Privacy Policy

1. Data We Collect

Account data: Your email address and encrypted password. Optional profile information includes display name, bio, and avatar.

Protocol and health data: Peptide protocols, dose logs, health metrics, food logs, exercise logs, TRT data, side effect logs, progress photos, and lab results that you choose to record.

Community data: Messages you post in community channels and supplier reports you submit.

Usage data: We may collect basic analytics about how the app is used to improve the service.

2. How We Store Data

Your data is stored in a SQLite database on the app's server. Passwords are hashed using bcrypt and are never stored in plain text. Session tokens are signed JWTs stored in httpOnly cookies.

3. How We Use Your Data

We use your data to:

• Provide the calculator, scheduling, tracking, and community features
• Generate charts, summaries, and insights from your logged data
• Process subscription payments through Stripe
• Improve and maintain the service

4. Data Sharing

We do not sell your data. Your data is never shared with third parties for advertising or marketing purposes.

Stripe: Payment processing is handled by Stripe. Stripe receives your email and payment information but does not receive your health data.

Community: Messages you post in community channels are visible to other signed-in users. Supplier reports are visible to admins and may be reviewed for moderation purposes.

Protocol sharing: If you generate a share link for a protocol, the protocol details (but not your email or identity) are visible to anyone with the link.

Legal compliance: We may disclose data if required by law or to protect the rights, property, or safety of the service and its users.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (protocols, logs, metrics, photos, community posts) is permanently deleted from the database.

6. Data Security

We take reasonable measures to protect your data, including hashed passwords, httpOnly session cookies, and secure connections in production. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Access: You can view all your data through the app interface at any time.

Export: Paid subscribers can export all their data from the dashboard.

Deletion: You can delete individual records at any time. You can also permanently delete your entire account from the Profile page — this cancels any active subscription and removes all your data immediately.

8. Cookies

We use a single httpOnly cookie for session authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's Privacy

ReconDose is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this privacy policy from time to time. Continued use of the service after changes constitutes acceptance of the updated policy.