policy.

We do not view the contents of your backups. Access is limited to what is technically necessary to operate, maintain and secure the service, or where required by law. We do not use your records for advertising, marketing or data mining, and we do not sell them.

Security

Data is encrypted in transit with HTTPS. Access is limited to sessions belonging to your account. On your iPhone, the session token is stored in the iOS Keychain on that device only and is not synced. The backup is not end-to-end encrypted.

Availability

The service runs on a free hosting tier. It may be unavailable or rate-limited at times. Your iPhone keeps working, and pending changes are retried later. If your records are larger than 1 MiB, cloud backup pauses and you can still export them as a file.

Your controls (available without a paid plan)

• Sign out. This removes the session from your iPhone. Your local records and the cloud copy are kept.
• Erase cloud copy. This deletes the backup content from our active database. Your local records are kept.
• Delete cloud account. This erases the backup, then deletes your account, sessions and change records. For about five minutes after deletion, a one-way hash of your Apple identifier is kept so that sign-in requests started before the deletion cannot recreate the account. It is then removed automatically.
• Sign in with Apple link. If deletion could not also revoke PepLoom’s Sign in with Apple authorization automatically, the app tells you, and you can remove it yourself (see the support page). PepLoom says revocation was automatic only when Apple confirmed it.

Erasing all local records first signs you out of cloud backup on that iPhone. It does not delete the cloud copy. Erase the cloud copy separately if you want it gone.

4.Reminders (notifications)

Reminders are optional, and iOS asks for permission only when you turn them on. They are local notifications scheduled on your iPhone. We do not send them from a server. By default their text is generic (“Your PepLoom check-in” and the scheduled time) and does not include peptide names or amounts. If you turn on Show peptide names in Settings, reminders show the peptide name and amount, including on your Lock Screen. You can turn reminders off in PepLoom or in iOS Settings.

5.Widgets

PepLoom’s Home Screen and Lock Screen widgets read a small summary file that the app writes to a protected shared container on your iPhone. The file contains only:

• today’s and tomorrow’s scheduled and recorded counts, and whether a schedule pause covers them
• your recording streak
• the names and times of your next doses that are not yet recorded, and how many are due at each time
• whether your plan is active, and when access expires
• your time zone and the boundaries of the current day

The Home Screen widget shows counts and your streak, without names. The Lock Screen widget shows the name and time of your next dose; iOS hides the name while your iPhone is locked. The file does not include amounts, notes or injection locations. It uses iOS file protection, is excluded from device backups, and never leaves your iPhone.

6.Exports and files you share

You can export all records as JSON, your dose history as CSV, or a PDF dose record, from Settings or from “Your records” on the plans screen, even without a paid plan. Exported files are not password protected. A file leaves the app only when you pick a destination in the iOS share sheet. After that, the destination’s terms apply, and we cannot delete copies you saved or shared. Restoring a JSON backup is checked on your iPhone and needs your confirmation.

7.What we do not do

• No advertising, ad networks or advertising identifier (IDFA)
• No analytics, crash-reporting or tracking SDKs. The only third-party SDK is RevenueCat, for purchases.
• No selling or renting of personal data
• No use of your records for advertising, marketing, profiling or data mining
• No access to Apple Health (HealthKit), camera, microphone, contacts, photos or location
• No medical advice, dose calculations or treatment recommendations

8.Why we process data (legal bases)

Where applicable data-protection law requires a legal basis for processing personal data (for example, the EU or UK GDPR), we rely on the following:

• Purchases: to perform our contract with you, which means providing the plan you bought, and our legitimate interest in preventing fraud and understanding purchases in aggregate.
• Cloud backup: your explicit consent, given when you choose to back up records that may relate to your health. You can withdraw consent at any time by erasing the cloud copy or deleting your cloud account. Withdrawal does not affect processing that happened before it.
• Security and abuse protection: our legitimate interest in keeping the service available and secure.

9.How long we keep data

10.Where data is processed

Records you keep only on your iPhone stay on your device. If you turn on cloud backup, the backup database is hosted in Cloudflare’s Western Europe region. Cloudflare’s network may carry and process requests in other countries where it operates. Apple and RevenueCat may process purchase information in the United States and other countries where they or their subprocessors operate.

These providers describe the safeguards they use for international transfers, such as standard contractual clauses, in their own privacy policies and data processing terms: Cloudflare, RevenueCat and Apple.

11.Your rights and choices

• Access and portability: export all your records in the app as JSON or CSV at any time, even without a paid plan.
• Deletion: use Settings → Erase all local records. For cloud backup, use Erase cloud copy or Delete cloud account. These work without a paid plan.
• Withdraw consent (cloud backup): sign out, erase the cloud copy, or delete your cloud account.
• Purchases: manage or cancel subscriptions in your Apple Account settings, or with “Manage subscriptions” in the app. Erasing records does not cancel a subscription. To ask us to delete the purchase data RevenueCat holds for you, contact us and include your Apple order ID from your App Store receipt email, so we can find the anonymous record.
• Notifications: turn reminders off in the app or in iOS Settings.

Depending on where you live, you may have rights to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to complain to a data-protection authority. Contact us at csamaha655@gmail.com. We aim to respond within 30 days.

12.Children

PepLoom is intended for adults aged 18 and over. It is not directed to anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has used cloud backup, contact us and we will delete that account.

13.Security

We use iOS file protection for records on your device, the iOS Keychain for cloud session tokens, HTTPS for network traffic, and hashed session tokens on the server. No method of storage or transmission is completely secure. Protect your device with a passcode.

14.Changes to this policy

We will post updates on this page and change the effective date. If a change materially affects how we handle data you have already provided, we will tell you in the app before it takes effect.

15.Contact

Charbel Samaha
Email: csamaha655@gmail.com

For help using the app, see PepLoom Support. Our Terms of Use also apply.