Consumer health data privacy policy

Who this policy is for

This policy is written for the consumer health data laws of Washington (the My Health My Data Act, RCW chapter 19.373) and Nevada (NRS 603A.400 to 603A.550, enacted as Senate Bill 370). It applies to every Peptinote user, wherever you live. It adds to our privacy policy, which covers all personal data.

Peptinote is published by VENDOME ONE, 8 rue de Longpont, 92200 Neuilly-sur-Seine, France. This policy takes effect on October 16, 2026.

Your dose log isn’t collected

The tracker is local-first. Your vials, doses, injection sites, weight, side effects and notes are stored only in your browser, on your device. They are never sent to Peptinote or anyone else, and we can’t see them. The same goes for the numbers you type into a calculator and the sites you mark in the rotation tool. Because we never receive this information, we don’t collect, share or sell it.

Consumer health data we collect

These laws define consumer health data broadly. It can include information that shows someone is seeking care or treatment, even if it says nothing about a specific condition. Signing up for a GLP-1 and peptide tracker account, a Pro subscription or our newsletter could be read that way, so we treat the following as consumer health data:

Account information

What it is: your email address, when you created the account, and when you confirmed you’re 18+ and accepted our terms.
Why: to create your account and sign you in, as you asked.

Subscription information

What it is: whether you have Pro, monthly or yearly, the renewal date, whether you’ve canceled, and your Stripe customer and subscription identifiers.
Why: to give you the Pro features you paid for.

Newsletter information

What it is: your email address, the form you used to sign up (for example “calculator” or “cheat sheet”), when you consented and confirmed, and a hashed copy of your IP address recorded with your consent.
Why: to send the newsletter or download you asked for, and to show that you consented.

We don’t collect any other consumer health data: no diagnoses, medications, doses, conditions, biometric data, precise location or inferences about your health.

Where it comes from

• From you, when you create an account, sign in or sign up for the newsletter.
• From Stripe, our payment processor, when you subscribe to, renew or cancel Pro.

We don’t buy data, and we don’t get it from data brokers, advertisers or social networks.

How we use it

Only to provide what you asked for: your account, Pro, the newsletter or a download, plus securing the service and meeting our legal obligations (for example, keeping invoices). We collect it to the extent necessary to provide those services, and for the newsletter we also ask for your consent at sign-up. We never use it for advertising, to profile you, or to infer anything about your health.

The data is stored in our database, hosted by Replit in the United States, is encrypted in transit, and is kept only as long as our privacy policy says.

Who we share it with

We don’t share consumer health data with third parties or affiliates. Three processors handle it on our behalf, only on our instructions and only to provide the service:

• Replit, Inc. hosts our website and database.
• Stripe processes Pro payments and runs the subscription portal.
• Resend (Plus Five Five, Inc.) delivers sign-in links, confirmations and the newsletter.

We don’t sell consumer health data, and no third party can collect consumer health data about you on Peptinote over time or across websites: there are no advertising, analytics or social media trackers on the site. We don’t use geofencing.

Your rights

You can ask us to:

• confirm whether we collect, share or sell your consumer health data, and access it, including a list of every third party and affiliate that received it, with a way to contact them (today the list is empty: only the processors above handle it);
• delete it, from our systems and our processors’ (you can also delete your account yourself on your account page, and unsubscribe from any newsletter);
• withdraw your consent to its collection and sharing.

We won’t treat you differently for using these rights.

How to make a request

Email privacy@peptinote.com from the address you use with Peptinote, and say which right you want to use.

• Checking it’s you: we may ask you to confirm the request from that email address.
• Timing: we answer within 45 days. If we need more time, we’ll tell you why within those 45 days and take up to 45 more.
• Cost: free, at least twice a year.
• Deleting: we delete your data and tell our processors to delete it too, except what the law requires us to keep, such as invoices. Copies in backups are deleted when those backups expire, within six months at most.

Appeals

If we decline your request, in whole or in part, you can appeal: reply to our answer, or email privacy@peptinote.com with “Appeal” in the subject. We’ll answer in writing within 45 days, explaining what we did or didn’t do and why. If we deny your appeal, you can complain to your state’s attorney general:

• Washington: the Washington State Office of the Attorney General.
• Nevada: the Nevada Attorney General.
• Elsewhere: your state’s attorney general or consumer protection office.

Changes to this policy

The date at the top of this page shows when this policy last changed. If we ever want to collect or share consumer health data in a new way, we’ll update this policy first, email you if you have an account or subscribe to the newsletter, and ask for your consent where the law requires it.

Contact

Questions about this policy: privacy@peptinote.com. By mail: VENDOME ONE, 8 rue de Longpont, 92200 Neuilly-sur-Seine, France.