Privacy Policy

1. Overview

PRTCL is owned and operated by Align to Grind LLC ("PRTCL," "we," "us," or "our"), based in Nevada, United States.

This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the PRTCL mobile application (the "App").

PRTCL is a personal tracking, educational, and organizational tool for informational and record-keeping purposes only. We do not provide medical services, medical advice, or dosing recommendations.

By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored in hashed form; we never store plaintext passwords)
• Profile information you choose to provide (such as display name)

You can also create your account using Sign in with Apple or Sign in with Google instead of a password. When you do, that provider confirms your identity and may share your name and an email address with us to set up your account. Sign in with Apple offers a private relay option that hides your real email address.

Onboarding Information

If you choose to provide information during onboarding, we may collect:

• Goals and interests you select (such as "Track peptides," "Learn about peptides," "Set health goals")
• Experience level with peptides
• Primary wellness goals
• Information complexity preference (beginner, intermediate, or advanced)

This information is collected solely to personalize your app experience and is stored in your account.

User-Entered Data

Information you choose to enter in the App, including:

• Peptide names and details
• Inventory and supply information
• Dose log entries and history
• Protocol and schedule data
• Cycle tracking data
• Reminder preferences
• Notes and personal annotations

Tracking Data

If you choose to use the App’s tracking features, we may collect:

• Injection site selections and history

This tracking data is collected to provide app functionality and is stored in your account.

Dose Calculator Data

If you use the Dose Calculator, the values you enter (such as syringe type, vial quantity, reconstitution volume, desired dose) are processed locally to generate calculation results. Dose Calculator inputs and outputs are not stored in your account or transmitted to any third party unless you choose to save the result as a log entry.

Subscription and Payment Information

If you purchase a paid subscription, we collect information necessary to manage your subscription:

• iOS purchases: A RevenueCat-issued anonymous identifier, your subscription tier, renewal status, and purchase history. PRTCL does not receive your payment card information; Apple processes all payments on iOS.
• Web purchases: Billing email and a Stripe customer identifier. Stripe processes your payment card information directly and PRTCL never receives or stores your full card number.

Search Queries (AI-Assisted Features)

When you use semantic search in the App, your search query text is sent to Google's Generative Language API (Gemini) to generate an embedding used to find matching content. When you request an AI-generated summary, the relevant text is sent to Anthropic's Claude API. Your account email and identity are not included in these requests. Query text is processed by the AI provider in accordance with the provider's API policy and is not retained by PRTCL beyond a short-lived performance cache.

Device and Technical Information

We collect limited technical information to maintain app functionality and troubleshoot issues:

• Device type and operating system version
• App version
• Crash logs and error reports collected via Sentry. We have configured Sentry to scrub personally identifiable information and health data from error reports before they leave your device. Sentry receives only sanitized error context.

Usage and Product Analytics

To understand how the App is used and to improve it, we log first-party product-usage events, such as which screens you open, which features you use, and when you complete key steps (for example, finishing the guided walkthrough or viewing a lesson). When you are signed in, these events are associated with your account. This is first-party analytics used only to operate and improve PRTCL. It is not third-party behavioral tracking, which we do not use (see Section 8).

3. How We Use Information

We use your information to:

• Provide and operate the App
• Store and sync your data across devices
• Authenticate your account
• Provide app features (peptide library, dose logs, protocols, schedules, reminders, injection site tracking, dose calculator, and educational content)
• Send notifications about scheduled doses and other reminders you configure
• Manage access to the App
• Personalize your experience based on onboarding preferences and selected information complexity level
• Respond to support requests
• Maintain security and prevent misuse

We do not:

• Provide medical advice, diagnosis, or treatment
• Use your data to make dosing or health recommendations
• Sell your personal information
• Use your tracking data or calculator data for advertising
• Share your data with third parties for marketing purposes
• Store or transmit Dose Calculator inputs or outputs to any third party

4. Data Storage and Security

PRTCL uses the following infrastructure to store and process your data:

• Supabase - authentication and primary database hosting
• Vercel - web hosting for the App and the marketing site
• Industry-standard encryption in transit (TLS/SSL) and at rest

Data is encrypted in transit and at rest where supported by our providers. We use industry-standard security measures, including hashed passwords and secure database access controls. Despite these measures, no system can guarantee absolute security. You use the App at your own risk.

Tracking Data Storage:

Injection site and other tracking data is stored securely in our database within your user account. This data is accessible only to you.

5. Local Device Storage

To support app functionality, PRTCL may store limited data locally on your device, including:

• Cached user profile and subscription state (for faster loading and offline access)
• Notification preferences and scheduled notification identifiers
• Onboarding completion status
• Information complexity level preference
• Authentication tokens
• A short-lived cache of search-query embeddings to improve performance

6. Data Sharing

We do not sell, rent, or trade your personal data. We do not share your data with advertisers or marketing networks.

We share information only with service providers necessary to operate the App, and only the minimum data needed for that service to function. Each service is contractually bound to use your data only to provide services to PRTCL.

7. Third-Party Services

PRTCL relies on the following third-party services. Each operates under its own privacy policy.

Infrastructure

• Supabase - authentication, database, and edge function hosting. supabase.com/privacy
• Vercel - web hosting and request logging. vercel.com/legal/privacy-policy

Identity Providers

• Apple (Sign in with Apple) - confirms your identity when you choose Apple sign-in and may provide your name and an email address, which can be a private relay address. apple.com/legal/privacy
• Google (Sign in with Google) - confirms your identity when you choose Google sign-in and may provide your name and email address. policies.google.com/privacy

Payments and Subscriptions

• Apple - processes all in-app purchases on iOS through the App Store. apple.com/legal/privacy
• RevenueCat - manages iOS subscription entitlements. RevenueCat receives an anonymous identifier and your subscription status. revenuecat.com/privacy
• Stripe - processes payment for web subscriptions. stripe.com/privacy

AI-Assisted Features

• Google (Generative Language API / Gemini) - generates embeddings for your search queries to enable semantic search. policies.google.com/privacy
• Anthropic (Claude API) - generates summaries when you request an AI-powered summary of a video or protocol. anthropic.com/legal/privacy
• Supadata.ai - fetches video transcripts when summarizing third-party video content. supadata.ai/privacy

Diagnostics

• Sentry - collects sanitized crash logs and error reports. We have configured Sentry to scrub personally identifiable information and health data before transmission. sentry.io/privacy

8. Tracking and Analytics

PRTCL does not track you across other companies' apps or websites, and does not share your data with data brokers.

We do not use behavioral analytics SDKs (such as Google Analytics, Mixpanel, Segment, Amplitude, or Meta Pixel), advertising SDKs, or cross-site tracking technologies.

We do log first-party product-usage events (for example, which screens or features you use) that are tied to your account when you are signed in. We use this only to operate and improve the App. This is separate from the third-party behavioral tracking described above, which we do not use.

App Tracking Transparency (iOS): PRTCL does not request the App Tracking Transparency (ATT) permission because we do not track you across apps or websites owned by other companies, nor share your data with data brokers.

Do Not Track and Global Privacy Control: The App and our website do not respond differently to "Do Not Track" browser signals because no industry standard for responding to such signals has been established. We honor Global Privacy Control (GPC) signals where applicable as an opt-out request under the California Consumer Privacy Act.

9. Data Retention

Your account data, user-entered data, and tracking data is stored as long as your account remains active.

If you delete your account or request deletion:

• Your personal, tracking, and user-entered data will be permanently removed within 30 days
• Some limited information may be retained if required for legal, security, or fraud-prevention purposes

10. Your Privacy Rights

You may:

• Access and update your information within the App
• Modify or delete tracking data (injection sites, dose logs, etc.) at any time
• Disable notifications through device settings
• Request account and data deletion by contacting support
• Request a copy of the data we hold about you

To request deletion or ask about your data:

Email: support@prtclapp.com

We will respond to data requests within 30 days.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing: PRTCL does not sell or share personal information as those terms are defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information, such as health-related data you enter, to what is necessary to provide the App. PRTCL already uses this information only to deliver the features you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at support@prtclapp.com. We will verify your identity before fulfilling your request and respond within 45 days.

Washington Residents (My Health My Data Act)

If you are a Washington State resident, your consumer health data is governed by our separate Consumer Health Data Privacy Policy, which describes the categories of consumer health data we collect, the sources and purposes of that collection, the third parties with whom we share it, and how to exercise your rights under the Washington My Health My Data Act (RCW 19.373).

In summary: PRTCL does not sell consumer health data, does not use it for advertising, and only collects it as necessary to provide the tracking, logging, and organizational features you actively request through the App. To exercise your rights, contact support@prtclapp.com.

Nevada Residents (Consumer Health Data Privacy Law)

If you are a Nevada resident, you have rights under Nevada’s Consumer Health Data Privacy Law, including:

• Right to Confirmation: You may request confirmation of whether we collect, share, or sell your consumer health data.
• Right to a List of Third Parties: You may request a list of third parties with whom we have shared your consumer health data.
• Right to Opt-Out: You may request that we stop collecting, sharing, or selling your consumer health data.
• Right to Deletion: You may request deletion of your consumer health data.

To exercise these rights, contact support@prtclapp.com. If we deny a request, you may appeal by emailing us. If you are unsatisfied with the result, you may contact the Nevada Attorney General.

PRTCL does not sell consumer health data.

11. Age Requirement

PRTCL is intended for users 18 years or older.

We do not knowingly collect information from anyone under 18. If we learn that a person under 18 has created an account, we will delete the account and associated information promptly.

12. Children’s Privacy

PRTCL does not knowingly collect or solicit personal information from anyone under 18 years of age. If we learn we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe a child under 18 may have provided us with personal information, please contact us at support@prtclapp.com.

PRTCL is not directed at children under 13. In compliance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13.

13. Health Information Disclaimer

Information entered into or synced with PRTCL may relate to health, wellness, or research substances. PRTCL:

• Does not provide medical advice or dosing recommendations
• Does not diagnose, treat, cure, or prevent any disease or medical condition
• Does not provide nutritional, dietary, or hydration advice
• Does not recommend specific substances, dosages, or protocols
• Stores information only as entered by the user
• Does not verify or validate any user-entered data, including calculator inputs or other tracking data

Users are responsible for how they use the information. Always consult a qualified healthcare professional for medical decisions.

14. International Users

PRTCL is operated from the United States.

If you access the App from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the App, you consent to this transfer and processing.

15. Data Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect your data, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest
• Hashed password storage
• Role-based access controls
• Regular security reviews

These measures meet or exceed the reasonable standard of care within the industry. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

The updated version will be available within the App and at our website with a revised "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy. For material changes, we will provide notice through the App or via email.