Privacy Policy for Protocol Pal Apps & Websites

Last updated: August 1, 2026

This policy applies to Protocol Pal-branded apps and websites operated by DP Schmitz Holdings Ltd o/a Protocol Pal ("Protocol Pal", "we", "us", or "our"), including Protocol Pal: Peptide & Health, Protocol Pal: Fitness & Meals, and ProtocolPal.app. Features differ by product. This policy explains what information each product may process, why it is processed, when it leaves your device, and the choices available to you.

Local-first design

Protocol Pal apps store tracking information on your device by default. Information leaves your device only when you choose or enable a feature that requires it, such as an account and cloud backup in a supported product, an AI feature, Apple Health, an export or share, customer support, advertising in a supported free plan, or an app-store purchase.

Information you may provide

Depending on the features you use, Protocol Pal may process:

Profile information: first name, birth month and year, calculated age, biological sex, height, weight, activity level, goals, and preferences;
Protocol and health information: compound or medication names, doses, schedules, reminder times, administration sites, inventory, vial and reconstitution details, lab markers, symptoms, side effects, measurements, notes, journal entries, progress photos, reports, and other information you choose to record;
Fitness and nutrition information: training goals and schedules, exercises, sets, weights, repetitions, cardio sessions, meal descriptions, estimated calories and macronutrients, weigh-ins, body measurements, and saved workout plans;
Account information: email address, account identifier, authentication provider, and cloud-backup status when you choose to create or connect an account;
Support information: your email address and anything you choose to include in a support, feedback, bug, privacy, or deletion request;
Purchase information: product and entitlement status supplied by Apple or Google. We do not receive your complete payment-card number.

Accounts, cloud backup, and sync

Accounts are available only in supported Protocol Pal products and are optional where offered. Protocol Pal: Fitness & Meals does not currently require or provide an account or cloud backup. If you sign in and enable account features in another Protocol Pal product, Protocol Pal uses Supabase to authenticate you and store backup data associated with your account. A backup may contain the profile, protocol, health, inventory, lab, measurement, journal, progress-photo, and settings information included by the app's backup feature. Signed-in accounts may be saved automatically so your latest backup can be restored on another device.

Do not enable cloud backup for information you do not want stored by a cloud service. You may continue using the app on your device without creating an account.

Protocol Pal AI

Some Protocol Pal apps include optional artificial-intelligence features. When you use one, the app sends your request and only the relevant context needed for that feature to a Protocol Pal service hosted with Supabase. That service sends the request to OpenAI to generate a response. Depending on the product, context may include a question and selected protocol information, or a workout request, meal description, and a limited summary of recent workout history. The service is not intended to send your complete app database.

AI requests are used to answer the question and provide app-related guidance. The service is configured not to store the generated OpenAI response through the API request. However, Supabase and OpenAI may process network, security, abuse-prevention, and service logs under their applicable terms and policies. Do not include information in a question that you do not want processed by these services. Protocol Pal AI is educational and does not diagnose, prescribe, or replace a qualified healthcare professional.

Apple Health and device permissions

If you choose to connect Apple Health in a supported app, Protocol Pal requests access only to the categories shown in Apple's permission screen. Depending on the product and what you approve, this may include steps, active energy, workouts, weight, body composition, heart and recovery signals, sleep, blood pressure, or glucose information. A supported app may also write workouts or body measurements that you log. Apple Health access is optional and can be changed in device settings. Protocol Pal does not use Apple Health data for advertising or sell it.

A Protocol Pal app may also request optional permission for local notifications, photos, files, or the camera when you use a feature that needs it. Protocol Pal: Fitness & Meals uses local notifications only for reminders and does not request photos or camera access. Photos and exported files remain under your control unless you choose to include, back up, export, or share them.

Purchases and app stores

Where offered, subscriptions and one-time purchases are processed by Apple App Store, Google Play, or an authorized store provider. Those providers may supply Protocol Pal with product, transaction, receipt, renewal, expiration, refund, region, or entitlement information needed to complete a purchase, restore access, and unlock paid features. Their own privacy policies govern payment processing. We do not receive your complete payment-card number.

Advertising in the Free plan

Some Protocol Pal products may show ads to users of a Free plan through Google Mobile Ads (AdMob). Ads are not shown to paid Protocol Pal users. When advertising is enabled, Google and its advertising partners may process limited device and technical information needed to request, deliver, measure, secure, and prevent fraud in ads. This may include an IP address, device or app identifiers, general location inferred from an IP address, device and operating system information, ad interactions, consent choices, and diagnostics.

Protocol Pal does not send your protocol entries, compound or medication history, doses, lab results, symptoms, notes, nutrition logs, Apple Health data, or other health information to Google for advertising or ad targeting. The app requests non-personalized advertising unless you make another choice through an available consent or privacy control. You can remove in-app advertising by upgrading to a paid Protocol Pal plan.

Protocol Pal: Fitness & Meals does not currently include advertising, subscriptions, or in-app purchases.

Website and technical information

ProtocolPal.app is a marketing, legal, account-deletion, and support website. It does not ask you to enter protocol, dosing, lab, or medical information. The website host and security providers may process ordinary technical information such as an IP address, browser type, request time, and security logs needed to deliver and protect the site. If you email support, we receive the information you choose to include in that email.

How information is used

We use information only as reasonably needed to:

operate tracking, workout, meal, reminder, calculation, inventory, report, and educational features;
provide optional AI answers based on the relevant app context you submit;
provide account authentication, backup, restore, and sync;
read or write the Apple Health categories you explicitly approve;
complete, restore, and verify app-store purchases and premium access;
respond to support, feedback, privacy, billing, and deletion requests;
protect the app and services, troubleshoot problems, prevent abuse, and comply with law.

Service providers and disclosure

Information may be processed by the following providers when you use the corresponding feature:

Supabase: AI request relay and, in products that offer accounts, authentication, account storage, and cloud backup;
OpenAI: generation of Protocol Pal AI responses;
Apple and Google: app distribution, purchases, entitlements, and platform services;
Google Mobile Ads (AdMob): delivery, measurement, security, and fraud prevention for ads shown in the Free plan;
Website and email providers: website delivery, security, and support communications.

We may also disclose information when reasonably required by law, to protect rights or safety, to investigate fraud or abuse, or as part of a business transfer where permitted by law. If you export, screenshot, email, or share information, you control the recipient and destination.

What we do not do

We do not sell your personal, protocol, fitness, nutrition, or Apple Health information.
We do not use your health or Apple Health information for advertising.
We do not use Protocol Pal to prescribe, diagnose, or provide medical care.
We do not enroll you in human-subject research through the app.
We do not share personal tracking entries for research without your explicit choice or consent.
We do not intentionally collect sensitive health details through the public website.
Protocol Pal: Fitness & Meals does not provide social posting, public profiles, or user-to-user content.

Data retention and deletion

Local information remains on your device until you delete it, reset the app, or uninstall the app. Cloud account and backup information is retained while your account is active or until it is deleted, subject to limited security, legal, fraud-prevention, and backup-retention requirements. Support communications may be retained as reasonably needed to resolve the request and maintain business records. App-store transaction records are retained by the applicable store under its policies.

You can remove individual records in an app, export a backup where supported, disconnect optional permissions, or request deletion of a supported Protocol Pal account and cloud backup through the account deletion page or by contacting us. Deleting the app removes its local data from that device. Products without accounts, including Protocol Pal: Fitness & Meals, have no server account to delete. Deleting an app does not automatically delete an optional cloud account or backup created in another supported Protocol Pal product.

Security

We use reasonable technical and organizational safeguards, including encrypted HTTPS connections and account-based access controls for cloud data. No device, app, email, network, or cloud service can be guaranteed completely secure. Protect your device passcode, email, app-store account, and Protocol Pal account.

International processing

Service providers may process information in Canada, the United States, or other countries where they operate. Data-protection laws in those locations may differ from those where you live.

Adults only

Protocol Pal is intended only for people age 18 or older and is not directed to children. If you believe a minor has provided information through an account or support request, contact us so we can review and delete it where appropriate.

Changes to this policy

We may update this Privacy Policy as Protocol Pal changes. The updated version will be posted here with a revised "Last updated" date. Material changes may also be communicated in the app or through another appropriate notice.

Contact

For privacy questions, support, or deletion requests, contact [email protected].