PepCore Privacy Policy

Last updated: 25 August 2026

PepCore ("the app") is developed by Khaled Ashraf. This policy explains what data the app handles.

The short version

Everything you track in PepCore stays on your device — except the AI Coach. When you send an AI Coach request — and only after you have given permission on a screen that spells out what will be sent and who it goes to — that request leaves your device and is handled by our proxy and by Anthropic. Nothing else is sent anywhere, and PepCore has no account, no analytics and no ad trackers.

Data the app stores — on your device only

• Peptide protocols, dose logs, reminders
• Body metrics, InBody scans, blood work entries, side effects, fasting logs
• Profile information you enter

This data is stored locally in the app's encrypted private storage (iOS Data Protection). We do not upload it, and we cannot see it. The one exception is the AI Coach, described below.

How the app collects this data

• You type it. Almost everything — protocols, doses, reminders, lab values, body measurements, the health profile — is entered by you, by hand, in the app.
• Apple Health, only if you connect it. If you tap "Connect Apple Health", PepCore reads two values and only two: body weight and body fat percentage. It reads nothing else — no heart rate, no sleep, no steps — and it never writes anything back to Health. If you never tap that button, PepCore never asks for and never reads Health data.
• Your camera, your photo library or the Files app, when you attach a report to an AI Coach message. PepCore gets the specific items you pick and has no access to the rest.
• A backup file you import, if you restore one you exported earlier.

What the data is used for

• Everything you enter is used to run the features in front of you: showing your protocol, calculating reconstitution, scheduling reminders, drawing charts, and producing the PDF, CSV, JSON and text files you choose to export.
• Data leaves your device for exactly one purpose — answering an AI Coach message that you sent. That is described in full in the next section.
• The two rate-limit counters described below are used only to cap how many AI Coach requests one install, or one network, can make.
• That is the complete list. Your data is not used for advertising, profiling, model training or analytics, and it is not sold or rented to anyone.

Backup files (optional)

Backups are files you create and control. When you tap Export Backup File, PepCore writes a file on your iPhone and hands it to the iOS share sheet — where it goes next is entirely your choice. It is never sent to us, and never passes through any server of ours. Keep it somewhere safe: it is the only copy of your data outside the app.

AI Coach (optional, Premium)

This is the one feature that sends your data off your device. Please read this section carefully.

Your permission comes first. Before the first AI Coach request, PepCore shows you a screen naming exactly what will be sent and who it is sent to, and asks you to agree. Until you agree, nothing leaves your device and the feature does not run.

What is sent. When you send an AI Coach message, the request contains:

• Your message text — what you type, or the text of a suggested question if you tap one.
• Any images you attach. These are the most sensitive thing PepCore transmits: photographs of blood work and lab reports, InBody body-composition printouts, Whoop screenshots. You can attach them from the camera, from your photo library, or from the Files app. A PDF you pick is not sent as a file — PepCore renders its first five pages to images and sends those images.
• A summary of the compounds you are tracking — for each one: name, dose, injection type, frequency, vial size, bacteriostatic water volume, and the units-per-dose PepCore calculates from those. It is included with every message so answers relate to what you actually log.
• Your health profile, in full, exactly as you typed it. That screen invites goals, lab results and biomarkers, medical history, conditions and medications, previous protocols and notes from your doctor — so treat anything you put there as something that will be sent.
• The recent conversation — the text of up to the last 20 messages in the current chat, so the coach follows what you were discussing. Images from earlier messages are not re-sent.

Where it goes. The request is sent to api.pepcoreapp.com, a pass-through proxy that we operate, which forwards it to Anthropic's API. Anthropic generates the response and it is returned to your device.

Anthropic, and the protection your data has there. Anthropic PBC processes AI Coach requests on our behalf and for no other purpose. We have reviewed Anthropic's published terms for its commercial API and confirm that they give your data protection equal to what this policy promises:

• Anthropic does not use inputs or outputs from its commercial API to train models.
• Anthropic's published policy states that API inputs and outputs are deleted from its systems within 30 days of receipt, other than the exceptions it lists there — see how long Anthropic stores data.
• Anthropic receives only the request itself — your message, your attachments, the stack summary and your health profile. Our proxy does not pass on the per-install identifier or your IP address, and there is no name, email or account to pass on, because PepCore has none. Nothing in the request identifies you to Anthropic.

Anthropic's own documents: Commercial Terms of Service and Privacy Policy. Even so: do not upload anything you would not want processed by a third-party AI service.

What the proxy retains. Our proxy code does not save your messages, your images, your health profile or your stack. It holds the request only in memory for as long as it takes to forward it, and writes none of that content to our database. The proxy runs on Cloudflare Workers, and Cloudflare processes the traffic as our infrastructure provider under its own terms.

What the proxy does store, for rate limiting only. To stop a single install or a script from exhausting the service, the proxy keeps two short-lived counters. Neither holds your messages or health data, and neither is forwarded to Anthropic.

• An anonymous per-install identifier, sent as an x-device-id header. It is used solely to enforce the fair-use limits — currently 5 AI Coach requests per install per day and 50 per install per calendar month. It is stored as a counter alongside the current date, and the counter expires automatically: about 26 hours for the daily one, about 32 days for the monthly one. It is not an Apple advertising identifier, it is not linked to your name, email or Apple Account, it is not used to build a profile of you, and it is not used for tracking or advertising.
• Your IP address, which is part of any internet connection and is seen by our proxy the moment your device contacts it. It is used solely to enforce a limit of 60 AI Coach requests per IP address per day — the per-install counter above can be trivially reset by a script, so this is the limit that actually protects the service from abuse. It is stored only as a counter key alongside the current date, expires automatically after about 26 hours, and is not linked to your identity, your messages or anything you track.

We may adjust these limits to keep the feature sustainable; the numbers above are the ones in force at the "last updated" date.

Chat history. The transcript is stored on your device only — we never receive a copy and there is nowhere for us to keep one. Attached images are not saved with it. The text of recent messages is re-sent to Anthropic with each new message, as described above, so the coach has context. Clearing the chat deletes that file from your device.

If you never use the AI Coach, none of the above applies to you and no health data leaves your device.

Subscriptions

Payments are processed entirely by Apple. We never see your payment details. We receive anonymous transaction receipts to unlock Premium.

What we DON'T do

• No analytics SDKs, no ad trackers, no advertising identifiers, no tracking across apps or websites
• No account required; we don't collect your email or identity
• We never sell your data
• The only third party that receives the contents of your data is Anthropic, and only for AI Coach requests that you initiate. Our proxy runs on Cloudflare, which carries that traffic as our infrastructure provider.

This website

Everything above is about the app. This website (pepcoreapp.com) counts page views on its own server so we can see which pages people read. Each view records only the page address, the site you arrived from, your country, and whether you are on a mobile or a desktop browser. There is no analytics script, no cookie, no advertising identifier and no visitor identifier of any kind, so the counts cannot be tied back to you or joined up into a visit history. If you use the footer form to ask for launch news, we store the email address you type, the language of the page and the time you submitted it, and we use them for nothing else.

Data deletion

Delete the app and all local data is removed, including the AI Coach transcript. Any backup file you exported is yours to delete wherever you saved it. The AI Coach rate-limit counters expire on their own and require no action from you: the daily per-install and per-IP counters within about 26 hours, and the monthly per-install counter within about 32 days.

Age requirement

PepCore is for adults 18+. It is an educational reference and tracking tool — it does not provide medical advice, diagnosis, treatment, prescriptions, or recommendations.

Contact

Questions: support@pepcoreapp.com

See also the Terms of Service and the Support page.