PRIVACY POLICY

Last updated: February 05, 2026


IMPORTANT DISCLAIMERS

Medical Disclaimer

PEPBASE IS NOT A MEDICAL SERVICE AND DOES NOT PROVIDE MEDICAL ADVICE. The information, tools, and content provided through Pepbase (the "Services"), including our website at https://pepbase.io and our mobile application (Pepbase-App), are intended solely for informational and harm-reduction purposes. Nothing contained in our Services should be construed as medical advice, diagnosis, treatment, or a substitute for professional medical consultation.

YOU MUST CONSULT WITH A QUALIFIED HEALTHCARE PROFESSIONAL before making any decisions regarding peptides, medications, supplements, or any other substances that may affect your health. Self-administration of any substance carries inherent risks, and we strongly encourage you to seek professional medical guidance for all health-related decisions.

Non-Endorsement Disclaimer

WE DO NOT ENDORSE, RECOMMEND, OR ENCOURAGE THE USE OF ANY PEPTIDES OR RESEARCH CHEMICALS. The information provided through our Services is community-sourced and/or derived from publicly available medical literature. The presence of information about any substance on our platform does not constitute an endorsement of its use, safety, or efficacy.

Pepbase functions exclusively as an educational and harm-reduction resource for individuals who have independently chosen to research or use peptides. We take no position on whether any individual should or should not use any particular substance.

Assumption of Risk and Limitation of Liability

YOU USE OUR SERVICES ENTIRELY AT YOUR OWN RISK. By accessing or using Pepbase, you acknowledge and agree that:

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, GHOST RESEARCH, LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS DISCLAIM ALL LIABILITY FOR ANY HARM OR DAMAGES OF ANY KIND ARISING FROM OR RELATED TO YOUR USE OF OUR SERVICES.


PRIVACY NOTICE

This Privacy Notice for Ghost Research, LLC (doing business as Ghost Systems) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@pepbase.io.


TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. HOW DO WE KEEP YOUR INFORMATION SAFE?
  9. DO WE COLLECT INFORMATION FROM MINORS?
  10. WHAT ARE YOUR PRIVACY RIGHTS?
  11. CONTROLS FOR DO-NOT-TRACK FEATURES
  12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
  14. DO WE MAKE UPDATES TO THIS NOTICE?
  15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Information You Voluntarily Provide

We collect information that you voluntarily provide to us when you use our Services. The information we collect depends on your interactions with us and the features you use.

Health-Related Data (Pseudonymous)

If you opt in to share anonymous usage data, we may collect the following health-related information:

IMPORTANT: This data is classified as pseudonymous, not anonymous. While we do not collect your name, email, or account credentials (we have no account system), this health data is associated with a device identifier. Under GDPR and CCPA, device identifiers are considered personal identifiers, which means this data is technically "personal information" even though we cannot directly identify you by name.

You have full control over this data collection. You may opt out of sharing this pseudonymous health data at any time through the app settings. If you opt out, your health data remains stored locally on your device only and is never transmitted to our servers.

Progress Photos

Progress photos you take within the Pepbase app are stored exclusively on your local device. These photos are never uploaded to our servers and are never transmitted over the internet. We do not have access to your progress photos. If you delete the app or clear app data, your progress photos stored within the app will be permanently deleted from your device.

Payment Information

If you make purchases through our app (such as premium subscriptions), payment processing is handled entirely by RevenueCat and the respective app store (Apple App Store or Google Play Store). We do not directly collect or store your payment card information.

RevenueCat, as our payment processor, may collect:

Note: Apple App Store and Google Play Store receipts may internally contain your Apple ID or Google account email address. While RevenueCat processes these receipts, this information is not directly exposed to us in our dashboard. However, transaction data may include store account identifiers as part of the purchase verification process.

For more information about how RevenueCat handles your data, please review RevenueCat's Privacy Policy.

Information Automatically Collected

Device Data

When you use our Services, we automatically collect certain device information, including:

Analytics Data (Firebase)

We use Google Firebase Analytics to understand how users interact with our Services. Firebase may collect:

IMPORTANT: By default, Firebase Analytics collects general usage events but does not include specific health information (such as which specific peptides you are tracking). Specific health-related details are only shared if you explicitly opt in to anonymous health data sharing as described above.

You may opt out of Firebase Analytics through your device settings or through the app settings. When you opt out, we will not collect analytics data from your device.

For more information about how Google handles your data, please review Google's Privacy Policy and Firebase's Privacy and Security documentation.

Information We Do NOT Collect

We want to be clear about what we do not collect:


2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for the following purposes:


3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

For users in the EU/EEA/UK (GDPR):

We process your personal information based on the following legal grounds:

For users in the United States:

We process your information based on your consent where required, and otherwise as necessary to provide our Services and for our legitimate business purposes.


4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your information in the following situations:

Service Providers

We share information with third-party service providers who perform services on our behalf:

Legal Requirements

We may disclose your information where required by law, such as to comply with a subpoena or similar legal process, or when we believe in good faith that disclosure is necessary to:

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information for other purposes with your explicit consent.

We do NOT:


5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Website: We may use cookies and similar tracking technologies on our website to collect and store information. You can control cookies through your browser settings.

Mobile App: Our mobile application uses device identifiers and Firebase Analytics as described above. You can opt out of analytics tracking through the app settings.


6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

Our Services do not currently offer social login functionality. We do not have an account system, and therefore do not collect information through social media platforms.


7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

Retention Periods

When data is no longer needed, we will securely delete or anonymize it.


8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures designed to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Measures we employ include:

Local Data Security: Data stored locally on your device (including progress photos and health logs if you have not opted in to sharing) is protected by your device's built-in security features. We recommend using device-level security (passcode, biometrics) to protect this sensitive information.


9. DO WE COLLECT INFORMATION FROM MINORS?

Our Services are not intended for individuals under the age of 18.

We do not knowingly collect personal information from children under 18 years of age. The subject matter of our Services (peptide research and tracking) is inappropriate for minors and is intended exclusively for adult use.

If you are under 18, do not use our Services and do not provide any information to us.

If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a minor, please contact us immediately at support@pepbase.io.

Parents and guardians who believe their child has provided information to us should contact us to request deletion.


10. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have certain rights regarding your personal information:

General Rights

Opting Out of Data Collection

You can opt out of pseudonymous health data sharing and analytics at any time through the app settings. When you opt out:

Withdrawing Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact us at support@pepbase.io.


11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting. There is currently no uniform standard for recognizing and implementing DNT signals. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

However, you can opt out of analytics tracking through our app settings regardless of your DNT settings.


12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Categories of Personal Information Collected:

Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights. Please contact us to exercise your rights under applicable state law.


13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

European Economic Area (EEA), United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR):

To exercise these rights, contact us at support@pepbase.io. We will respond within 30 days as required by GDPR.

Australia

Australian residents have rights under the Privacy Act 1988 (Cth). Contact us to access, correct, or request deletion of your personal information.

Canada

Canadian residents have rights under PIPEDA and applicable provincial privacy laws. Contact us to exercise your rights.


14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this notice.

If we make material changes to this Privacy Notice, we will notify you by:

We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your information.


15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Privacy Notice or our privacy practices, please contact us:

Ghost Research, LLC (doing business as Ghost Systems)
111 West 6th Street
Tempe, AZ 85281
United States

Email: support@pepbase.io


16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information.

For Data Stored Locally on Your Device

Data stored locally (including progress photos, health logs, and protocols) can be deleted by:

For Data on Our Servers

If you have opted in to share pseudonymous health data, you can:

To submit a formal data subject access request (DSAR), please email us at support@pepbase.io with the subject line "Data Subject Access Request." Please include your device identifier (found in app settings) so we can locate any data associated with your device.

We will respond to your request within 30 days (or sooner as required by applicable law).


This Privacy Policy was last updated on February 05, 2026.