Last updated 10 August 2026
Controller
Peptica (sole proprietorship (eenmanszaak)), Antwerpen, Belgium, company number BE 0000.000.000, is the data controller for Peptica. Contact: support@peptica.be.
What we collect
Your email, the compounds and doses you log, an optional profile picture, and basic device info needed to run the app. You control any optional data (weight, notes, Health integrations).
Some of what you log (doses, weight, notes) can qualify as health data under Article 9 GDPR. We only process it because you choose to enter it, on the basis of your explicit consent, and we never use it for advertising.
How we use it
To run your account, sync your data across devices, and — with your consent — improve the product using anonymised aggregate patterns. We never sell your data.
Where it lives
Your data is stored in encrypted form on managed cloud infrastructure with row-level access control. Only you can read your rows.
Who processes it for us
- Supabase (EU region) — Database, authentication, file storage
- Cloudflare — Application hosting and content delivery
- Lovable AI Gateway — Processes the text you send to the in-app AI assistant
These providers act as processors under a data processing agreement. Where data is transferred outside the EEA, it is covered by the European Commission's Standard Contractual Clauses.
How long we keep it
Account and log data is kept for as long as your account exists. When you delete your account, your data is deleted immediately on account deletion; backups are purged within 30 days. Feedback messages are kept up to 24 months.
Cookies and local storage
We use no advertising or tracking cookies. The app stores strictly necessary data on your device: your login session, theme and unit preferences, reminder settings, your privacy choices, and doses queued while you are offline. You can clear all of it by signing out and clearing site data in your browser.
Age
Peptica is not intended for anyone under 18. We do not knowingly process data of minors.
Legal basis (GDPR)
We process your data to perform the contract you accept when creating an account and, where applicable, on the basis of your consent. You may withdraw consent at any time from Profile → Privacy Settings.
Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing. You can access and export your data from Profile → Export Report, correct it in Profile → Edit, or delete your account (and all associated data) from Profile → Delete Account. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, gba.be) or your local data protection authority.
Contact
Privacy questions? Email support@peptica.be or use Profile → Direct Feedback.