Privacy Policy

Optimized: Peptide Tracker (“the app”, “the service”) is provided by Kallos Labs LLC(“we”, “us”). For data-protection purposes we are the controller of the personal data described here. Our registered address is Kallos Labs LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110. You can reach our privacy team at support@optimizedtracker.com.

We aim to collect the minimum needed to run the service. The table below is our full data inventory: what we collect, why, and the legal basis we rely on for users in the EU/EEA and UK (see Section 11 for the meaning of each basis).

We do not intentionally collect special-category / sensitive data beyond the health- related values you choose to enter as your own records. You decide what to record, and you can edit or delete it at any time.

The protocols, schedules, inventory, site maps, mixing-calculator inputs, and lab values you enter are your records, and they are stored locally on your device. Optimized does not upload them to our servers. We do not receive them, we cannot read them, we do not sell them, and we do not use them to train advertising models, because we never hold a copy in the first place.

The practical consequence: your records are not currently synced between devices. To move your history to another device, export it and import it there. If we introduce cross-device sync in the future, it will be something you explicitly opt into, and this policy will be updated before it ships.

Apple Health

If you import from Apple Health, the import is read-only and the imported values become part of your own records inside the app on your device. Health data is never transmitted to us. We never write back to Apple Health, never use Health data for advertising, and never share it with third parties, consistent with Apple’s requirements.

This section explains how to delete data associated with Optimized: Peptide Tracker, the mobile app published by Kallos Labs LLC.

There are two separate lanes, because your data sits in two separate places. Most of it you delete yourself, instantly, without asking us.

Lane 1: your on-device data, deleted in the app

Your schedules, log entries, vials and inventory, site history, journal entries, lab results, progress photos, weight and Apple Health imports are stored only on your device. There is no account and no server copy, so no request to us is needed and none is possible. To erase all of it:

• Open Settings in the app.
• In the Data section, tap the red Delete all data button.
• Confirm with Delete everything.

This erases your on-device data immediately. To remove a single record instead, open it in the app and choose delete. Uninstalling the app also removes everything it stored.

This lane is on-device only. It clears what is on your phone. It does not send us a request and it does not reach the processor records described in Lane 2, because those are held by different companies under separate systems. Since we never receive your on-device content, we cannot delete it for you and we cannot restore it. Export first if you want to keep a copy.

Lane 2: server-side data held by our processors, deleted on request

A small amount of data about you does sit on servers: purchase records at RevenueCat, crash events at Sentry, install events at AppsFlyer, and, if you used our website, a waitlist email address, an affiliate-portal account, or support messages. None of it contains your tracking content. To have it deleted:

• Email support@optimizedtracker.comwith the subject “Delete my data”.
• Tell us which applies to you: the email address you joined the waitlist with, your affiliate-portal login, or, for a purchase record, the store receipt or order ID from Apple or Google.
• We confirm by reply, and we complete the deletion within 30 days of confirming your request.

What is deleted, and what we keep

Additional retention beyond the window above applies only where we must keep limited records to meet legal, tax, accounting or security obligations, or to resolve a dispute. We keep the minimum needed for those purposes and delete it when they end.

The Optimized: Peptide Tracker mobile app includes three third-party services. None of them receives your tracking content. Your schedules, log entries, lab results, journal entries, photos, weight and Apple Health imports are not sent to any of them, or to us.

Your log entries, compounds, sites, check-ins and lab results stay on your phone. Optimized does not send them to us or to anyone else. The app sends anonymous crash reports and install data, which you can turn off in Settings.

Sentry: crash and performance reporting

Sentry receives crash reports and performance traces so we can find and fix faults. We sample 20% of sessions for performance traces. Personal data is not attached to these reports: the SDK runs with its default personal-data collection disabled, so it does not send identifiers or request contents alongside a crash. You can turn this off in the app under Settings, then Crash reports.

RevenueCat: subscriptions and purchases

RevenueCat processes subscription purchases and tells the app what you are entitled to. It identifies your installation by an anonymous app user ID that it generates. The app never logs you in to RevenueCat and never sends it an account identifier, an email address or a name, because the app has no accounts. If you enter an affiliate code, that code is sent as a creator_code attribute so the referral can be credited. RevenueCat is required for purchases to work and cannot be turned off while keeping a subscription active. Payment details are handled by Apple or Google, not by RevenueCat and not by us.

AppsFlyer: install attribution

AppsFlyer measures which marketing campaigns lead to app installs. What it uses differs by platform, and the difference matters:

• On iOS, the app uses the Identifier for Vendor (IDFV) only. The IDFV is specific to our apps on your device and cannot be used to follow you across other companies’ apps. The app does not show an App Tracking Transparency prompt and never accesses the advertising identifier (IDFA). Campaign attribution is performed by Apple through SKAdNetwork, which reports conversions to us in aggregate and without identifying you.
• On Android, the app uses the Google Advertising ID (GAID). You can reset it, or opt out of personalised ads, in your Android system settings.

You can turn attribution off in the app under Settings, then Marketing analytics. We use this to measure campaigns, not to build advertising profiles. We do not sell personal data and we do not engage in targeted advertising.

• To provide and maintain the app. Your tracking records are held on your device, not by us. We do not need them to run the service.
• To diagnose crashes and improve performance and reliability.
• To understand which features are used, where you have given consent.
• To operate our website: the launch waitlist and the affiliate portal (which does use accounts).
• To respond to support requests and send essential service notices.
• To comply with legal obligations and enforce our terms.

We do not use your tracking entries to make medical decisions, and the app does not provide medical advice. See our Medical Disclaimer.

These are website services, not app services. On this website we use PostHog and Google Analytics 4 for product and traffic analytics. Neither is present in the Optimized: Peptide Tracker mobile app. They load only after you accept analytics in our consent banner; if you decline, they are not loaded. For the full list of cookies, storage, and controls, see our Cookie Policy.

The app’s third-party services are separate and are listed in Section 05. In short, the website uses PostHog and Google Analytics 4, and the app uses Sentry, RevenueCat and AppsFlyer. No service runs on both sides.

Creator referral links

Separately from analytics, if you reach the site through a creator referral link (optimizedtracker.com/r/YOURCODE), we set a first-party cookie named optimized_refholding that creator’s short code and a timestamp for 30 days, and mirror the same value into your browser’s local storage. It exists so the creator can be credited if you install the app. It contains no identifier of you and records nothing about your browsing. We also count each referral click as an anonymous statistic: the time, a coarse country, the device platform class, and whether the click was on the landing link or the store button. We deliberately store no IP address, no user agent string, and no device fingerprint with these counts, so they cannot be tied back to you. Attribution uses no third-party SDK and involves no cross-site tracking. See the Cookie Policy for the storage details.

We do not sell your personal data. We share it only with vendors that process data on our behalf, under contract and on our instructions (“sub-processors”), and where required by law or to protect rights and safety. Typical categories of sub-processor:

• Website: cloud hosting and database infrastructure for the waitlist and affiliate portal. Your on-device tracking records are not hosted with them.
• Website: PostHog and Google Analytics 4 for product and traffic analytics.
• Mobile app: Sentry for crash and performance reporting.
• Mobile app: RevenueCat for subscription and entitlement status, against an anonymous app user ID.
• Mobile app: AppsFlyer for install attribution and campaign measurement.
• Both: transactional email and support tooling.
• Both: app-store billing (Apple, Google). They process your payment data, not us.

A current list of named sub-processors is available on request from support@optimizedtracker.com. We require each to provide protections consistent with this policy and applicable law.

Your tracking records: held on your device, for as long as you keep them. Deleting them in the app, or deleting the app, removes them. We hold no copy to delete.

Data we do hold (waitlist, affiliate-portal accounts, support messages, website analytics, app diagnostics, purchase and attribution records): we keep it for as long as the related account or purpose is active. On a deletion request we delete or anonymise the associated personal data within 30 days of confirming the request, except where we must retain limited records to meet legal, tax, accounting, or security obligations, or to resolve disputes. Aggregated or de-identified data that cannot reasonably be linked to you may be retained. Section 04 sets out the steps and what is kept in each case.

We use technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls, and least-privilege practices. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and to notify you and regulators of incidents where the law requires.

If you are in the European Economic Area, the General Data Protection Regulation applies. Our legal bases for processing are: contract (to provide the service you asked for), consent (for analytics and optional imports, withdrawable at any time), legitimate interests (security, diagnostics, product improvement, balanced against your rights), and legal obligation where applicable.

Your rights

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: have your data deleted (“right to be forgotten”).
• Restriction: limit how we process your data in certain cases.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: at any time, without affecting prior processing.

To exercise any right, contact support@optimizedtracker.com. You also have the right to lodge a complaint with your local supervisory authority.

If you are in the UK, the UK GDPR and the Data Protection Act 2018 apply, giving you the same core rights as listed above. You may complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

If you are a California resident, the CCPA as amended by the CPRA gives you rights over your personal information. The categories we have collected in the last 12 months:

Your California rights

• Right to know what personal information we collect, use, and disclose.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to opt out of the “sale” or “sharing” of personal information.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising your rights.

We do not sell or share your personal informationas those terms are defined under the CPRA, and we do not use sensitive personal information for purposes beyond providing the service. Because we do not sell or share, no “Do Not Sell or Share My Personal Information” action is required, but you may still submit a request and we will honour it. We do not offer financial incentives for personal information. You may use an authorised agent to submit a request with proof of authorisation. Submit requests to support@optimizedtracker.com.

Residents of states with comprehensive privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and others as they take effect, have comparable rights: to access, correct, delete, and obtain a portable copy of their data, and to opt out of targeted advertising, sale, and certain profiling. We do not sell personal data or engage in targeted advertising or decisional profiling. To exercise these rights, contact us using the details above; where a law provides an appeal mechanism for a denied request, we will honour it.

If you are in Canada, the Personal Information Protection and Electronic Documents Act applies. We process personal data with your knowledge and consent, give you access to and correction of your data, and limit collection to identified purposes. You may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you are in Australia, we handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. You may request access to and correction of your information, and complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you are in Brazil, the Lei Geral de Proteção de Dados gives you rights to confirmation, access, correction, anonymisation, portability, deletion, and information about sharing, and to withdraw consent. You may contact the Autoridade Nacional de Proteção de Dados (ANPD). Reach our privacy team at support@optimizedtracker.com.

We may process and store data in countries other than yours, including the United States. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards: an adequacy decision where one exists, or Standard Contractual Clauses (and the UK International Data Transfer Addendum) with supplementary measures as needed. You may request a copy of the relevant safeguard by contacting us.

Optimized: Peptide Trackeris intended for adults and is not directed to anyone under 18. We do not knowingly collect personal data from children. Consistent with the US Children’s Online Privacy Protection Act (COPPA) and Article 8 of the GDPR (children’s consent), if you believe a minor has provided us data, contact us and we will delete it promptly.

We may update this policy as the product and the law evolve. Material changes will be reflected by updating the date above and, where appropriate, by an in-app or email notice. The current version always governs.

Questions about privacy, or to exercise any right, can be sent to support@optimizedtracker.com, or by post to Kallos Labs LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110. See our Contact page for our other contact routes.