What data this app collects
Depending on how you use the app, it may collect:
- Dosing and reconstitution data you enter — vial strength, desired dose, calculated water/draw volumes
- Dose logs — what you logged, when, injection site, and any side-effect tags you add
- Vial inventory — vials you're tracking, remaining volume, expiration
- Weight entries you choose to log
- Reminders and settings you configure
- Account information, if you create an account (e.g., email, for sign-in and account recovery)
We do not require you to enter your legal name, and the app does not ask why you're using a given compound.
Where your data lives
Your data is stored in a hosted database provided by Supabase, our backend infrastructure provider. This is what allows your data to sync across devices and survive a reinstall. Supabase's underlying infrastructure runs on major cloud providers (e.g., AWS); we do not separately duplicate your data to any other cloud provider.
Data in transit between the app and our database is encrypted (HTTPS/TLS). Access to your data is restricted using database-level access rules (Postgres Row Level Security) so that, under normal operation, your account can only read and write its own records — not other users' data.
App developers and administrators do not access individual users' health, dosing, or identity data as a matter of course. Any narrow exceptions (e.g., debugging a bug report you submit, or a support request you initiate) are limited to what's needed to resolve the issue.
How your data is used
Your data is used only to power the app's own features for you: calculations, your dose history, your logs, your reminders, and (if you choose) a CSV export you generate yourself to share with your own provider. We do not use your data to build advertising profiles, and we do not sell or license it to any third party, including data brokers, advertisers, or peptide/supplement sellers.
Who can see your data
Nobody but you. We do not share your health data, dosing information, or identity with:
- Advertisers or ad networks
- Data brokers
- Peptide, supplement, or pharmacy vendors
- Any other third party, for any commercial purpose
Narrow exceptions, so this policy stays accurate rather than just reassuring:
- Supabase, as our infrastructure provider, hosts the database, authentication, and storage this app runs on and necessarily processes data as part of providing that hosting. Supabase does not have a separate right to use your data for its own purposes (e.g., advertising) under its provider terms — it processes data on our behalf, under a data processing agreement, the same way any database host would. If we later add other infrastructure vendors (e.g., a crash-reporting or push-notification service), they'd be bound by the same limitation and this policy would be updated to name them.
- Legal requirements — we would disclose information if required by valid legal process (e.g., a court order), or where necessary to protect someone's safety. This is a standard carve-out required by law, not a routine practice, and we'd push back on overbroad requests where legally possible.
- A business transfer (e.g., if the company were acquired) — your data could transfer as part of that transaction, subject to this same policy or one you're notified of in advance.
Beyond these, your information is not shared for any reason — and in particular, it is never sold, licensed, or shared with advertisers, data brokers, or peptide/supplement vendors.
Data security
We use industry-standard measures to protect your data, including encryption in transit, database-level access controls limiting each account to its own records, and Supabase's underlying infrastructure security. No system is perfectly secure, and we can't guarantee absolute security, but we don't treat that as a reason to skip reasonable safeguards.
Data retention
We retain your data for as long as your account is active. If you delete your account, your data is deleted from our database; it is not retained "just in case" or kept in a separate archive after a deletion request completes, subject to any backups being rotated out over the following period.
Your controls
- Export — you can export your own dose and weight history as a CSV at any time, to share with your provider or keep for your own records.
- Delete — you can permanently delete your account and all associated data from within Settings. This action is irreversible from your side once submitted.
- Account optional — you can use Nettle's calculator, library, and local tracking without ever creating an account. Creating an account is only required if you want your data to sync across devices — it's never a requirement to use the app.
Children's privacy
This app is not intended for and should not be used by anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If this policy changes in a way that affects how your data is used or shared, we'll notify you in-app before the change takes effect.