PepCore Privacy Policy

Last updated: 5 November 2026

PepCore ("the app") is developed by Khaled Ashraf. This policy explains what data the app handles.

The short version

The AI Coach was removed from PepCore in version 1.0.12. From that version on, the app has no feature that sends what you track to us or to an AI provider, and it has no account, no analytics and no ad trackers. We shut down the AI Coach service on 4 November 2026. If you still run version 1.0.11 or earlier, the feature no longer works: a request it tries to send reaches our proxy, which refuses it without reading it and passes nothing to Anthropic. See AI Coach in older versions below. Updating the app removes the feature.

Data the app stores

• Peptide protocols, dose logs, reminders
• Body metrics, InBody scans, blood work entries, side effects, fasting logs
• Profile information you enter

This data is stored locally in the app's private storage, encrypted by iOS Data Protection when your iPhone has a passcode. The app does not upload it to us, and we cannot see it. A backup of your iPhone that you make with iCloud or a computer can include it, under Apple's terms. The one exception was the AI Coach in versions 1.0.11 and earlier, described below.

How the app collects this data

• You type it. Almost everything — protocols, doses, reminders, lab values, body measurements, the health profile — is entered by you, by hand, in the app.
• Apple Health, only if you connect it. If you tap "Connect Apple Health", PepCore reads two values and only two: body weight and body fat percentage. It reads nothing else — no heart rate, no sleep, no steps — and it never writes anything back to Health. If you never tap that button, PepCore never asks for and never reads Health data.
• Your camera, your photo library or the Files app, when you scan or import a PepCore QR code, add a photo to an InBody scan, or import a lab report photo or PDF, which PepCore reads on your device. PepCore gets the specific items you pick and has no access to the rest. In versions 1.0.11 and earlier, you could also attach a report to an AI Coach message.
• A backup file you import, if you restore one you exported earlier.

What the data is used for

• Everything you enter is used to run the features in front of you: showing your protocol, scheduling reminders, drawing charts, and producing the PDF, CSV, JSON and text files you choose to export.
• Until 4 November 2026, in versions 1.0.11 and earlier, data left your device for exactly one purpose — answering an AI Coach message that you sent. That is described in full under AI Coach in older versions.
• The two rate-limit counters described below were used only to cap how many AI Coach requests one install, or one network, could make.
• That is the complete list. Your data is not used for advertising, profiling, model training or analytics, and it is not sold or rented to anyone.

Backup files (optional)

Backups are files you create and control. When you tap Export Backup File, PepCore writes a file on your iPhone and hands it to the iOS share sheet — where it goes next is entirely your choice. It is never sent to us, and never passes through any server of ours. Keep it somewhere safe: it is the only copy PepCore makes outside the app.

AI Coach in older versions (1.0.11 and earlier)

We removed the AI Coach in version 1.0.12 and shut down its service on 4 November 2026. Versions 1.0.11 and earlier can still try to send a request. It reaches our proxy on Cloudflare, which refuses it without reading it and passes nothing to Anthropic. The rest of this section describes how the AI Coach worked until that date, and what happens to data sent before it. Please read it if you ever used the feature.

Your permission came first. Before the first AI Coach request, PepCore showed you a screen naming exactly what would be sent and who it would be sent to, and asked you to agree. Until you agreed, the feature did not run and sent nothing.

What is sent. When you send an AI Coach message, the request contains:

• Your message text — what you type, or the text of a suggested question if you tap one.
• Any images you attach. These are the most sensitive thing PepCore transmitted: photographs of blood work and lab reports, InBody body-composition printouts, Whoop screenshots. You can attach them from the camera, from your photo library, or from the Files app. A PDF you pick is not sent as a file — PepCore renders its first five pages to images and sends those images.
• A summary of the compounds you are tracking — for each one: name, the amount you entered, injection type and frequency. (Versions before 1.0.11 also included the vial size and water volume you entered, and a figure derived from them; from 1.0.11 on, those are not sent.) It is included with every message so answers relate to what you actually log.
• Your health profile, in full, exactly as you typed it. That screen invites goals, lab results and biomarkers, medical history, conditions and medications, previous protocols and notes from your doctor — so treat anything you put there as something that will be sent.
• The recent conversation — the text of up to the last 20 messages in the current chat, so the coach follows what you were discussing. Images from earlier messages are not re-sent.

Where it goes. The request is sent to api.pepcoreapp.com, a pass-through proxy that we operate, which forwards it to Anthropic's API. Anthropic generates the response and it is returned to your device.

Anthropic, and the protection your data has there. Anthropic PBC processes AI Coach requests on our behalf and for no other purpose. We have reviewed Anthropic's published terms for its commercial API and confirm that they give your data protection equal to what this policy promises:

• Anthropic does not use inputs or outputs from its commercial API to train models.
• Anthropic's published policy states that API inputs and outputs are deleted from its systems within 30 days of receipt, other than the exceptions it lists there — see how long Anthropic stores data.
• Anthropic receives only the request itself — your message, your attachments, the stack summary and your health profile. Our proxy does not pass on the per-install identifier or your IP address, and there is no name, email or account to pass on, because PepCore has none. Nothing in the request identifies you to Anthropic.

Anthropic's own documents: Commercial Terms of Service and Privacy Policy. Even so: do not upload anything you would not want processed by a third-party AI service.

What the proxy retains. Our proxy code does not save your messages, your images, your health profile or your stack. It holds the request only in memory for as long as it takes to forward it, and writes none of that content to our database. The proxy runs on Cloudflare Workers, and Cloudflare processes the traffic as our infrastructure provider under its own terms.

What the proxy does store, for rate limiting only. To stop a single install or a script from exhausting the service, the proxy keeps two short-lived counters. Neither holds your messages or health data, and neither is forwarded to Anthropic.

• An anonymous per-install identifier, sent as an x-device-id header. It is used solely to enforce the fair-use limits — 5 AI Coach requests per install per day and 50 per install per calendar month. It is stored as a counter alongside the current date, and the counter expires automatically: about 26 hours for the daily one, about 32 days for the monthly one. It is not an Apple advertising identifier, it is not linked to your name, email or Apple Account, it is not used to build a profile of you, and it is not used for tracking or advertising.
• Your IP address, which is part of any internet connection and is seen by our proxy the moment your device contacts it. It is used solely to enforce a limit of 60 AI Coach requests per IP address per day — the per-install counter above can be trivially reset by a script, so this is the limit that actually protects the service from abuse. It is stored only as a counter key alongside the current date, expires automatically after about 26 hours, and is not linked to your identity, your messages or anything you track.

These numbers are the limits that were in force when the service ended.

Chat history. An older version saves the transcript in the app's own local storage. We never receive a copy and there is nowhere for us to keep one. Attached images are not saved with it. Until the service ended, the text of recent messages was re-sent to Anthropic with each new message, as described above, so the coach had context. Clearing the chat in an older version deletes that file. If you updated to 1.0.12 or later without clearing it, the file can remain in the app's storage, with no screen to open it, until you delete the app.

If you never used the AI Coach, nothing in this section applies to you.

Subscriptions

Payments are processed entirely by Apple. We never see your payment details. The app checks your subscription with Apple on your iPhone. Apple gives us sales and subscription reports, which include no name or contact details.

What we DON'T do

• No analytics SDKs, no ad trackers, no advertising identifiers, no tracking across apps or websites
• No account required; we don't collect your email or identity
• We never sell your data
• Until 4 November 2026, in versions 1.0.11 and earlier, the only third party that received the contents of your data was Anthropic, and only for AI Coach requests that you initiated. Our proxy runs on Cloudflare, which carried that traffic as our infrastructure provider. The app now sends no such requests to Anthropic.

This website

Everything above is about the app. This website (pepcoreapp.com) counts page views on its own server so we can see which pages people read. Each view records only the page address, the site you arrived from, your country, and whether you are on a mobile or a desktop browser. There is no analytics script, no cookie, no advertising identifier and no visitor identifier in that count, so the counts cannot be tied back to you or joined up into a visit history. The site runs on Cloudflare, which sees your IP address as part of any connection, as our infrastructure provider. If you use the form on the home page to ask for news of new features and new languages, we store the email address you type, the language of the page and the time you submitted it, and we use them only to send you those updates. We keep them until you ask us to remove them. When the form accepts a new address, we also keep a counter that limits how many addresses can be submitted from one network in a day. Its key is your IP address and the date, it holds only a count, it is stored separately from your email address, and it expires automatically after about 48 hours.

Data deletion

Delete the app and all local data is removed, including any AI Coach transcript left by an older version. Any backup file you exported is yours to delete wherever you saved it. The AI Coach rate-limit counters expire on their own and require no action from you: the daily per-install and per-IP counters within about 26 hours, and the monthly per-install counter within about 32 days. The website form's counter expires on its own within about 48 hours. To have your email address removed from the updates list, email support@pepcoreapp.com from that address. We remove it and reply once. We then keep a hash of the address, the date and the outcome for about 12 months, as a record of the removal and so we don't reply twice. The hash is not your address, but anyone who already has your address could match it. Like any email you send us, your request, including your address, stays in our support mailbox, which is hosted by our email provider, for as long as we need it to answer you and keep a record.

Age requirement

PepCore is for adults 18+. It is an educational reference and tracking tool — it does not provide medical advice, diagnosis, treatment, prescriptions, or recommendations.

Contact

Questions: support@pepcoreapp.com

See also the Terms of Service and the Support page.