Last updated: October 17, 2026
Smart Peptide Tracker ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
Smart Peptide Tracker is operated as a sole proprietorship based in Texas, United States. For data protection purposes, we are the data controller of your personal information.
When you open our public install link, we count visits in aggregate by day, source, public campaign label, platform category and recognized referring website hostname. Other referring websites are grouped together. This helps us understand how people find the app. These counts are separate from optional in-app Firebase Analytics. We do not attach account identifiers, device identifiers, cookies, IP addresses or full user agent strings to these counters. Campaign information is also passed to the selected app store under its privacy practices. These counters measure link visits, not completed installations. Our hosting and cloud providers also process technical connection information to deliver and protect the service.
Los registros limitados de fiabilidad incluyen resultados de guardado e inicio, recuentos de repeticiones, códigos de error fijos, tiempos, plataforma, versión y compilación de la app, vinculados a la cuenta y sesión ya usadas en los informes de errores. Una muestra aleatoria del 10% registra el primer inicio elegible con sesión iniciada por instalación de la app o perfil del navegador cada día UTC, como máximo una vez al día. No se recopilan nuevos identificadores del dispositivo ni registros de investigación. Demo, Solo en este dispositivo y Mi copia en la nube no ponen en cola nuevos registros de este tipo. Los registros ya puestos en cola pueden llegar más tarde. El almacenamiento de cuenta en el dispositivo envía solo metadatos técnicos filtrados. Estos registros usan los procesos existentes de conservación de registros técnicos y eliminación de cuenta.
Os registros limitados de confiabilidade incluem resultados de salvamento e inicialização, contagens de repetições, códigos de erro fixos, tempos, plataforma, versão e compilação do app, vinculados à conta e sessão já usadas nos relatórios de erro. Uma amostra aleatória de 10% registra a primeira inicialização elegível com sessão iniciada por instalação do app ou perfil do navegador em cada dia UTC, no máximo uma vez por dia. Não são coletados novos identificadores do dispositivo nem registros de pesquisa. Demo, Apenas neste dispositivo e Meu backup na nuvem não colocam novos registros desse tipo na fila. Registros já na fila podem chegar depois. O armazenamento da conta no dispositivo envia apenas metadados técnicos filtrados. Esses registros usam os processos existentes de retenção de registros técnicos e exclusão da conta.
Begrenzte Zuverlässigkeitsdaten umfassen Speicher- und Startergebnisse, Wiederholungszahlen, feste Fehlercodes, Zeiten, Plattform, App-Version und Build. Sie sind mit dem Konto und der Sitzung verknüpft, die bereits für Fehlerberichte verwendet werden. Eine zufällige Stichprobe von 10% erfasst den ersten zulässigen angemeldeten Start je App-Installation oder Browserprofil und UTC-Tag, höchstens einmal täglich. Es werden keine neuen Gerätekennungen oder Forschungsdaten erfasst. Demo, Nur auf diesem Gerät und Meine Cloud-Sicherung stellen keine neuen Daten dieser Art in die Warteschlange. Bereits eingereihte Daten können später ankommen. Die Kontospeicherung auf dem Gerät sendet nur gefilterte technische Metadaten. Für diese Daten gelten die bestehenden Verfahren zur Aufbewahrung technischer Daten und zur Kontolöschung.
Les données limitées de fiabilité comprennent les résultats de sauvegarde et de démarrage, les répétitions, des codes d’erreur fixes, les durées, la plateforme, la version et le build de l’app, liés au compte et à la session déjà utilisés pour les rapports d’erreur. Un échantillon aléatoire de 10% enregistre le premier démarrage admissible avec connexion par installation de l’app ou profil de navigateur et par jour UTC, au plus une fois par jour. Aucun nouvel identifiant d’appareil ni donnée de recherche n’est collecté. Demo, Uniquement sur cet appareil et Ma sauvegarde cloud ne mettent en attente aucune nouvelle donnée de ce type. Les données déjà en attente peuvent arriver plus tard. Le stockage du compte sur l’appareil envoie uniquement des métadonnées techniques filtrées. Ces données suivent les procédures existantes de conservation des données techniques et de suppression du compte.
Los registros del servicio Amino incluyen el resultado de las solicitudes, si la app confirmó la recepción de una respuesta y si un límite de salida la interrumpió. Estos registros vinculados a la cuenta usan los procesos existentes de conservación de registros de IA y eliminación de cuenta. Los nuevos metadatos de recepción y fallos no contienen texto de preguntas ni respuestas. La recepción no demuestra que se haya guardado ni la calidad de la respuesta. Los registros del almacenamiento en el dispositivo siguen omitiendo el texto.
Os registros do serviço Amino incluem os resultados das solicitações, se o app confirmou o recebimento de uma resposta e se um limite de saída a interrompeu. Esses registros vinculados à conta usam os processos existentes de retenção de registros de IA e exclusão da conta. Os novos metadados de recebimento e falha não contêm texto de perguntas ou respostas. O recebimento não comprova o salvamento nem a qualidade da resposta. Os registros do armazenamento no dispositivo continuam omitindo o texto.
Amino-Dienstdaten enthalten Anfrageergebnisse, ob die App den Empfang einer Antwort bestätigt hat und ob eine Ausgabelimitierung sie abgebrochen hat. Für diese kontobezogenen Daten gelten die bestehenden Verfahren zur Aufbewahrung von KI-Protokollen und zur Kontolöschung. Neue Empfangs- und Fehlermetadaten enthalten keinen Frage- oder Antworttext. Der Empfang belegt weder eine Speicherung noch die Antwortqualität. Protokolle bei Gerätespeicherung enthalten weiterhin keinen Text.
Les données du service Amino comprennent les résultats des demandes, la confirmation de réception d’une réponse par l’app et son éventuelle interruption par une limite de sortie. Ces données liées au compte suivent les procédures existantes de conservation des journaux d’IA et de suppression du compte. Les nouvelles métadonnées de réception et d’échec ne contiennent aucun texte de question ou de réponse. La réception ne prouve ni la sauvegarde ni la qualité de la réponse. Les journaux du stockage sur l’appareil continuent d’exclure le texte.
SPT cloud and account services use Google Firebase services (data centers located in the United States). Device storage and personal backup choices are described below:
Synced research data is encrypted at rest using AES-256. The encryption key is not stored in plaintext and access requires your PIN or recovery key. Choose a strong PIN, protect your recovery key, and keep your devices secure.
In SPT cloud mode, progress photos, inventory photos, and note images may be stored within encrypted account data or as separate encrypted media in Firebase Storage. On supported mobile builds, inventory note images may move to separate encrypted media when a save is too large. Those images require a connection to load. This does not publish the images or add them to community content.
Account, purchase, notification-routing, and technical diagnostic records are stored separately from the encrypted research-data payload. The research-data encryption statement does not mean that all service metadata is encrypted with your PIN.
Signed-in devices keep encrypted cached research data and pending saves for offline use and recovery. Display preferences and Demo Mode data are also stored on the device. Cloud backups, device backups, and protected recovery copies may retain earlier versions of your records. Backup previews and comparisons decrypt selected records on your device. A restore can keep an encrypted undo snapshot on that same device; it is not a portable backup.
Ordinary JSON backups, CSV exports, recovery downloads, and PDF reports can contain readable personal data. App PIN protection does not automatically protect those files. Device-storage backup packages explicitly identified as encrypted remain encrypted and require the unlock information requested by the restore screen. Keep that information and your backup files secure. Deleting your account cannot remove exported files, personal Google Drive or iCloud Drive backup files, recipients' copies, or data on other offline devices; remove those copies separately.
We implement industry-standard security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
In SPT cloud mode, research data is encrypted and synced through SPT cloud. On supported iPhone and Android builds, Settings > Data lets you keep that research data in an encrypted workspace on one device while you stay signed in. It is no longer synced to your other devices or the web app. Your account, purchases, access rights, and notification-routing records still use our services.
Moving to device storage can leave a dated copy in SPT cloud. That copy is not kept up to date. You can choose to remove it; the app first prepares and checks an encrypted backup file. Removal covers the cloud research copy and its related backups, history, and media. It does not delete your account or separately held service records, such as purchase records, AI logs, community records, or data already shared through other features. Those records follow the retention and deletion rules in this policy. An unfinished removal is shown in the app. Returning to SPT cloud is a separate confirmed action; the previous device workspace and its local recovery copy can remain on the device.
Device storage blocks automatic research-data sends such as Consistency Ranks updates, Webrequest event deliveries, and Coach Mode background sharing. It still allows actions you request, such as asking Amino or sharing selected records, to send the input needed for that action. Amino usage records in this mode omit question and answer text but retain usage metadata, including question length. Technical error reports are also restricted to diagnostic metadata; purchase failures may include error codes.
For account device storage, backups can stay on this device or be saved as encrypted copies to your own Google Drive or, on supported iPhone builds, iCloud Drive. Google or Apple receives the encrypted files and associated file metadata under its own privacy practices. Google Drive access uses the limited permission for files created or opened with this app. These are backup copies, not live synchronization between devices. iCloud may stage a file locally before the system finishes uploading it. Check the displayed backup and upload status.
Recent saves, daily checkpoints, and copies kept before a restore can retain earlier research records on the device. Restoring a save creates a new revision and can offer guarded Activity History Undo. Changing a backup destination, returning to SPT cloud, or deleting an SPT account does not remove backup files already saved in your personal Google Drive or iCloud Drive. You control and remove those files separately.
The hosted website loads OpenAI's ChatGPT Ads measurement software with measurement consent set to denied. Loading this software contacts OpenAI's content delivery service. Advertising conversion events are disabled in this version. This integration does not pass account identifiers or research records to the software and does not load in the native apps.
We do not sell, trade, or rent your personal information to third parties. We do not use your data for advertising. We may share information only in the following circumstances:
Depending on your jurisdiction, you may have the following rights:
To exercise these rights, use the Settings menu in the app, visit the Account and Data Deletion page, or contact us at the email below.
We do not sell your personal information as defined by the California Consumer Privacy Act. You have the right to know what data we collect, request deletion, and not be discriminated against for exercising your privacy rights.
Our legal basis for processing your data is: (a) performance of our contract with you (providing the Service), (b) your consent (for health data access and optional features), and (c) our legitimate interests (analytics, security, service improvement). Data processed through our account and SPT cloud services is transferred to and stored in the United States. Device workspace data stays on the selected device except for the backups and actions described above. Contact us for information about the safeguards applicable to international transfers of your data. You have the right to lodge a complaint with your local data protection authority.
The Partner Add-on allows you to manage inventory and protocols for additional people from your account. You are responsible for obtaining consent from any person whose data you enter into the Service. We process this data under the same security and privacy protections as your primary account data.
After server-confirmed account deletion, the app also clears that account's device workspace, local checkpoints, and recovery files on the device running the cleanup, including copies kept after returning to SPT cloud. Interrupted local cleanup is retried when the app can run it. We retain account data while your account is active. When you delete your account, authentication, encrypted sync data, separately stored account media, recovery snapshots, community records linked to your account, messages, AI logs and feedback, error logs, notifications, and other deletable account records are removed. Public share snapshots contain no account identifier and can remain accessible until their automatic expiration, no more than eight days after creation. Your public Consistency Ranks row stops being ranked a few days after your last update and is deleted automatically about 30 days after that. Your private ranking aggregate is retained while you remain enrolled. Leaving Consistency Ranks or deleting your account removes both immediately.
We retain only the records needed for physical-order fulfillment, refunds, tax, fraud prevention, legal duties, and store purchase replay protection. Purchase replay records are de-identified by removing the account user ID. A server-only deletion-safety tombstone containing the former internal account ID and deletion timestamps is retained to prevent cached sessions from recreating deleted data. When a referral account is deleted, one-way protected checkout identity signals and unresolved referral debt or review status may be retained for up to seven years to prevent repeated reward abuse. These protected signals are not displayed to other users. Aggregated information that no longer identifies you may also be retained.
For Coach Mode, terminal invitations are removed after seven days. Revoked encrypted sharing data and selected-photo objects are removed within 24 hours. Superseded encrypted revisions, ended-relationship encrypted content, and deleted coach-note ciphertext are removed after 30 days. Export audit metadata is retained for 12 months. Non-sensitive relationship, assignment, billing, and report audit metadata may be retained for up to 24 months unless a documented legal hold applies. Ending or deleting an account revokes detailed access immediately while scheduled cleanup completes.
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy within the app and updating the "Last updated" date. Where a change requires your consent, we will request it before using your information for that new purpose.