BioProtocol - Smart Peptide Protocol Management

1. Introduction

BioProtocol ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our peptide protocol management platform.

2. Information We Collect

We collect information you provide directly:

Account Information: Name, email address, and password when you create an account
Usage Data: Peptide schedules, calculations, favorites, and preferences
Payment Information: Processed securely through Stripe; we don't store card details

Sensitive health-related information you choose to log. Because BioProtocol is a protocol-management tool, some of the data you enter is health-adjacent. Providing it is entirely optional and always under your control:

Dose logs: The peptides, dosages, and dates/times you record
Blood work & lab results: Any biomarker values you manually enter to track over time
Injection-site history: Sites you log to help you rotate them
Progress entries & photos: Body measurements, weight, notes, and any photos you upload
Wellness metrics: Other body measurements and wellness data you choose to add

This information is treated as sensitive. It is used only to power the features you are using (such as your schedule, progress charts, and reminders) and is visible only to you and, where strictly necessary, to our secure hosting infrastructure. We never sell your personal or health data, and we never share it with advertisers or data brokers.

3. How We Use Your Information

To provide and maintain our service
To personalize your experience and track your progress
To process payments and manage subscriptions
To send important updates about your account or the service
To improve our platform based on usage patterns

4. Data Security

We implement industry-standard security measures to protect your personal information. All data is encrypted in transit using TLS and at rest. However, no method of transmission over the Internet is 100% secure.

5. Third-Party Services

We use the following third-party services:

Stripe: For secure payment processing
Google Analytics: For anonymous usage analytics
Abacus.AI: For hosting and infrastructure

6. Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Export your data in a portable format at any time — from your Profile page, under Data Privacy, you can download everything you have logged as a single file
Delete your data or your entire account yourself — also from the Data Privacy section of your Profile page. Deleting your account permanently removes your logged data, and any active subscription is cancelled automatically
Opt out of marketing communications

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Upon account deletion, we will delete your personal data within 30 days, except where required by law.

8. Contact Us

If you have questions about this Privacy Policy, please contact us through our Contact Page.