Privacy

If you use the calculator without an account, we store nothing about you. The values you type stay in your browser, and a calculation you share travels in the link itself rather than through our database.

If you create an account we store your email address, and whatever you deliberately save: named calculations, bookmarked compounds, and later your protocols, dose history, inventory and any body measurements you record. That is the complete list.

If you join the email list we store your address and which form it came from, so we know which pages are worth writing more of.

We count what people search this site for, and only that: a tally against the words typed, with no address, no session and no timestamp attached to any single search. Two people searching the same thing and one person searching it twice are the same row, and there is nothing stored that could tell them apart. We do it because a search that comes back empty is the clearest signal of a page we have not written. Anything that looks like an email address or a run of digits is discarded rather than counted, terms searched only once are deleted, and nothing searched fewer than three times is ever displayed to us.

We do not sell your data. We do not share it with advertisers, data brokers, or anyone else, and there is no arrangement under which that changes.

We use Cloudflare Web Analytics and Google Analytics to understand which pages are worth writing more of. Google Analytics sets cookies and is operated by a company with an advertising business, which we would rather it did not — we have disabled ad personalisation and signals, and we anonymise IP addresses, but we are not going to describe this as cookieless when it is not.

We do not require an account to use the tools, and we do not gate the calculator behind an email address.

Pepfolio, the companion app, reports anonymous usage so we can see which parts of it get used and where people give up. It is a fixed list of events — that a dose was logged, that a protocol was created and on what kind of schedule, that the calculator was opened. It never includes which compound, what dose, which injection site, or anything you have typed.

That data is not attached to your account or your email address. The app does not identify you to our analytics provider, so what is collected cannot be traced back to a person on our side or theirs. It is processed by PostHog on servers in the United States.

There is a switch for it under You, and turning it off stops it immediately. Automatic capture — the feature that would otherwise record screen names and the labels of things you tap, which in this app means compound names — is switched off in the code, not merely configured off.

The app also asks its update server on launch whether a newer version of its own code exists, so a fix can reach you without waiting on an app store review. That request carries the app version, the platform, and a random identifier generated on your device — not your account, not your email address, and nothing you have entered. It is a question about the app, not about you, and it never sends anything back.

You can export everything you have stored, in a format you can actually read, at any time from your account.

You can delete your account and everything in it. Deletion is real: the records are removed, not flagged as hidden, and it happens immediately — we keep no copy, so there is nothing to restore afterwards. That is why deleting asks you to type your email address rather than trusting a single tap, and why exporting first is worth the minute it takes.

We are a small operation. If that ever changes hands, this commitment travels with it as a condition, and you will be told before anything about it changes.

Legal process is legal process. If we are compelled to disclose something we will, and we will tell you unless we are prohibited from doing so.