What stays on your phone
According to the privacy policy, the following are stored on your device and not on a PepLabo server [1]:
- Dose logs, vials, programs and goals.
- Meals, water, weight, sleep, activity, workouts and side-effect entries.
- Progress and profile photos; the progress photo screen states they are never uploaded.
- Your PepLabo AI conversation history and your settings.
- Reminders, which are scheduled on the phone itself.
- Vial label text, which is read on the phone; the label image is not uploaded for recognition.
What an account changes, and what it does not
You can track everything without signing up; an account is needed only for PepLabo AI and for connecting WHOOP. If you create one, Firebase Authentication handles your email, display name and sign-in details, and with email sign-up it holds the password so the app does not keep a copy [1]. Signing in does not upload your records, and signing out or deleting the account does not touch them.
Purchases go through Apple or Google, so PepLabo never sees card details. RevenueCat manages the subscription itself, and the policy states that health entries are not sent to it. Restoring a purchase restores Pro, not your records [1].
What leaves the phone when you use PepLabo AI
PepLabo AI is optional and asks for consent before first use. The consent screen itself lists what is sent and what is never sent. In chat, your message, the recent conversation, your language and a limited summary go to Google Gemini: program and compound names, frequency and times, cycle stage, how full a vial is and roughly how many days it will last, plus recent log times and whether a dose was skipped. For a meal estimate, a smaller copy of the photo you choose and your language are sent [1].
The automatic summary leaves out dose amounts and units, free-text notes, weight and sleep values and anything from Apple Health or Health Connect. Your name, email and account ID are not added to the request. The policy is candid that words you type yourself can still carry personal details, that a meal photo can show more than food, and that filters do not guarantee anonymity [1].
Requests pass through PepLabo’s Google Cloud server. The policy says it does not store AI messages or photos in the app database or its logs; it does keep daily usage counts linked to your account. Google’s terms for paid Gemini API use say prompts and responses are not used to improve Google’s products, and that they are logged for a limited time to detect misuse and meet legal duties [3]. PepLabo does not promise zero retention [1].
Apple Health and Health Connect
With your permission and Pro, PepLabo reads weight, sleep, steps and active energy on the phone. It never writes to Apple Health or Health Connect, and those values are not sent to PepLabo’s server, to the AI or to RevenueCat [2]. You can revoke the permission in the Health app on iPhone [5] or in Health Connect on Android; Google notes that removing a permission does not delete what Health Connect already stores [4]. Removing entries PepLabo already imported is a separate choice.
One detail is easy to miss: on Android, if device backup is switched on, app data may be included in the backup stored in your Google account. That copy is managed by your phone’s backup service, not by PepLabo.
WHOOP: the connection that goes through the server
WHOOP works differently from the two phone-based health stores. If you connect it, the sleep, recovery, heart-rate and HRV measurements, workouts and cycles you permit travel from WHOOP through PepLabo’s server to your phone. The policy states that the measurement content is not kept in the server database [1][2].
To keep the connection working, the server does store a few things: encrypted access and refresh tokens, your WHOOP user number, the connection status and sync events. PepLabo never sees your WHOOP password. You can disconnect in the app or in your WHOOP account, and connection records are deleted once disconnection or account cleanup completes [1][2].
Other moments when data leaves the device
- Barcode lookups send the product number to Open Food Facts [1].
- Notifications and widgets can show names or summaries on the lock screen. Hide peptide names in Notifications makes a reminder say only “Dose reminder”, and widgets have their own switch for showing the compound name.
- Exports, shared files and device backups follow the rules of the service you pick. PepLabo cannot reach those copies, and it does not offer a cloud backup of all records [1].
- Support emails, including anything you attach, are handled through Google Workspace. The mail draft opens in your own mail app, so you can review it before sending [1].
- If you share an exported report or file, the person or service you send it to becomes a recipient you chose [2].
Where the server is, and what it keeps
PepLabo’s operator is in the United Arab Emirates, and its Firestore database and server functions run in Google’s europe-west1 region in Belgium. The policy adds that this does not mean every provider works only in the EU: sign-in, Gemini, RevenueCat, the app stores, email and web hosting may process data in other countries, including the United States [1].
On the server side, usage counters and WHOOP event IDs are set to expire after three days, technical logs are kept for 30 days in the default logging bucket, and no store of AI conversations is kept. Records on your phone stay until you remove them, and uninstalling the app does not remove copies you exported or backed up elsewhere [1][2].
What PepLabo says it does not do
The app contains no analytics or advertising SDKs, and the website uses no ad pixels or visitor analytics. The notices state that PepLabo does not sell, rent or share data for targeted advertising, does not buy health data from brokers, does not use health data for employment, credit or insurance decisions, does not post entries to a public community feed and does not use geofencing around health facilities [1][2].
The policy also avoids overpromising. It notes that no system can guarantee absolute security and asks you to protect your phone lock and account access. PepLabo is meant for people aged 18 and over [1].
The controls you have
- Turn AI off under Settings › Privacy › AI features; this stops new requests [1].
- Revoke Apple Health or Health Connect access in the system, and disconnect WHOOP in the app or in WHOOP [2].
- Export your records with Transfer data, which works without Pro.
- Delete everything on the phone with Delete all my data from this device, which asks twice and leaves your account and subscription alone.
- Delete your account separately; the app then asks whether to keep or delete the data on the phone. Cancelling a subscription is done in the App Store or Google Play [1].
- Send access, copy, correction or deletion requests to [email protected]. If one is refused, writing again with “Privacy appeal” or “Health data appeal” in the subject asks for a review [1][2].
