Privacy Policy
Beta notice. Peppy is an educational organization tool for preparing questions and context for a qualified professional. This policy is a product-specific baseline and should receive legal review before broad public launch. It is not legal advice.
1. Information we collect
- Account details such as email address, authentication status, and consent/version acceptance records.
- On-device intake details you choose to enter, including goals, symptoms, supplements, routines, bloodwork notes, and professional questions.
- Authenticated health-context rows only after verified login and explicit consent.
- Fitness tracking, chat history, saved chart, hormone/lab value, and upload-receipt data associated with your verified account.
- Technical logs and usage signals needed to secure, debug, and improve the beta.
2. Photo and document processing
- Prep Pro users may submit supported photos or PDFs for AI-assisted logging. Images, or text extracted from PDFs, are sent to the configured AI provider for processing.
- Peppy does not store the raw photo or PDF. It stores an upload receipt, your optional note, action summaries, and tracking entries successfully created from the analysis.
- Audio uploads and transcription are not supported.
- No payment card data is stored by Peppy; any checkout flow must stay with the payment provider.
3. How we use information
- To generate and save your prep snapshot and authenticated tracking history when you explicitly choose to do so.
- To analyze supported photos or PDFs and create the tracking entries you request.
- To provide export/deletion/account flows for verified users.
- To maintain consent records, prevent abuse, debug errors, and improve product safety.
- To communicate service, account, or beta feedback updates.
4. AI-assisted output disclosure
Peppy may use deterministic logic and AI-assisted summaries to organize information. Outputs are educational prep aids only and are not medical, clinical, pharmacological, legal, or professional advice. Always review outputs with a qualified professional before making decisions.
5. Sharing and service providers
We do not sell personal information. We may use managed providers for hosting, authentication, database storage, payment checkout, email, analytics, security, and AI-assisted processing only to operate and improve Peppy.
6. Retention, export, and deletion
Local intake remains on-device until a verified account saves it. Authenticated health-context, tracking, chat, chart, hormone/lab, and upload-receipt data is retained while the account is active or as needed for security/legal records. Raw uploaded files are not retained by Peppy after processing. Export and deletion request flows are available through account-gated storage APIs and support channels, though provider-side processing and retention remain subject to the provider’s applicable terms.
7. Security
Peppy uses reasonable MVP safeguards, including authenticated storage, email-verification gates, row-level ownership rules, server-side secret handling, rate limits, and request validation. No internet service can guarantee absolute security. Do not enter emergency, highly sensitive, or unsupported regulated data.
8. Contact
Questions or deletion requests: support@jk-automations.com.