This policy covers the health data you put into PepBloom, made by Osman Emre Gündoğdu ("we", "us"). Our general Privacy Policy covers everything else.
The short version
- Most of your health data never reaches us. It's saved on your iPhone, and if you turn on backup, your phone encrypts it before upload with a key we never get.
- We don't sell health data, share it for advertising, or share it with any third party or affiliate.
- You agree before you enter anything. The AI assistant asks again before it sends any of your data.
- You can export, erase or delete your data in the app at any time, or email privacy@pepbloom.app to see it, delete it, withdraw consent or appeal.
- The table in section 1 still lists everything, so you can see exactly what happens to each kind.
1. Health data PepBloom handles, and why
| Health data | Examples | Why PepBloom uses it | Where it's kept |
|---|---|---|---|
| Medications and doses | Medication or peptide names, dose amounts and units, schedules, step-up plans, medication groups (stacks), vial mixes, injection sites, dose notes | To log doses, remind you, rotate injection sites, do vial math, estimate your medication level and build your reports | Your phone; your encrypted backup if you use one |
| Side effects | Nausea, fatigue, how bad and when | To show side effects next to your doses | Your phone; encrypted backup |
| How you feel | Daily check-ins: hours and quality of sleep, energy, mood, appetite, food noise, and "no side effects today" | To show how you felt next to your doses, in your charts and in your doctor report | Your phone; encrypted backup |
| Body measurements | Weight, goal weight | To chart progress | Your phone; encrypted backup |
| Workouts you log | Type, start time, length, effort, notes | To show your activity next to your doses | Your phone; encrypted backup |
| Nutrition | Meals, calories, protein, carbs, fat, fiber, water, daily targets | To track nutrition next to your doses | Your phone; encrypted backup |
| Lab results | Bloodwork markers, values, ranges, dates | To track lab trends | Your phone; encrypted backup |
| Progress photos | Front, side and back photos you take | To compare progress over time | Your phone only. Never in the backup, never uploaded |
| Setup answers | Your goals and starting weight | To set up the app | Your phone; encrypted backup |
| Apple Health data | Weight from Apple Health or a smart scale; steps, workouts (including from Apple Watch and other apps) and sleep | To include scale weigh-ins in your progress, and to show your activity and sleep next to your doses | Weight, and sleep hours you tap Save on in a check-in: your phone; encrypted backup. Steps, workouts and other sleep data: read on your phone each time you open PepBloom, never saved, backed up or sent anywhere |
| What people pick | Medication names (including ones you add yourself), dose amounts and units, schedules, step-up plans, cycles, dose times, vial mixes, pen sizes, blend ingredients, reminder timing, syringe size, side effect names, lab markers you add, library searches that found nothing | To add medications and options people are missing, and to choose better defaults | Your phone sends each pick once, with no account, device ID or link to your other picks. We store it only as a total for that one value across all phones, look only at values at least 5 phones picked, delete values fewer than 5 phones picked within 90 days, and never try to link them to a person. Off when you turn off usage totals |
| What PepBloom works out | Estimated medication level, how many doses you logged versus scheduled | To show your charts and reports | Worked out on your phone. Your phone sends us daily counts, like doses logged versus due, with no account or device ID. We store them only as totals across all phones and never try to link them to a person |
| AI conversations | Your questions, Claude's answers, meal photos you send for an estimate | To answer questions, fill in entries you confirm, and let you go back to a chat later | Saved chats on your phone; encrypted backup. Requests pass through our server to Anthropic; we keep none |
| What the AI assistant remembers | Short facts you choose, like "I inject on Fridays", "vegetarian" or "nausea after step-ups" | So you don't have to repeat yourself to the assistant | Your phone; encrypted backup. Sent with your questions while the assistant is on |
| The fact that you use PepBloom | Having a PepBloom account or subscription can suggest you take a GLP-1 or other medication | To run your account and subscription; to email you tips and offers only if you tick "Email me tips and offers" | Our server (account email and ID); Apple and RevenueCat (subscription); Resend (your email, only if you tick that box) |
| Feature ideas | Anything about your health you choose to write in a feature idea. Sent with no account or device ID; emails and US phone numbers are removed | To decide what to build next | Our server; deleted 180 days after you send it |
| Community posts | Anything about your health you choose to write in a community post, comment or poll, under your pseudonym. Reports you make and people you block | To let you share experiences with other members, and to enforce the community rules | Our server. Posts and comments are visible to signed-in members under your pseudonym. Never linked to your logs |
We don't collect your location, and we don't set up virtual boundaries (geofences) around clinics or any other place.
2. Where it comes from
- You, when you type it, take a photo or scan a barcode.
- Apple Health, only if you turn on sync and allow it.
- Open Food Facts, a public food database: nutrition values for products you look up.
- The U.S. National Library of Medicine's RxTerms service, a public medication name list: name suggestions when you search for a medication PepBloom doesn't already list.
- Claude, by Anthropic: answers and nutrition estimates, saved only after you confirm them.
- Your phone, which works out your estimated medication level and adherence from what you logged.
3. Who we share it with
We don't sell health data, share it for advertising, or share it with any third party or affiliate. We have no affiliates.
These companies process data for us under contracts that limit them to providing their service:
| Processor | Health data it receives | Why |
|---|---|---|
| Supabase, Inc. | Your encrypted backup, which it can't read. Pick totals with no account or device ID. Your account email and ID (which can suggest you use a medication tracker). The text of feature ideas and community posts you write | Stores your account and backup |
| RevenueCat, Inc. | No health data. A random ID (your account ID once you sign in with Apple) and your subscription history (which can suggest you use a medication tracker) | Manages subscriptions |
| Anthropic, PBC | Only what you allow for each question: the medications, dose logs, meals, water, weight, side effects or daily check-ins that question needs, plus the facts you asked the assistant to remember. Never your name, email, account ID, location, dose notes, progress photos or anything read from Apple Health | Runs the AI assistant |
| Anthropic, PBC (community) | The text of each community post and comment, which may include health details you chose to write. No name, pseudonym or account ID | Screens posts and comments against the community rules before anyone sees them |
| Resend, Inc. | Only if you tick "Email me tips and offers": your email, which can suggest you use a medication tracker. No other health data | To send the tips and offers you asked for |
Other places data goes:
- Open Food Facts gets barcode numbers and food search words, with no name, account or other health data attached. It's a public database, not a company working for us.
- The U.S. National Library of Medicine's RxTerms service gets medication name searches you type, only when PepBloom doesn't already list that medication. No account data is sent. It's a public service, not a company working for us.
- Apple Health gets the weight, nutrition, water and workouts you log (a workout's type, time and length, never its effort or notes), only when you turn on sync. That's you choosing to send it to Apple Health on your own phone.
- Anyone you send an export to. The doctor PDF and CSV go only where you send them.
- Other community members see what you post in the community, under your pseudonym, because you chose to post it. They never see your real name, email, account or logs. Reports and blocks are never shown to the person they're about.
4. Your consent
- Before you enter anything, PepBloom's setup shows a "Your health data" screen with links to this policy and our Privacy Policy, and you tap I agree. PepBloom saves when you agreed and to which version. Agreeing to our terms of use doesn't count as this consent.
- Before we email you tips or offers, the Sign in with Apple screen has its own unticked box, "Email me tips and offers". It says what we use (your email and the fact that you use PepBloom), why, who gets it (our email service) and how to stop. PepBloom saves when you ticked it and the words it showed. Untick it in Profile > Settings > Account & Backup, or unsubscribe from any email.
- Before the first AI request, a separate screen asks permission to send data to Anthropic. PepBloom asks again before sharing each kind of your data, and you can allow it once or always.
- Before the assistant remembers anything, PepBloom shows you the exact words and saves them only when you tap Remember. The screen says the list goes with your questions.
- Before you first post or comment in the community, a separate screen asks for your consent to share what you write with other signed-in members under your pseudonym, and to have it screened by Anthropic and our moderators. You can withdraw by deleting your posts or your account.
- Apple Health has its own Apple permission screen.
To withdraw consent: turn off AI features or Apple Health sync in the app, use Erase all data or Delete account (Profile > Settings > Account & Backup), or email privacy@pepbloom.app. Withdrawing stops further collection. Deleting removes what we hold.
If we ever want to use health data in a new way or share it with someone new, we'll ask for your consent first.
5. Your rights
You can:
- Confirm and access. Ask whether we hold your health data, get a copy, and get a list of every third party and affiliate we shared it with, with their contact details. (Today that list is empty; the processors above are listed in full.)
- Delete. Ask us to delete your health data, including copies held by our processors. Deletion from our processors' system backups can take up to 6 months, though Supabase's backups age out within 30 days.
- Withdraw consent as described in section 4.
- Appeal if we turn down your request.
Connecticut residents can also ask us to correct their data and get it in a portable format. PepBloom's CSV export gives you a portable copy at any time.
How to make a request
- In the app, for instant results: Export, Erase all data, or Delete account. Delete one assistant chat or all of them from the assistant's chat list, and change or delete what it remembers (or tap Forget everything) in Profile > Settings > What PepBloom AI remembers. Deleted chats and facts leave your encrypted backup at the next backup.
- By email to privacy@pepbloom.app, with "Health data request" in the subject.
Verifying it's you. If you have an account, write from the email on your account (for an Apple "Hide My Email" address, write from the Apple ID email; Apple forwards it), or make the request in the app while signed in. If you don't have an account, your health data is only on your phone and you can erase it yourself; we hold none of it.
Timing and cost. We answer within 45 days. If we need up to 45 more days, we'll tell you why within the first 45. Requests are free up to twice in any 12 months.
Appeals. Reply to our answer with "Appeal". We'll decide within 45 days (60 for Connecticut residents) and explain our decision in writing. If we still say no, you can complain to your state's Attorney General:
- Washington: atg.wa.gov/file-complaint
- Nevada: ag.nv.gov
- Connecticut: portal.ct.gov/ag
6. How we protect it
Backups are encrypted on your phone with a key we never receive. Data travels over HTTPS. Each account can read only its own records. Only the owner can access our server systems, with two-factor login. Our server never stores or logs what you ask the AI assistant.
7. Changes
We'll tell you in the app before a change to this policy applies, and we'll ask for your consent again before any new use or sharing of your health data. The version and date at the top change with every update.
8. Contact
Osman Emre Gündoğdu
Türkiye
privacy@pepbloom.app