Privacy Policy

Last updated: 29 September 2026

Privacy (iOS) · Privacy (Android) · Terms · Delete your data

PepLevel ("the app") is made by David Dempsey ("I", "me"). This policy explains what the app and this website collect, what they do not, and the choices you have. It covers the iPhone app and peplevel.com.

The short version: your health data never leaves your device and your own iCloud. Doses, medications, weight, measurements, side effects and photos are not sent to me and I cannot see them. The app has no account. It does collect a small amount of anonymous usage and crash information, which you can switch off, and it records purchases so Pro can be unlocked.

Health data you enter

Everything you log in PepLevel is stored in the app's database on your iPhone. That includes medications and compounds, schedules and titration plans, doses, injection sites, supplies (pens, vials and ampoules), weight, body measurements, water, protein, side effects, notes, check-in answers and progress photos.

If iCloud is turned on for your Apple Account, this data is also synced to your own private iCloud database through Apple's CloudKit, so it survives a new phone or a reinstall. That copy is held by Apple under your Apple Account and is not accessible to me. You can turn iCloud sync off in the app's Settings or in the iOS Settings app.

Home screen widgets read a small summary (such as your next dose, supply left or weight trend) from a shared space on your device. It stays on your device.

Reminders are local notifications scheduled by your iPhone. There is no push server and no reminder data leaves the device.

Apple Health

If you give permission, PepLevel reads weight, body fat percentage, lean body mass, waist measurement, step count and dietary protein from Apple Health, and writes weight, waist measurement and water. This is optional and you can change it at any time in Settings, then Privacy and Security, then Health.

Data from Apple Health is used only to show and chart your own progress inside the app. It is never sent to me, never used for advertising or marketing, never sold, and never shared with any third party, including the analytics and crash services below.

Face ID lock

The optional app lock uses Face ID, Touch ID or your passcode through iOS. The app only receives a yes or no from iOS. Biometric data never reaches the app or me.

Anonymous usage analytics and crash reports

To find bugs and see which features get used, the app uses two Google services:

Firebase Analytics records app usage events such as "a dose was logged" or "the paywall was shown". Events never contain what you logged: no medication names, doses, weights, side effects, notes or photos. Firebase also collects an app instance identifier, device model, iOS version, app version, language and an approximate location (country or region) derived from your IP address.
Firebase Crashlytics sends a crash report when the app crashes: the technical state of the app at the time (stack trace, device model, iOS version, free memory and an installation identifier). Crash reports contain code paths, not your health data.

You can turn both off. In the app, go to Settings, then Privacy, and switch off Share Usage Data. With it off, the app sends no analytics and no crash reports. Google keeps analytics data for a limited period under its own retention settings. See Firebase's privacy information.

PepLevel does not track you across other companies' apps or websites, does not use the advertising identifier and does not show ads.

Purchases

Subscriptions and the lifetime purchase are processed by Apple. I never receive your card details. The app uses RevenueCat to check whether you have Pro. RevenueCat receives your purchase history and subscription status, linked to a random identifier it creates for the app. It does not receive your name, email or health data. See RevenueCat's privacy policy.

By making an in-app purchase, you agree that I may share information about your use of purchased content with Apple if you request a refund, only as far as needed for Apple to process that request.

Update check

The app asks Apple's public App Store lookup service whether a newer version exists, using the app's bundle identifier. No personal data is included.

Email support

If you use Email Support or Request a Feature in the app, your mail app opens a message to me. It includes your email address, what you write, and a short troubleshooting block (app version, build, iOS version, device type, locale and how many times the app has been opened). You can delete any of it before sending. I use it only to reply to you.

This website

Contact form: your name, email, subject and message are emailed to me so I can reply. They are not stored on the web server.
Launch waitlist: if you join, your email address, the date and which form you used are stored in a private file on the web server. I use it only to send one launch announcement. At launch the list may be imported into an email sending service to deliver that message, which will include an unsubscribe link. Ask me and I will remove you.
The website sets no cookies and runs no analytics or advertising scripts. Like any web host, the server keeps standard access logs (IP address, pages requested, browser type) for security and troubleshooting.

What I do not do

I do not sell or rent personal information.
I do not show ads or share data with advertising networks.
I do not have access to your doses, weight, side effects, photos or any other health data.

Keeping and deleting your data

Your health data stays on your device, and in your iCloud if sync is on, until you delete it. You can delete individual entries in the app, or delete everything by removing the app and its iCloud data. Step-by-step instructions are here. Pro subscribers can export everything as CSV or PDF first.

Because there is no account, I cannot look up or delete data held on your device or in your iCloud. That control is yours.

Security

Data on your iPhone is protected by iOS data protection, and iCloud data is encrypted by Apple in transit and at rest. The analytics and purchase services above use encrypted connections. No system is perfectly secure, but keeping health data off any server of mine removes the largest risk.

International transfers

Google and RevenueCat may process the limited data described above on servers outside the United Kingdom, including in the United States, under safeguards required by UK data protection law.

Your rights

If you are in the UK or the European Economic Area, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy. Most of your data never reaches me, so you control it directly in the app. For anything held by the services above or on the website, email InspiredApps365@gmail.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

PepLevel is intended for adults managing their own medication and is not directed at anyone under 18. I do not knowingly collect personal information from children.

Changes to this policy

If this policy changes, the new version will be posted here with a new date. Significant changes will also be mentioned in the app's release notes.

Contact

Questions about privacy: InspiredApps365@gmail.com, or use the contact form.