PRIVACY POLICY

Last updated: 3rd May 2025 — KYROS SOFTWARE LTD.

Operated by KYROS SOFTWARE LTD (Company No. 16915277), 82a James Carter Road, Mildenhall, Bury St. Edmunds, Suffolk, IP28 7DE, England and Wales. This Privacy Policy explains how we collect, use, and safeguard your information when you use Peptrack.

1. INFORMATION WE COLLECT

You provide directly: email address, username, peptide names/dosages/schedules, wellness notes, and account preferences. Payment info is processed by RevenueCat/Apple/Google — we do not store card details.

Collected automatically: app usage patterns, device info, IP address, general location, and crash reports.

We do NOT collect your personal files, browsing history, precise location, biometrics, or your communications.

2. HOW WE USE YOUR INFORMATION

To provide and maintain the Peptrack service, sync data across devices, process payments, analyse usage to improve the app (anonymised), send service updates, and marketing communications (with your consent only).

3. HEALTH DATA

Peptide tracking data constitutes sensitive health data under UK GDPR. We process this data solely to provide the Service. We do not use it for advertising, profiling, or sale to third parties. You may withdraw consent at any time.

4. DATA STORAGE

Your data is stored on our own PostgreSQL database infrastructure. We do not use third-party cloud storage for your personal data. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

5. INFORMATION SHARING

We do not sell, rent, or trade your data. We may share data only with your explicit consent, to comply with legal obligations, to protect our rights, or with trusted service providers (e.g. payment processors) under strict confidentiality agreements.

6. YOUR RIGHTS

Under UK GDPR you have the right to access, correct, delete, or export your data, withdraw consent, object to processing, and lodge a complaint with the ICO (ico.org.uk). To exercise any right, contact: [email protected]

7. DATA RETENTION

  • Account data: retained while your account is active.
  • Usage/analytics data: up to 2 years (anonymised).
  • Support communications: up to 3 years.
  • Payment records: as required by law.
  • Deletion: Personal data is deleted within 30 days of account deletion.

8. CHILDREN'S PRIVACY

Peptrack is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us immediately.

9. CHANGES TO THIS POLICY

We may update this policy periodically. Material changes will be notified with at least 30 days' notice. Continued use constitutes acceptance.