NextMVP / apps / peptalab / privacy

Peptalab Privacy Policy

Last updated: August 26, 2026

Peptalab is made by NextMVP Solutions LLC ("we", "us"). This policy explains what we collect when you use the Peptalab app, why, and the controls you have. The short version: we collect what the product needs to work, we don't sell it, and deleting your account erases it.

What we collect

AI processing

Peptalab uses AI models to power its core features: when you use the lab-report scanner, the photo or PDF you choose is sent once to extract the printed values for your review, and is not stored by us; when you photograph a vial label, that image is sent once to transcribe what is printed on it; when you use insights or ask a question, a summary of your own logs (counts, dates, injection sites, bloodwork values, weight and the symptoms you reported) is sent so the answer can be drawn from your own records. No progress photos, no location, and nothing is used to train models. AI requests are processed by Anthropic and OpenAI. API providers process requests under their business terms and do not use API inputs or outputs for model training by default. AI outputs are automated suggestions, not professional advice.

Apple Health

If you turn on the Apple Health connection, Peptalab reads your weight, body fat percentage, waist measurement and resting heart rate, and writes back the weight, body fat and waist measurements you enter in Peptalab. Only body measurements are exchanged. Your doses, the compounds you track, your injection sites, the symptoms you report and your bloodwork values are never written to Apple Health.

Health data is used only to show you your own measurements inside the app. It is never used for advertising or marketing, never sold, never shared with third parties, and never sent to our analytics or attribution providers. You can turn the connection off at any time in Peptalab, and you control what it may read or write in Apple's Health app under Sharing.

How we use data

To provide and improve the product, keep your content synced and recoverable, provide support, prevent abuse, and understand aggregate usage. We do not sell your personal data and we do not show third-party advertising.

Who we share it with

Only processors that run the product: our hosting provider (servers in the United States), Anthropic and OpenAI (AI processing), RevenueCat (subscriptions), PostHog (analytics), Sentry (crash reporting), AppsFlyer (attribution), Expo (push delivery), and Resend (transactional email). Each receives only what its function requires. We disclose data if the law requires it.

Retention & deletion

Your data is kept while your account exists. Deleting your account (Settings → Delete my account) permanently and immediately erases your account and all synced content from our servers. You can also email support@nextmvp.net and we'll do it for you.

Security

All traffic is encrypted in transit (TLS). Data is stored on access-controlled infrastructure, and content is tied to your account alone.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA and similar), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to processing. Deletion and access are built into the app; for anything else, email support@nextmvp.net. We don't discriminate for exercising your rights.

Children

Peptalab is not directed to children under 13, and we don't knowingly collect their data.

International transfers

Our servers are in the United States. If you use Peptalab from elsewhere, your data is processed in the US with the safeguards described here.

Changes

If this policy changes materially, we'll update this page and note the new date above. Continued use after a change means you accept it.

Contact

NextMVP Solutions LLC — support@nextmvp.net