Pepwell privacy

Your health records

Routines, dose records, wellbeing entries, food and water records, measurements, notes, progress photos and onboarding answers are stored in Pepwell on your device. We do not operate a health-record server or send those records to RevenueCat, Firebase, Apple or Google for cloud storage.

Onboarding answers personalize your starting view. They are not used for advertising or sent to an analytics service. Local usage counts and report feedback also stay on the device and contain no health values or record text.

App-owned health files use iOS data protection and are marked for exclusion from device backups. Pepwell has no automatic cloud sync or recovery. Device loss or uninstalling the app can permanently remove local records.

Permissions you choose

Camera, selected photos, Apple Health and notifications are optional. Apple Health access imports the body-weight records you choose; Pepwell does not write health data back. Manual entries remain available with a valid tracking subscription if you decline Health access.

Selected progress photos are re-encoded without their original metadata. They are not automatically saved to the system photo library. You can change permissions in iPhone Settings.

Apple purchases and RevenueCat

Apple processes payments. RevenueCat verifies subscription access using purchase and subscription information, an anonymous app-user identifier, an app-vendor device identifier and technical information needed to communicate with its service. These billing identifiers are separate from the identifiers of your health records. We do not give RevenueCat your health entries, onboarding answers or optional sign-in email.

RevenueCat's advertising-attribution collection and SDK diagnostics are disabled in Pepwell. This does not prevent the processing required to verify and manage a subscription. Billing providers may retain transaction and security records under their own legal and service obligations.

Restore purchases restores eligible subscription access; it does not recover health records. RevenueCat privacy · Apple privacy.

Optional Apple or Google sign-in

You can use paid local tracking without creating a Pepwell sign-in account. If you choose Apple or Google sign-in, Firebase Authentication and the selected provider process account identifiers, available basic profile or email information, and security information such as IP addresses. Pepwell requests no Apple name or email scopes and no additional Google-service permissions.

There is no cloud health profile or record synchronization. The app keeps its minimal account-to-local-record binding in device-only Keychain storage. Signing in does not transfer your Apple subscription to a different store account or restore deleted records.

You can initiate deletion of the optional sign-in account in the app. Reauthentication or a network connection may be required. Firebase describes IP-log retention of a few weeks and removal of other authentication information from live and backup systems within 180 days after account deletion. Provider deletion does not mean every legal, security or backup record disappears immediately.

Firebase privacy and retention · Google Sign-In data disclosure.

Exports and deletion

You choose what to export and where to save it. Private notes and source details require explicit inclusion. Reports do not contain photos; individual photos can be exported separately. Saving to iCloud Drive or another service sends your selected copy to that destination. Pepwell cannot revoke copies you have shared.

Records remain available to read, correct, export and delete after subscription access ends. Delete app data removes app-owned records, photos, reminders, temporary reports and local usage observations. Minimal markers may remain to prevent deleted Health imports or samples from being silently added again; they contain no health values or notes.

Deleting local data or the optional sign-in account does not cancel Apple billing, remove Apple Health originals or erase exported copies. Signing out alone does not delete a provider account.

Temporary report files are eligible for cleanup after 24 hours when the app next opens or prepares another report. This is not a scheduled background deletion guarantee.

Support and this website

If you email support, the address and information you send are processed in the support mailbox to respond to and manage your request. Please avoid sending health records, private photos, passwords or payment details. You may ask us to delete support correspondence; records needed for an unresolved request or a legal obligation may need to be retained.

This website has no advertising, newsletter signup, health-record upload form or app-owned analytics. Hosting providers process ordinary request and network information to deliver and protect the site. Following an external link takes you to that provider's service and privacy practices.

Privacy requests

Contact management@gigaishere.com for access, correction, deletion or questions about information processed by our services. We may need to verify that a request concerns your account. We cannot retrieve health records held only on your iPhone.

Pepwell is intended for adults. Marketing consent is not required to use the app. Changes to this policy will appear here with an updated date.