To create an account, you provide an email address and password. You can also provide a name. The authentication service stores a password hash and session information.

You choose which health details to enter. These can include medicine names, doses and schedules, injection times and sites, taken or skipped doses, weight and goals, symptoms, mood, energy, appetite, notes, and supply counts. Setup answers, preferences, and earlier versions of corrected entries are also saved.

PepKey uses your account details to sign you in and your journal data to show your treatment, history, and progress and to provide the export you request. Convex provides authentication and hosts the account database on our behalf.

Your device stores the sign-in session in secure storage on iOS and Android, or in browser storage on the web. PepKey needs a connection to save records. When you share or download a CSV, you control the exported copy.

PepKey does not sell your personal data or use your health entries for advertising. PepKey may disclose information when required by law.

Your account data stays in the active database while your account is open, unless you delete it sooner. An individually removed entry is hidden immediately and scheduled for permanent deletion after 24 hours. Corrections keep the earlier version until the entry is permanently deleted.

Delete all records in Settings → Privacy & account to remove your journal, correction history, and supply counts while keeping your account. Delete account removes your profile, sign-in credentials and sessions, setup, preferences, and journal from the active database. Access ends when deletion is accepted. Larger journals are deleted in batches that continue after you close PepKey.

You can edit your records in History and export a CSV from Settings. Use the privacy contact for help accessing or deleting your account or for other privacy requests.