Privacy Policy

Last updated: August 14, 2026

1. Who we are

Pinned AI ("Pinned," "we," "us," or "our") provides the Pinned AI: Peptide Tracker mobile application (the "App"). This Privacy Policy explains what information the App handles and how. This policy is operated by Pinned AI, Inc., 285 W Wieuca Rd NE, #60869, Atlanta, GA 30342, USA.

2. Information we collect

The App is designed to keep your information on your device. Specifically:

Information you enter

Data you log in the App — including peptide names, dosages, injection sites, schedules, reminder times, body weight, and food/nutrition entries — is created and stored locally on your device. We do not collect or receive copies of this information on our servers.

Meal photos

If you use the meal-scanning feature, the photo you capture or select is used to estimate nutritional content. See Section 4 for details on how that image is processed.

Community content (only if you join The Chain)

If you choose to join The Chain, our members-only community, we store your community account, chosen handle, posts, comments, likes, reports, and block list on our servers so the community can function. See Section 5.

Information we do not collect

The App does not require you to create an account to track your protocol. Outside the optional community, we do not collect your name, email, contacts, or precise location, and we never sell your personal information.

3. Where your data is stored

Your protocol and tracking data is stored locally on your device using Apple's on-device storage frameworks. If you have iCloud backup enabled for your device, your local app data may be included in your encrypted device backup under Apple's terms. Deleting the App removes its locally stored data from your device.

Apple Health (optional)

If you enable Apple Health sync, the App can write the weigh-ins, water, and workouts you log into the Health app, and read your steps, sleep, and weight from Health to display alongside your logs in weekly summaries. All Health data is processed entirely on your device — it is never transmitted to us or to any third party, and we never use Health data for advertising or share it with data brokers. You control access at any time in the iOS Health app, and the feature is off by default.

4. Camera, photos, and meal scanning

The meal-scanning feature requires access to your camera and/or photo library, which you grant through iOS permission prompts. When you scan a meal:

• The selected image is sent to our AI processing provider, Anthropic (the maker of Claude), which analyzes it to estimate calories and macronutrients and returns the result to the App.
• The image is transmitted securely for the purpose of generating that estimate. We do not use your meal photos for advertising, and we do not sell them.
• Per Anthropic's API terms, inputs submitted through the API are not used to train their models.

If you do not use the meal-scanning feature, no images are transmitted.

5. The Chain community (optional)

The Chain is an optional, members-only community inside the App. It is entirely separate from your tracker: your peptide, dose, weight, and food logs stay on your device and are never uploaded when you join.

• Account. Joining requires signing in with Apple. We receive an anonymous identifier from Apple (not your email, unless you choose to share it) and you pick a public handle. Your community identity is that handle — nothing else about you is shown.
• Content you post. Posts, comments, and likes are stored on our servers (hosted by Supabase) and visible to other community members.
• Automated moderation. Before publishing, every post and comment is screened by an automated system, including an AI classifier, to enforce the community rules (no sourcing talk, no directing others' dosing, no harassment). Flagged content is also reviewed by a human. Your content is processed for this purpose only.
• Optional streak badge. If you participate, your current streak count (a single number) is shown next to your handle.
• Safety tools. Reports you submit and users you block are stored so we can act on them.
• Deletion. You can delete your own posts and comments in the App, and you can request deletion of your community account and its content at [email protected].

6. Third-party services

We rely on a small number of service providers ("sub-processors") to operate specific features:

• Anthropic — processes meal photos to estimate nutrition (see Section 4) and screens community posts for rule violations (see Section 5).
• Supabase — hosts The Chain community's database and authentication (community accounts, posts, comments, likes, reports, and blocks; see Section 5).
• RevenueCat — manages subscription state and entitlements, processing a purchase identifier and subscription status to unlock paid features across the app and web.
• Stripe — processes payments for subscriptions purchased on our website, including your email address and payment details. We never see or store your full card number.
• Apple — provides the App Store and processes in-app purchases and subscriptions.

Each provider handles data under its own privacy policy. We encourage you to review them.

7. Subscriptions and payments

Paid features are offered through auto-renewing subscriptions, purchased either through Apple via the App Store or on our website via Stripe. We do not receive or store your full payment card details. Apple, Stripe, and our subscription manager (RevenueCat) process the information necessary to complete and manage your purchase — including your email address for web purchases, so your subscription can unlock the app. Manage or cancel an App Store subscription in your Apple ID settings; manage a web subscription through the billing portal linked in the app.

8. Notifications

If you enable reminders, the App schedules local notifications on your device. These are generated on-device and are not sent through our servers.

9. Your choices and rights

Because your tracking data lives on your device, you remain in control of it:

• You can edit or delete any entry, peptide, or log directly in the App.
• You can revoke camera, photo, and notification permissions at any time in iOS Settings.
• You can delete all locally stored data by removing the App.

Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or CCPA/CPRA (California), including rights to access, correct, or delete personal information. To exercise any right relating to data we process, contact us at the address below.

10. Age requirement

The App is intended for adults aged 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18.

11. Security

We use reasonable technical measures to protect information, including encrypted transmission (HTTPS/TLS) for any data sent off the device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice within the App.

13. Contact us

Questions about this policy or your data? Email us at [email protected].