PepFem AI (“PepFem,” “we,” “us,” or “our”) is a personal tracking and educational app for women who use peptides and related medications. This policy explains what information the app handles, where it lives, who can see it, and the choices you have.
We built PepFem to be private by design. The short version: almost everything you log stays on your device and in your own iCloud account, where we cannot see it. We do not sell your data, we do not show ads, and we use no third-party analytics or tracking.
PepFem is not a healthcare provider, is not a medical device, and does not provide medical advice. See our Medical Disclaimer.
1. Who we are
PepFem AI is provided by Voog LLC, located in California, USA. For privacy questions or to exercise your rights, contact us at support@voogllc.com. For users in the EU/UK, this is the data controller for your information.
2. The information we handle
Information you enter in the app
- Health and reproductive information: the peptides and medications you track; dose logs (amount, unit, date and time, injection site, pain level, notes, and any progress photos you add); dosing schedules, cycling plans, titration plans, and vials; menstrual cycle information (period start dates, cycle length); life-stage and reproductive context (for example trying to conceive, pregnant, breastfeeding, perimenopause, menopause); whether you take oral birth control or hormone therapy; side effects; and daily check-ins (weight, mood, energy, sleep).
- Optional profile details: a first name (used only to greet you in the app), age, height, weight, and units. The name you enter is stored on your device and is never sent to us.
- AI chat messages: the text you type into the in-app AI assistant. See Section 5.
Information collected automatically
- Subscription and purchase data: when you start a free trial or subscribe, Apple processes the purchase and our subscription provider, RevenueCat, records purchase events (for example, which plan, trial status, renewal, and an anonymous RevenueCat identifier) so we can unlock features and manage your subscription.
- Limited technical data for the AI feature: when you use the AI chat, the request includes your device’s IP address (used briefly to prevent abuse and spam) and a randomly generated app identifier that is not linked to your name or your health data.
Information we do not collect
- We do not require an account, and we do not collect your name, email address, or password.
- We use no third-party analytics, advertising, marketing, or tracking software, and we do not track you across other apps or websites.
- Apple may provide us with aggregate, non-identifying App Store statistics (such as total downloads). These do not identify you.
3. How we use your information
| Purpose | Information used | Legal basis (EU/UK) |
|---|---|---|
| Provide the core tracking, reminders, cycle, and insights features | Health, reproductive, profile, and check-in data | Your explicit consent (health data); performance of our agreement with you |
| Power the AI assistant | Your chat messages | Your consent (you opt in before using it) |
| Manage your subscription and trial | Purchase data via Apple and RevenueCat | Performance of our agreement with you |
| Keep the AI feature available and prevent abuse | IP address and random app identifier | Our legitimate interest in securing the service |
We do not use your information to make automated decisions that have legal or similarly significant effects on you.
4. Where your data lives: your device and your iCloud
The information you log is stored on your device in an encrypted database, and, if you are signed into iCloud, it syncs through Apple’s iCloud (CloudKit) private database so it is available on your other devices and survives reinstalling the app.
This data is stored in your own iCloud account. We cannot read it. We do not operate a server that holds your health, cycle, dose, or photo data. iCloud is governed by Apple’s Privacy Policy and iCloud terms.
- Progress photos are stored only on the device where you take them, encrypted, and are not uploaded to us or synced to other devices.
- Apple Health: if you allow it, PepFem reads only your sleep data to help fill in your daily check-in. It is read-only (we never write anything to Apple Health), it is kept only on your device, and, per Apple’s rules, it is never synced to iCloud or sent to us.
5. The AI assistant (third-party AI)
PepFem includes an optional AI chat that gives general, educational information about peptides and women’s health. You opt in before using it.
- What is sent: when you send a message, the text you type is transmitted over an encrypted connection through our service provider Cloudflare to Google’s Gemini API, which generates the reply. Your other in-app data (your cycle, doses, photos, profile, and logs) is not sent to Google unless you personally type it into a message.
- What we keep: we do not store your conversations on our servers. Our proxy keeps only anonymous counters used to limit spam.
- What Google does: Google processes your messages to generate a response under its paid API business terms. Under those terms Google does not use the content to train its models, and it retains messages only for a short period (currently up to about 55 days) for abuse monitoring and security, after which they are deleted. See Google’s Gemini API terms.
- Please do not enter information that directly identifies you (such as your full name or address) into the AI chat.
- AI responses are general information, not medical advice.
6. Service providers we share data with
We share data only with the providers needed to run the app. We do not have corporate affiliates.
| Provider | What they receive | Why | Their terms |
|---|---|---|---|
| Apple (iCloud, App Store, StoreKit) | Your synced app data (in your private iCloud, not visible to us); purchase transactions | Sync and backup; process purchases | apple.com/legal/privacy |
| Google (Gemini API) | The text of your AI chat messages | Generate AI replies | Gemini API terms |
| Cloudflare | Your AI chat request, including IP address, in transit | Securely route and rate-limit AI requests | cloudflare.com/privacypolicy |
| RevenueCat | Purchase events and an anonymous identifier | Manage subscriptions and trials | revenuecat.com/privacy |
7. We do not sell or share your data, and we do not advertise
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California and other state laws. We do not use your sensitive or health information for targeted advertising or to build a profile about you. We do not run ads.
8. Data retention and deletion
- Information you log stays on your device and in your iCloud until you delete it. You can delete individual entries at any time, or remove everything at once using “Delete my data” in the app, which erases your logs, photos, and locally cached Health sleep data from the device.
- To also remove synced copies, delete the app’s data from your iCloud account in your device’s iCloud settings, or sign out of iCloud. You can export a copy of your data first from within the app (JSON or CSV).
- We retain purchase records through Apple and RevenueCat for as long as needed to manage your subscription and meet legal and accounting obligations.
- Google retains AI chat messages only briefly for abuse monitoring (see Section 5).
9. Your rights and choices
Depending on where you live, you may have the right to access the information about you, correct it, delete it, withdraw consent, limit the use of sensitive information, obtain a copy of your data, and appeal a decision we make about a request. We will not discriminate against you for exercising these rights.
- Most rights are in your hands directly: because your data lives on your device and in your own iCloud, you can view, edit, export, and delete it yourself in the app at any time.
- To make a formal request (including a request for the list of third parties your health data was shared with, or to appeal), email support@voogllc.com. We will verify your request as needed and respond within the time required by law. You may use an authorized agent where the law allows.
- EU/UK users may also lodge a complaint with their local data protection authority.
10. Consent
We ask for your consent before collecting health information and again, separately, before you use the AI feature (which shares your chat text with Google). You can withdraw consent at any time by turning off the relevant feature, denying or revoking a permission in your device settings, or deleting your data. Withdrawing consent does not affect processing already carried out.
11. Children
PepFem is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under the minimum age in your country, such as 16 in parts of the EU). If you believe a child has provided information through the app, contact us at support@voogllc.com and we will delete it.
12. International users
We are based in California, USA, and our providers (Apple, Google, Cloudflare, RevenueCat) may process data in the United States and other countries. Where required, these transfers rely on appropriate safeguards such as Standard Contractual Clauses or the providers’ own data-transfer frameworks. If you use the app from outside your home country, your information may be processed in countries with different data-protection laws.
13. Security
Your data is encrypted on your device and protected by your device passcode and Apple’s file protection. Information travels over encrypted (HTTPS/TLS) connections. No method of storage or transmission is ever completely secure, but we work to protect your information and to collect as little of it as possible.
14. Changes to this policy
If we make material changes, we will update the date at the top and, where appropriate, notify you in the app. Your continued use after an update means you accept the revised policy.
15. Contact us
Questions, requests, or concerns: Voog LLC, support@voogllc.com.