--- title: "Privacy Policy · Peptyn" description: "How Peptyn handles data: no account, no Peptyn server holding your logs, and what the app does send. Your rights and choices are listed in full." canonical: "https://peptyn.orlyn.ai/legal/privacy" last-updated: "2026-08-16" --- # Privacy Policy *How Peptyn handles data: no account, no Peptyn server holding your logs, and what the app does send. Your rights and choices are listed in full.* Last updated: August 6, 2026 The short version: your health data (dose logs, protocols, injection sites, weight) is stored only on your device. We never receive it, never store it on our servers, and never sell it. Product analytics are anonymous, never include health data, and can be switched off in Settings at any time. Payments are handled by Apple or by our payment processor Stripe; we never see your card number. ## Who we are and what this covers Peptyn ("we", "us") provides the Peptyn iOS app, the peptyn.orlyn.ai website (including the quiz pages), and the web checkout. Peptyn is a trading name of Luca Diaz Hilterscheid, operating as a sole proprietor (Einzelunternehmer) under the laws of the Federal Republic of Germany, Märkische Heide 5, 14532 Kleinmachnow, Germany, who is the data controller for the processing described here. This policy covers the app and the website. You can reach us at [privacy@orlyn.ai](mailto:privacy@orlyn.ai). ## Your health data stays on your device Everything you enter into Peptyn is stored locally on your iPhone in an on-device database and file storage. This includes your protocols, dose logs, injection sites, vial inventory, weight entries, and goals. We have no server that stores this data, no account system that could link it to you, and no way to access it. It is included in your device's standard iCloud or Finder backups if you have those enabled, which are controlled by Apple and your device settings, not by us. Deleting the app removes this data from your device. App content leaves your device in only two ways, and we receive it in neither: when you actively use the AI assistant or vial scanner, described below, where nothing is stored; and when you tap Export CSV in Settings, which builds a file of your dose, mix, and weight history and hands it to the iOS share sheet so you can send it wherever you choose. That export goes straight from your device to the destination you pick. It never reaches us. Dose reminders are scheduled directly on your device by iOS. Reminder times and contents never reach us or any third party. ## Services we use, and what each one receives We use a small number of service providers. None of them receive your health data. For each one, here is what it processes, why we are allowed to (the GDPR lawful basis), and how long the data is kept. - **App Store subscriptions (Apple and RevenueCat).** Purchases made in the app are billed by Apple. RevenueCat processes your anonymous subscription status, tied to a random app-generated identifier, so paid features unlock and stay unlocked. No name, email, or health data is involved. Lawful basis: performance of our contract with you. Retention: for as long as needed to service your subscription, plus any period bookkeeping law requires. - **Web checkout (Stripe and RevenueCat).** If you buy a subscription on our website, payment is processed by Stripe, which receives your card details, name, email address, and billing country. We never see your full card number. We and RevenueCat receive your email address (to send your receipt and the link that activates your subscription in the app) and your purchase details. Stripe also acts as an independent controller for payment processing and fraud prevention under its own [privacy policy](https://stripe.com/privacy). Lawful basis: performance of contract, and legal obligation for transaction records. Retention: transaction records are kept for as long as tax and bookkeeping law requires; the email link data is kept only while needed to service your subscription. - **AI assistant and vial scanner (optional).** If you ask the assistant a question or scan a vial label, the text of your question (or the photo) is sent to our stateless endpoint and forwarded to our AI provider, Microsoft Azure AI, processed in an EU region, solely to generate the response. We do not store your messages or photos, and they are not used to train any model. Microsoft may hold a transient copy for up to 30 days solely for platform abuse monitoring, per its terms. Requests carry only a random app-generated device identifier, used for rate limiting and to confirm your subscription. Lawful basis: performance of contract (you ask, we answer). Retention by us: none. - **Product analytics (anonymous, with an off switch).** We use PostHog, hosted in the EU, to see how the app is used so we can improve it. It records which screens are viewed and which buttons are tapped, both drawn from fixed lists of screen and element names, plus the app version, the goal category you picked from the preset options, and whether a subscription is active, all tied to the same random app-generated identifier, with no name, email, or advertising ID. It never records compound names, doses, weights, schedules, photos, notes, or anything you type, and there is no capture beyond those fixed lists. You can switch analytics off at any time in Settings; collection stops immediately. Lawful basis: our legitimate interest in improving the app, which we can rely on because the data is anonymous, contains no health information, and comes with a one-tap opt-out (this is also your right to object, exercised directly in the app). Retention: raw events are deleted within 12 months; only aggregate statistics may be kept longer. - **Crash reporting (Sentry).** When the app crashes or hits an error, a technical report (stack trace, device model, OS version, app version) helps us fix it. Reports are scrubbed before sending: compound names and health terms are redacted, no personal identifiers are attached, and IP addresses are not stored. Lawful basis: our legitimate interest in keeping the app working. Retention: crash reports are deleted after 90 days. - **Advertising attribution (AppsFlyer).** To learn which ad campaigns bring people to Peptyn, we use Apple's privacy-preserving SKAdNetwork framework. Peptyn never accesses your device advertising identifier (IDFA) and shows no tracking prompt. AppsFlyer receives the anonymous, aggregate campaign numbers Apple reports through SKAdNetwork, plus generic events: install, and purchase with amount and currency, tied to a random SDK-generated identifier. No health data, no in-app behavior, and nothing that identifies you across other apps or websites. Lawful basis: our legitimate interest in measuring advertising with anonymous, aggregate data. Retention: attribution records are kept by AppsFlyer for up to 24 months. ## Ad measurement without tracking Peptyn measures its ad campaigns through Apple's SKAdNetwork, a privacy-preserving framework built into iOS that reports only anonymous, aggregate campaign numbers that cannot identify you or your device, together with the install and purchase events described above, which the AppsFlyer SDK sends against a random SDK-generated identifier. The app never reads your advertising identifier (IDFA), never shows Apple's tracking permission prompt, and does not track you across apps or websites. ## Website, cookies, and consent The peptyn.orlyn.ai website sets no analytics cookies. We count page views with PostHog (EU-hosted) in cookieless mode: it runs in memory only, records no form input, makes no session recordings, and cannot recognize you across pages or visits. Lawful basis: our legitimate interest in knowing whether the site works. If you chose "Continue without" on the quiz page, we skip even that count. Everything beyond this anonymous count loads only if you accept it in the consent banner: - **Web analytics (PostHog, EU-hosted).** Loads only after you accept. It records anonymous funnel events (for example "quiz started", "step completed") so we can improve the page. Your quiz answers stay in your browser and are never sent to us or included in any event. - **Advertising tools.** If we later add an advertising pixel (such as Meta's), it will also load only after you consent through the banner, and we will update this policy first. - **Strictly necessary.** The checkout page uses Stripe, which sets cookies needed for payment and fraud prevention. These are required to complete a purchase. Three things are stored in your browser's local storage rather than in cookies: your consent choice, your quiz answers so a reload does not lose them, and, if you accept analytics on the quiz page, PostHog's identifier keys for that page. Clearing your browser's site data removes all three. Declining changes nothing about what you can do on the site. You can change your choice any time via the "Privacy choices" link in the site footer. Lawful basis for funnel analytics and advertising on the website: your consent. ## International transfers We keep processing in the EU where we can: analytics and AI requests are processed in EU regions. Some providers (Apple, Stripe, RevenueCat, AppsFlyer, Sentry) may process limited data in the United States or other countries. Where that happens, transfers are protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. ## Your rights Your health data lives only on your device, so you control it directly: you can delete any entry in the app, a logged dose can also be edited from the History screen, and deleting the app erases everything at once. For the limited data our providers handle (subscription status, web purchase records, anonymous analytics, attribution), you have rights under the GDPR and UK GDPR: access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time without affecting past processing. The fastest way to object to analytics is the Settings toggle in the app; it stops collection immediately. You can also complain to your local data protection authority (in the UK, the ICO). To exercise any right, email [privacy@orlyn.ai](mailto:privacy@orlyn.ai). We do not require an account, so we may ask you for your purchase email or device identifier to locate the data. **California (CCPA/CPRA).** We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising. Ad measurement uses Apple's SKAdNetwork, which gives us anonymous, aggregate campaign numbers, plus install and purchase events tied to a random SDK-generated identifier, never your advertising identifier, so there is nothing to opt out of. California residents also have the rights to know, delete, and correct, and we will not discriminate against you for exercising them. **Washington My Health My Data.** Our [Consumer Health Data Privacy Policy](https://peptyn.orlyn.ai/legal/health-privacy) describes how we handle consumer health data as defined by that act and similar state laws: everything health-related stays on your device except what you actively send to the AI assistant, which is processed transiently and not retained, or export yourself from Settings, which we never receive. It also explains your access, deletion, and withdrawal rights and how to exercise them. ## Children Peptyn is for adults 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18. If you believe a minor has used the app or made a purchase, contact us and we will delete the associated data. ## Changes We may update this policy as the app evolves. Material changes will be reflected here with a new date, and where required we will notify you in the app before they take effect. ## Contact Privacy questions and requests: [privacy@orlyn.ai](mailto:privacy@orlyn.ai). --- Source: