Last updated: July 2026
PepCore ("the app") is developed by Khaled Ashraf. This policy explains what data the app handles.
Everything you track in PepCore stays on your device — except the AI Coach. When you send an AI Coach request, that request leaves your device and is processed by our proxy and by Anthropic. Nothing else is sent anywhere, and PepCore has no account, no analytics and no ad trackers.
This data is stored locally in the app's encrypted private storage (iOS Data Protection). We do not upload it, and we cannot see it. The one exception is the AI Coach, described below.
If you use iCloud Backup, your data is stored in your own private iCloud container, governed by Apple's iCloud terms. We cannot access it.
This is the one feature that sends your data off your device. Please read this section carefully.
What is sent. When you send an AI Coach message, the request contains: your message text, any images you attach (for example a photo of a blood work report or an InBody printout), a summary of the compounds you are tracking (names, doses, frequency, vial size), and the free-text health profile you entered.
Where it goes. The request is sent to api.pepcoreapp.com, a pass-through proxy that we operate, which forwards it to Anthropic's API. Anthropic generates the response and it is returned to your device.
What the proxy retains. Our proxy code does not save your messages, your images, your health profile or your stack. It holds the request only in memory for as long as it takes to forward it, and writes none of that content to our database. The proxy runs on Cloudflare Workers, and Cloudflare processes the traffic as our infrastructure provider under its own terms.
The one thing it does store is an anonymous per-install identifier, sent as an x-device-id header. It is used solely to enforce a rate limit of 30 AI Coach requests per device per day, so that a single install cannot exhaust the service. It is stored as a counter alongside the current date and expires automatically after approximately 25 hours. It is not an Apple advertising identifier, it is not linked to your name, email or Apple Account, it is not used to build a profile of you, and it is not used for tracking or advertising.
Anthropic. Requests are processed under Anthropic's API data policies. Do not upload anything you would not want processed by a third-party AI service.
Chat history. Your conversation history is saved on your device only.
If you never use the AI Coach, none of the above applies to you and no health data leaves your device.
Payments are processed entirely by Apple. We never see your payment details. We receive anonymous transaction receipts to unlock Premium.
Delete the app and all local data is removed. Delete your iCloud backup from the app or from iCloud settings. The AI Coach rate-limit identifier expires on its own within about 25 hours and requires no action from you.
PepCore is for adults 18+. It is an educational reference and tracking tool — it does not provide medical advice, diagnosis, treatment, prescriptions, or recommendations.
Questions: support@pepcoreapp.com