Privacy Policy

1. Who we are

PeptideCRM is developed and published by FNKY Rooster Designs, LLC ("we," "our," or "us"). This policy describes how we handle information in connection with the PeptideCRM app (the "App").

2. Information we collect

Account information. When you create an account, we collect the sign-in method you choose — Apple, Google, or an email address — to authenticate you. If you sign in with Apple or Google, we receive the identifier and email address those services provide. We do not receive your password when you use Apple or Google sign-in.

Subscription status. Subscription purchases are processed entirely by Apple through the App Store. We do not collect or store your payment card details. We receive subscription status (active, trialing, expired) from Apple's systems (via RevenueCat, our subscription management provider) to determine whether you have access to the App.

We do not currently collect analytics, usage tracking, or crash reporting data from the App.

3. Data that stays on your device

The following is stored exclusively in an on-device database and is never transmitted to, stored on, or accessible by FNKY Rooster Designs, LLC:

• Client names, contact information, and health-related notes you choose to record
• Peptide and vial assignments, protocol amounts, and pricing
• Sales, inventory, and reorder data
• Communication logs, reminders, and referral records
• Progress check-ins and any other operational data you enter

This data lives in a local database on your phone. It only leaves your device when you explicitly create a backup and choose where to send it — for example, by sharing it to your own cloud storage, computer, or email through your device's native share sheet. We do not receive a copy of that backup.

4. How we use the information we do collect

• To authenticate your account and keep it secure
• To verify your subscription status with Apple/RevenueCat so the App can grant or restrict access accordingly
• To respond to support requests you send us directly
• To comply with legal obligations

We do not sell your information. We do not use it for advertising. We have no server-side access to your client data to use for any purpose, including improving the App.

5. Data sharing

We share limited account information only as follows:

• Apple: for authentication (Sign in with Apple) and subscription processing (App Store).
• Google: for authentication (Google Sign-In), if you choose that sign-in method.
• RevenueCat: our subscription management provider, to verify and sync your subscription status.
• Legal requirements: if required by law, court order, or to protect our legal rights.

None of these third parties receive your client or business data, because we never have it to share.

6. Data retention and deletion

Account credentials (your sign-in identifier and, if applicable, hashed email/password) are retained for as long as your account is active. If you delete your account from within the App, this account information is deleted. Because client and operational data lives only on your device, deleting the App removes that data completely and immediately — there is no server-side copy for us to separately delete. See our Data Deletion page for full instructions.

7. Security

Your on-device database is protected by your device's own security (passcode, Face ID, or Touch ID) and PeptideCRM's own account lock. Because your data never transmits to a server in normal use, it is not exposed to the risks associated with centralized data breaches. No method of storage is 100% guaranteed against all risk, including loss of your device without a backup — which is why the App reminds you to back up regularly.

8. Account safety — please read

Because we do not hold a copy of your data, your sign-in method is the only way to access your account. If you lose access to the email, Apple ID, or Google account used to sign in, and you do not have a recent backup, your data may not be recoverable. The App shows this warning when you create an account, and reminds you to back up regularly.

9. Children's privacy

PeptideCRM is intended for adult business users only and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with information, contact us at [email protected].

10. Your rights

You have the right to access, correct, or delete your account information, and to export your operational data at any time directly from within the App (Settings → Export). To request deletion of your account information, use the in-app deletion option or contact us at [email protected].

11. California Privacy Rights (CCPA)

California residents may have additional rights under the California Consumer Privacy Act. We do not sell personal information. To exercise CCPA rights, contact [email protected].

12. Changes to this policy

We may update this Privacy Policy from time to time. We will note material changes with an updated "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact

FNKY Rooster Designs, LLC
[email protected]
Governing law: State of Arizona, USA