Privacy Policy
Privacy Policy
Privacy practices for Pep Pal, including waitlist submissions, analytics, cookies, affiliate tracking, and your rights under California and EU/UK privacy frameworks.
Effective Date
March 30, 2026
Last Updated
March 30, 2026
Contact Email
garret@peppal.app
Applies To
https://www.peppal.app
Overview
Pep Pal ("we," "us," or "our") operates https://www.peppal.app (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the Site. It is drafted to comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), and applicable provisions of the General Data Protection Regulation (GDPR) for visitors from the European Economic Area and the United Kingdom.
By using the Site, you acknowledge that you have read and understood this policy.
1. Who We Are
Pep Pal is a peptide calculator, planning, and educational content platform. The Site includes a free calculator, product waitlist capture, supplier research content, blog content, and related informational pages. We do not sell peptides or other products directly.
Calculator inputs are processed in your browser. Unless you voluntarily submit information through the waitlist or contact us directly, we do not receive the calculation values you enter.
Contact Information:
Email: garret@peppal.app
Website: https://www.peppal.app
2. Information We Collect
We collect information in two ways: information you provide directly, and information collected automatically when you visit the Site.
2a. Information You Provide
- Waitlist information — Your email address if you join the Pep Pal waitlist.
- Communications — The content of messages you send us by email or through future support channels.
We do not collect payment information through the Site. We do not currently require an account to use the calculator.
2b. Information Collected Automatically
- Usage data — Pages visited, time on page, referring URL, exit pages, and navigation paths.
- Device and browser data — Browser type and version, operating system, screen resolution, and device type.
- Approximate location — Country and region-level location inferred from IP address. We do not collect precise geolocation.
- IP address — Collected transiently by our hosting infrastructure and analytics providers.
- Cookies and similar identifiers — Used by analytics and infrastructure providers. See Section 4.
2c. Calculator Data
The public calculator is designed so that the dose, vial, and water values you enter remain in your browser session for use in the calculation interface. We do not intentionally transmit those calculator inputs to our servers unless you separately submit information through a form or other feature that clearly requests submission.
2d. Information We Do Not Collect
- Social Security numbers or government-issued ID numbers
- Financial account numbers or payment card data
- Biometric data
- Medical records or health information
- Precise GPS-level location data
- Personal information from anyone under 18 years of age
3. How We Use Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Operating and improving the Site and calculator experience | Legitimate interest |
| Responding to waitlist submissions and inquiries | Consent / legitimate interest |
| Sending Pep Pal launch updates if you join the waitlist | Consent |
| Analyzing site traffic and user behavior (via Google Analytics) | Legitimate interest (with consent where required) |
| Affiliate attribution and referral tracking | Legitimate interest |
| Complying with legal obligations | Legal obligation |
| Preventing fraud, abuse, and maintaining security | Legitimate interest / legal obligation |
We do not use your information for automated decision-making or profiling that produces legal effects.
6. Affiliate Disclosure
Pep Pal participates in affiliate referral programs. We may earn a commission when you click a supplier link and complete a purchase. This compensation does not change our editorial approach or calculator functionality.
Our affiliate tracking commonly uses the referral code PEPPAL and/or the URL parameter ?ref=peppal. These identifiers attribute your visit to Pep Pal for commission purposes.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Google Analytics data | 26 months (Google's default retention; configurable) |
| Waitlist submissions / email inquiries | Up to 3 years or until request for deletion |
| Server/hosting logs (IP addresses) | Up to 90 days (provider default) |
| Affiliate click/referral data | Duration of affiliate program agreement |
We retain data only as long as necessary for the purposes described in this policy or as required by law.
8. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights:
- Right to Know — Request categories and specific pieces of personal information we collected about you.
- Right to Delete — Request deletion of your personal information, subject to legal exceptions.
- Right to Correct — Request correction of inaccurate personal information we hold about you.
- Right to Opt-Out of Sharing — Opt out of analytics-related data sharing as broadly defined by CPRA where applicable.
- Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
Shine the Light (Cal. Civ. Code § 1798.83): California residents may request a list of third parties to whom we have disclosed personal information for direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes.
To exercise your rights, email garret@peppal.app with the subject line "California Privacy Rights Request".
9. Rights for EEA/UK Visitors (GDPR)
- Right of Access — Request a copy of the personal data we hold about you.
- Right to Rectification — Request correction of inaccurate data.
- Right to Erasure — Request deletion of your personal data where there is no legitimate reason to continue processing.
- Right to Restriction of Processing — Request restriction of processing in certain circumstances.
- Right to Data Portability — Receive your data in a structured, machine-readable format.
- Right to Object — Object to processing based on legitimate interests.
- Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent.
To exercise your GDPR rights, email garret@peppal.app. We will respond within 30 days.
10. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include HTTPS encryption for data in transit, access controls, and secure hosting infrastructure.
No method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Site is intended solely for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18.
If you believe a child has provided us with personal information, please contact us at garret@peppal.app.
12. Third-Party Links
The Site contains links to third-party websites, including affiliate supplier sites, analytics providers, social platforms, and external reference resources. We are not responsible for the privacy practices of any third-party website.
13. Calculator and Tool Disclaimer
Pep Pal is provided for organizational and informational purposes only. The Site does not provide medical advice, diagnosis, treatment recommendations, or individualized health guidance.
We do not ask you to submit medical records or protected health information to use the calculator. If you choose to contact us, please avoid sending sensitive medical information.
14. Changes to This Policy
We reserve the right to update this Privacy Policy at any time.
- We will update the "Last Updated" date at the top of this policy.
- We will post a prominent notice on the Site following material changes where appropriate.
- Where required by law, we will notify you directly.
15. Contact Us
For privacy-related questions, rights requests, or complaints, contact us at:
Pep Pal
Email: garret@peppal.app
Website: https://www.peppal.app/privacy-policy
We aim to respond to privacy inquiries within 10 business days.