--- title: "Consumer Health Data Privacy Policy · Peptyn" description: "Peptyn's consumer health data policy for Washington, Nevada and Connecticut: what counts as health data here, and your rights over it." canonical: "https://peptyn.orlyn.ai/legal/health-privacy" last-updated: "2026-08-16" --- # Consumer Health Data Privacy Policy *Peptyn's consumer health data policy for Washington, Nevada and Connecticut: what counts as health data here, and your rights over it.* Effective date: August 6, 2026 · Last updated: August 6, 2026 The short version: your health data stays on your iPhone and we never receive it. We have no server that stores it, we do not sell it, and we do not share it for advertising. Health content leaves your device only when you make it: a question you type to the AI assistant or a vial photo you scan, processed transiently in the EU to answer you and not retained; or a CSV of your own dose, mix, and weight history that you export from Settings and send wherever you choose, which goes straight to that destination and never to us. ## Scope and who we are This policy describes how we handle "consumer health data" as defined by the Washington My Health My Data Act and similar laws in other states, such as Nevada and Connecticut. It supplements our general [Privacy Policy](https://peptyn.orlyn.ai/legal/privacy) and applies to everyone who uses the Peptyn iOS app or this website, wherever you live. Peptyn ("we", "us") is a trading name of Luca Diaz Hilterscheid, operating as a sole proprietor (Einzelunternehmer) under the laws of the Federal Republic of Germany, Märkische Heide 5, 14532 Kleinmachnow, Germany. For everything in this policy, contact [privacy@orlyn.ai](mailto:privacy@orlyn.ai). ## Categories of consumer health data - **Entries you make in the app.** Protocols, dose logs, injection sites, vial inventory, weight, and goals. These are stored only in an on-device database and file storage on your iPhone. They are never transmitted to us and we have no server that stores them or account system that could link them to you. You can export your dose, mix, and weight history to a CSV file from Settings; that file is created on your device and shared only with the destination you pick, never with us. - **AI assistant questions and vial photos.** If you actively ask the assistant a question or scan a vial label, the text or photo is processed transiently by our AI provider, Microsoft Azure AI, in an EU region, solely to generate the response. We do not store it, and it is not used to train any model. - **Analytics events.** Occurrence-only events (which screen was viewed, which button was tapped, drawn from fixed lists of names). They never contain compound names, doses, weights, photos, or anything you type, and you can switch them off in Settings at any time. - **Crash data.** Technical crash reports (stack trace, device model, OS version, app version), scrubbed of compound names and health terms before sending. ## Sources We collect this data from three sources only: information you enter in the app, photos you take with your device's camera, and technical information generated by your device. We do not obtain consumer health data about you from anyone else. ## Why we collect it Solely to provide the features you ask for: recording and charting your entries on your device, answering the question you asked, reading the label you scanned, and keeping the app working. We do not use consumer health data for advertising, profiling, or any secondary purpose. ## How it is shared We share data only with processors that act on our instructions under contract, and only to run the feature you are using: Microsoft Azure AI (EU region, assistant and vial scanner), PostHog (EU-hosted, analytics events without health content), and Sentry (EU-hosted, scrubbed crash reports). We do not sell consumer health data, we do not share it with advertisers or data brokers, and we have no affiliates that receive it. ## Retention Data you enter stays on your device until you delete it; we cannot retain what we never receive. AI assistant requests are not retained by us; Microsoft may hold a transient copy for up to 30 days solely for platform abuse monitoring, per its terms. Analytics events are deleted within 12 months and crash reports after 90 days. ## Your rights and how to exercise them You have the right to access the consumer health data we hold about you, to have it deleted, and to withdraw any consent you have given. To exercise any of these rights, email [privacy@orlyn.ai](mailto:privacy@orlyn.ai). We will respond within 45 days. Because we do not require an account, we may ask you for your purchase email or device identifier to locate the little data our providers hold; we will never ask you to send us health entries to process a request. **Appeals.** If we decline your request, you can appeal by replying to our response with the word "appeal". We will review the appeal and answer within 45 days with a written explanation. If you are not satisfied with the outcome, you may raise your concern with your state Attorney General (in Washington, at [atg.wa.gov/file-complaint](https://www.atg.wa.gov/file-complaint)). **Data on your device.** Everything you enter in Peptyn is under your direct control: you can delete any entry in the app, a logged dose can also be edited from the History screen, and deleting the app removes all of it from your device at once. No request to us is needed. ## Changes We may update this policy as the app evolves. Material changes will be posted here with a new date. ## Contact Questions and requests about consumer health data: [privacy@orlyn.ai](mailto:privacy@orlyn.ai). --- Source: