This Consumer Health Data Privacy Policy explains how PepFem AI (“PepFem,” “we,” “us”) handles consumer health data and the rights you have under the Washington My Health My Data Act, the Nevada consumer health data law (SB370), the Connecticut Data Privacy Act, and similar laws. It supplements our general Privacy Policy.
PepFem is a personal tracking and educational tool. It is not a healthcare provider, is not a medical device, and is not subject to HIPAA.
Consumer health data we collect
The following information you enter is treated as consumer health data:
- Peptides and medications you track, and your dose logs (amount, timing, injection site, pain level, notes, and progress photos);
- Dosing schedules, cycling plans, titration plans, and vial records;
- Menstrual cycle information (period start dates and cycle length);
- Reproductive and life-stage status (for example, trying to conceive, pregnant, breastfeeding, perimenopause, menopause), and whether you use oral birth control or hormone therapy;
- Side effects and daily check-ins (weight, mood, energy, sleep, including sleep read from Apple Health with your permission);
- The content of any messages you send to the in-app AI assistant.
Why we collect it
We collect this information only to provide the tracking, reminder, cycle, insight, and educational features you ask for, on your device. We do not use it for advertising, profiling, or any purpose unrelated to running the app.
Where it comes from
All of this consumer health data comes directly from you, through what you enter in the app (and, for sleep, from Apple Health if you grant permission).
How it is stored and what we share
Your consumer health data is stored on your device and in your own iCloud (Apple CloudKit) private account, which we cannot access. We do not maintain a copy on our own servers.
We share consumer health data only as follows:
- Apple stores your synced data in your private iCloud account and is not able to use it for its own purposes.
- Google (Gemini API) receives only the text you choose to type into the AI assistant, to generate a reply. Your stored logs are not sent to Google unless you type them into a message.
- Cloudflare routes your AI requests in transit (including your IP address, used to prevent abuse).
We do not share your consumer health data with any other parties. We have no corporate affiliates. The companies listed above are service providers (processors) acting on our behalf.
We do not sell your health data
We do not sell consumer health data, and we will never do so without your separate, valid written authorization.
We do not geofence
We do not use geofencing to identify, track, target, or send messages to you based on your proximity to any healthcare facility or provider.
Your rights
You have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data;
- Obtain a list of all third parties and affiliates with which we have shared your consumer health data, along with a way to contact them;
- Withdraw consent to our collection and sharing of your consumer health data;
- Delete your consumer health data, including from any backups and from our service providers; and
- Appeal a decision we make about your request.
Because your data lives on your device and in your own iCloud, you can view, export, and delete it yourself at any time in the app (including “Delete my data,” which also clears locally cached Apple Health sleep), and you can remove synced copies through your device’s iCloud settings.
To make a formal request or appeal, email support@voogllc.com. We will respond within the timeframe required by law. You may use an authorized agent where the law permits.
Consent
We obtain your affirmative opt-in consent before collecting your consumer health data, and a separate consent before sharing it (for example, before you first use the AI assistant, which sends your message text to Google). You can withdraw either consent at any time by turning off the feature, revoking the permission in your device settings, or deleting your data.
Contact
Voog LLC · support@voogllc.com