Skip to content
BioTracker

Legal

Privacy Policy

Last updated: August 26, 2026

This Privacy Policy describes how BioTracker LLC, a California limited liability company ("BioTracker," "we," "us"), collects, uses, and shares information in connection with the BioTracker iOS application and the website at downloadbiotracker.com (together, the "Service").

BioTracker LLC operates the BioTracker application and website and is responsible for the personal information processed as described in this Privacy Policy. Where applicable under privacy law, BioTracker LLC acts as the business or data controller for this information.

BioTracker is an organizational and informational tool designed to help you plan and track personal supplement, peptide, and compound protocols. It is not a medical device, does not provide medical advice, and is not a substitute for advice from a qualified healthcare professional. Use of the Service is subject to our Terms and Conditions.

1. Information we collect

Account and profile information

When you create an account, we collect account and profile information you provide or that is created for your account, which may include:

  • Name, email address, and account identifier (including an authentication identifier if you sign in with Apple or another identity provider)
  • Username or display name
  • Birth date and biological sex
  • Height and body weight
  • Goals and app preferences
  • Biography and social profile information you choose to supply

Health-adjacent information you enter

BioTracker is built around information you enter about your protocol. This may include:

  • Supplements, peptides, and other compounds you track
  • Dosage amounts, units, and administration routes
  • Schedules, timings, cycles, and phases
  • Reminder configurations and quiet hours
  • Adherence entries (whether a dose was taken, skipped, or rescheduled)
  • Injection or administration site information you record
  • Inventory information, such as quantities, expirations, and vial or bottle notes
  • Body measurements and other health-related values you enter
  • Free-form notes you associate with items in your stack

This information is provided by you. We treat protocol data you enter as sensitive health-related information and handle it with corresponding care, even though BioTracker is not a healthcare provider, does not create a designated medical record, and does not share this data with any healthcare provider on your behalf.

Apple Health / HealthKit

If you choose to connect Apple Health, BioTracker imports only date of birth, biological sex, height, and body weight, and only after you grant the relevant iOS Health permissions. If you do not grant permission, no HealthKit information is accessed. You can revoke this permission at any time in the Health app. BioTracker does not read any other HealthKit category.

Photos

  • Private progress photos — photos you add to track your own progress, together with any notes, dates, and folders you attach to them.
  • Label photos — images of product or vial labels you save from a scan.
  • Profile, avatar, and cover photos, community attachments, and photos included in creator or program applications where those features are used.

Private progress photos remain private and are stored in authenticated, access-controlled storage scoped to your account. They are not published unless you separately choose a photo for a public profile or cover image, or otherwise publish content yourself.

Camera, label scans, and AI-assisted identification

If you use the label-scanning feature, BioTracker requests access to your device camera. Live camera preview frames and Apple's on-device text recognition (OCR) are processed on your device and are not continuously uploaded.

When you are signed in and submit a label or product scan for identification, BioTracker crops and compresses a still image and sends that image together with the OCR text through a BioTracker Supabase Edge Function to OpenAI, which returns AI-assisted item identification or label extraction. A search query or product link you submit for lookup is sent the same way.

BioTracker sends these requests to OpenAI with storage disabled (store: false). BioTracker does not use consumer health data to train machine-learning or generative-AI models. We cannot control a provider's own limited security or abuse-prevention processing beyond the settings we apply.

If you confirm and save a scanned item, the label photo may also be stored with that inventory record in your private Supabase Storage. Saved label photos are subject to the same access controls, deletion rights, and retention practices as your other stack data.

Notifications

BioTracker requests permission to send you local and/or push notifications for reminders and protocol updates. You can revoke this permission at any time in your device settings.

Subscriptions and purchases

If you purchase a subscription, we receive subscription entitlement information, such as subscription status, product identifier, active period, and renewal state. Payments are processed by Apple through the App Store. BioTracker does not directly receive or process your App Store payment-card information.

Community and user-generated content

If you create a public profile, publish a stack, or otherwise participate in community features, the content you choose to publish is visible to other users. This can include your public profile, published stacks, posts, comments and other community content, attachments, and follower relationships. Content you keep private is not published.

Creator and referral codes

If you enter or activate a creator or referral code, we record the code, provider attribution, and related referral metadata so that we can honor promotional entitlements and attribute referrals to participating creators. Referral attribution is active today through Insert Affiliate and RevenueCat.

Connected social accounts

If you affirmatively connect an Instagram, TikTok, or Facebook account, we receive and store the provider account identifier, username, and public profile URL for that account. This is optional. BioTracker never receives your social account password, and you can disconnect at any time.

Support, security, and diagnostic information

We keep the support communications you send us, and reasonable security and diagnostic information actually generated by the Service (such as authentication events and error information) to keep accounts secure and the app working. We do not currently operate third-party advertising or behavioral analytics SDKs; this policy will be updated before any such provider is added.

Categories of sources

We obtain information from the following sources:

  • Directly from you, when you enter or upload it in the app or contact support
  • From your device, where you grant camera, notification, photo, or Health permissions
  • From Apple, for Sign in with Apple (where used) and subscription and purchase metadata
  • From Apple Health, limited to date of birth, biological sex, height, and weight, only where you grant permission
  • From RevenueCat, for subscription entitlement state and referral attribution attributes
  • From Insert Affiliate, for creator/referral link and code attribution
  • From OpenAI, for the identification result returned for a scan or lookup you submit
  • From Instagram, TikTok, or Facebook, only when you connect that account
  • Automatically from the Service, for security and diagnostic purposes

2. How we use information

  • To provide, maintain, and improve the Service
  • To sync your stacks, schedules, and adherence across your devices
  • To deliver reminders and notifications you configure
  • To return AI-assisted identification results for scans and lookups you submit
  • To manage your subscription entitlements
  • To honor creator and referral codes and attribute referrals
  • To publish only the content you choose to make public
  • To respond to support requests
  • To detect, prevent, and address fraud, abuse, and security issues
  • To comply with legal obligations

3. Service providers

We rely on the following service providers to operate BioTracker, and each receives only what it needs:

  • Supabase — authentication, database, private file storage, and server-side functions. Your account data, stack data, logs, measurements, notes, and uploaded photos are stored here.
  • OpenAI — AI-assisted label scanning and item/product lookup. May receive a cropped and compressed label image, OCR text, a search query you enter, or a product link you submit, sent through our Supabase function. We set store: false and do not use this data to train models; we cannot control a provider's own limited security-related processing.
  • RevenueCat — subscription entitlement and lifecycle data and referral attribution attributes. Does not receive your stack contents.
  • Apple — Sign in with Apple where used, App Store subscription and payment processing, notification and operating-system services, and HealthKit access only at your direction. Does not receive your stack contents.
  • Insert Affiliate — creator/referral link and code attribution. Receives an attribution identifier or code and related referral metadata, not stack or HealthKit contents.
  • Meta/Instagram, TikTok, or Facebook — only when you voluntarily connect that social account. The provider returns the account ID, username, and public profile link to BioTracker; BioTracker does not receive your social password.

These providers process information on our behalf under their applicable terms. This Privacy Policy will be updated if additional processors are added, including analytics, crash reporting, or email delivery providers.

4. Data sharing

BioTracker does not sell personal information or consumer health data. We do rely on service providers to operate the Service, so information is necessarily disclosed to them for that purpose. Specifically, we disclose information only:

  • With the service providers named above, to operate the Service
  • With Apple, to the extent required to process purchases and subscriptions
  • With other users, only for content you deliberately publish
  • When required by law, legal process, or to protect the rights, safety, or property of BioTracker, our users, or others
  • In connection with a corporate transaction such as a merger, acquisition, or asset sale, subject to appropriate confidentiality and notice
  • With your consent or at your direction

BioTracker does not use personal information or consumer health data for cross-context behavioral advertising, and does not sell it.

5. Data retention

We retain information for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymize associated personal information within a reasonable period, except for information we are required to retain for legal, tax, security, fraud-prevention, or dispute-resolution purposes.

6. Security

We use administrative, technical, and organizational measures designed to protect information from unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children's privacy

BioTracker is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. Parents or guardians who believe their child has provided us with personal information may contact us at support@downloadbiotracker.com.

8. U.S. state privacy rights

Depending on where you live, you may have rights under U.S. state privacy laws (including, without limitation, laws in California, Virginia, Colorado, Connecticut, and Utah). These rights may include the right to access, correct, or delete your personal information, and the right to opt out of certain processing. To exercise a right, contact us at support@downloadbiotracker.com. We will not discriminate against you for exercising any such right.

BioTracker does not sell personal information and does not engage in "sharing" for cross-context behavioral advertising as those terms are defined under California law.

9. International transfers

BioTracker is operated from California, United States, and information may be processed in countries other than where you live. We take steps designed to ensure that such transfers comply with applicable law.

10. Account and data deletion

You can request deletion of your account and associated data from within the BioTracker iOS app. See our Delete Account page for details on what is deleted, what may be retained for legal or security reasons, and how to contact us if you cannot access the app.

Apple subscriptions are managed by Apple and must be cancelled separately through your Apple ID subscription settings.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by other appropriate means. The "Effective date" above indicates when this policy was last revised.

12. Contact us

Questions about this Privacy Policy, or want to make a privacy request? Contact BioTracker LLC:

Washington, Nevada, and Connecticut residents, and anyone who wants a plain-language summary of how consumer health data is handled, should also read our Consumer Health Data Privacy Policy.