Privacy Policy

01Information We Collect

We collect information in the following categories.

A. Account Information

When you create an account or sign in, we may collect:

• Email address
• Name or display name, if provided
• Profile image, if provided by an authentication provider
• Authentication provider information, such as Google or Apple sign-in identifiers
• Account creation date and login activity

If you sign in with Google, we use Google sign-in only to authenticate your account. We may receive your basic Google profile information — name, email, profile image, and unique identifier. We do not access your Gmail, Google Drive, Google Calendar, contacts, files, or other Google account content unless a future feature clearly asks for separate permission.

B. User-Entered Protocol Data

When you use the Service, you may choose to enter information such as:

• Protocol names
• Compound, peptide, hormone, supplement, research item, or medication names
• Dose amounts, units, schedules, dates, and times
• Dose logs and completion history
• Inventory, vial, and supply tracking data
• Notes, markers, reminders, adjustments, and related entries
• App preferences and settings

This information is provided entirely by you. Protocol does not verify that user-entered information is medically appropriate, legally permitted, safe, effective, complete, or accurate.

C. Device, Usage, and Technical Information

We may collect limited technical information to operate, secure, and improve the Service, such as device type, operating system, app version, IP address, general region, log data, crash reports, performance data, and security events. We use this information to maintain the Service, troubleshoot issues, prevent abuse, and protect user accounts.

D. Payment and Subscription Information

If the Service offers paid features, payments may be processed by Apple, Google, Stripe, RevenueCat, or another payment provider. We do not store your full credit card number. We may receive limited payment-related information such as subscription status, purchase confirmation, and transaction identifiers.

E. Communications

If you contact us, join a waitlist, or submit feedback, we may collect your email address, name if provided, message contents, and support or feedback details.

02Sensitive Information

Some information you enter into Protocol may be sensitive or relate to health, wellness, research, medication use, supplement use, hormone use, peptide use, or other personal choices.

You are responsible for deciding what information to enter into the Service. Do not enter information that you do not want stored in the Service.

03How We Use Information

We use information to:

• Create and manage user accounts and authenticate users
• Provide protocol tracking, logging, scheduling, inventory tracking, reminders, and app functionality
• Sync user data across devices and save preferences
• Provide customer support and send service-related messages
• Process subscriptions and payments
• Improve app performance, reliability, and security
• Detect, prevent, and investigate fraud, abuse, security incidents, or violations of our Terms
• Comply with legal obligations and enforce our agreements
• Develop and improve the Service

We do not use user-entered protocol data to provide medical advice, diagnosis, treatment, prescriptions, dosing instructions, or safety determinations.

04Medical Disclaimer

Protocol is for informational, organizational, and personal tracking purposes only.

The Service does not provide medical advice and should not be used as a substitute for professional medical judgment, diagnosis, treatment, prescriptions, dosing instructions, emergency care, or consultation with a licensed healthcare professional.

You should consult a qualified healthcare professional before making decisions involving medications, peptides, hormones, supplements, research compounds, medical treatments, dosing, injections, discontinuation, or changes to any health-related protocol.

Never disregard professional medical advice or delay seeking medical care because of information stored in or displayed by Protocol.

05How We Share Information

We may share information in the following limited situations.

A. Service Providers

We may share information with vendors that help us operate the Service, such as authentication providers, database and hosting providers, cloud infrastructure providers, payment processors, analytics providers, crash reporting providers, customer support tools, and email providers. These providers may process information only as needed to provide services to us.

B. Authentication Providers

If you use Google, Apple, or another third-party sign-in provider, that provider may process your information according to its own privacy policy. We use information received from those providers only to authenticate your account and operate the Service.

C. Legal, Safety, and Compliance

We may disclose information if we believe it is reasonably necessary to:

• Comply with law, legal process, subpoena, court order, or government request
• Enforce our Terms of Service
• Protect the rights, safety, or property of users, the Company, or others
• Investigate fraud, abuse, security issues, or illegal activity
• Prevent harm

D. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, user information may be transferred as part of that transaction.

E. With Your Direction or Consent

We may share information when you direct us to do so or give us consent.

F. Aggregated or De-Identified Information

We may use or share aggregated, anonymized, or de-identified information that cannot reasonably identify you for analytics, research, business, or product improvement purposes.

06Google User Data

If you sign in with Google, we may access basic Google account information necessary for authentication — your name, email address, profile image, and Google account identifier.

We use Google user data only to:

• Create or authenticate your account
• Maintain your logged-in session
• Display basic account information
• Secure your account and provide account-related support

We do not sell Google user data. We do not use Google user data for advertising. We do not access Gmail, Google Drive, Google Calendar, Google Contacts, or other Google services unless a future feature separately requests permission and you provide consent.

You may revoke Google access through your Google Account settings at any time.

07Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and protect the Service.

If you delete your account or request deletion, we will delete or de-identify your personal information unless retention is required or permitted by law, security, fraud prevention, backup integrity, dispute resolution, or legitimate business purposes. Backup copies may persist for a limited period before being overwritten or deleted.

08Your Choices and Rights

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Request a copy of your information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of certain data sharing, where applicable

You may contact us at support@stayonprotocol.app to request access, correction, deletion, or export of your information.

You may also update account information in the app where available, disable notifications through device settings, revoke Google or Apple sign-in permissions through your provider account settings, and unsubscribe from non-essential emails using the unsubscribe link where available.

09Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include authentication, access controls, encrypted connections, database security controls, and monitoring.

However, no system is completely secure. We cannot guarantee that information will always remain secure, private, or available. You are responsible for maintaining the confidentiality of your account credentials and for controlling access to your device.

10Children and Age Restrictions

The Service is not intended for children under 18. You may not use the Service if you are under 18 years old.

We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take reasonable steps to delete it.

11International Users

If you access the Service from outside the United States, your information may be processed and stored in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your location.

By using the Service, you understand that your information may be transferred to and processed in the United States and other jurisdictions.

12State Privacy Rights

Depending on your state of residence, you may have additional privacy rights under applicable state privacy laws. These may include rights to access, delete, correct, or obtain a copy of certain personal information.

We do not sell personal information. We do not knowingly share personal information for cross-context behavioral advertising.

To exercise privacy rights, contact us at support@stayonprotocol.app.

13App Store and Platform Disclosures

If you download the Service through the Apple App Store, Google Play Store, or another platform, your use may also be subject to that platform's privacy practices, terms, and data disclosures.

You should review the privacy settings and disclosures provided by your device platform and app marketplace.

14Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the Service, by email, or by posting an updated version on our website.

The updated Privacy Policy will be effective as of the date listed at the top unless otherwise stated. Your continued use of the Service after the updated Privacy Policy becomes effective means you accept the updated policy.

15Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: