This Privacy Policy explains how EYKO LLC (“EYKO”, “we”, “us”), a limited liability company registered in the State of Wyoming, United States, operates the PepsLab mobile application (the “App”) and how we collect, use, and protect your information.
EYKO LLC, a limited liability company registered in the State of Wyoming, United States.
Contact: support@pepslab.app
| Category | Details | Where it is stored |
|---|---|---|
| Account data (optional) | Email address and authentication identifier when you sign in with Apple or Google. Creating an account is optional. | Supabase (our backend provider) |
| Journal & protocol data | Injections you log, schedules, vial inventory, calculator inputs, preferences (language, theme, units). | Locally on your device only. Not uploaded to our servers. |
| AI assistant messages | Messages you send to the in-app assistant are transmitted to our backend and processed by Anthropic (Claude) to generate a reply. Messages are not used to train AI models. | Processed transiently; not stored as conversation history on our servers |
| Usage analytics | Anonymous product events: acquisition source you select, creator code entered, paywall interactions, app language, platform (iOS/Android). | Supabase |
| Purchase data | Subscription status and transaction identifiers, processed by Apple and RevenueCat. We never see or store your payment card details. | Apple / RevenueCat |
Where the GDPR applies, we process data on the basis of: performance of a contract (providing the App and subscriptions), legitimate interests (product analytics, security), and consent where required. You may withdraw consent at any time.
We share data only with processors necessary to run the App: Supabase (hosting, authentication, database), Anthropic (AI assistant responses), RevenueCat (subscription management), and Apple (payments, Sign in with Apple). Each provider processes data under its own safeguards and data processing agreements.
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
Account data is kept while your account exists. Anonymous analytics events are kept for up to 36 months. Local data remains on your device until you delete it or uninstall the App.
You can delete your account and associated server-side data at any time directly in the App: Settings → Delete account. You can erase all local data via Settings → Reset data, or by uninstalling the App. For any request: support@pepslab.app.
Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, restrict or object to processing, and lodge a complaint with a supervisory authority. California residents: we do not “sell” or “share” personal information as defined by the CCPA.
Data in transit is encrypted (TLS). Server-side data is protected by row-level security and access controls. No system is 100% secure; use a device passcode to protect local data.
The App is intended for adults aged 18 or older. We do not knowingly collect data from anyone under 18.
We may update this policy. Material changes will be announced in the App. The “Last updated” date above reflects the current version.
Questions or privacy requests: support@pepslab.app