Consumer Health Data Privacy Policy

When you complete the consultation intake and submit it, we collect:

• the health goals you select;
• the symptoms and objectives you describe;
• any history you choose to share, which may include medications, allergies and prior treatments;
• your state, and whether you are open to a telehealth visit;
• the sample protocol and risk notes generated from your answers.

If you are not signed in, your answers stay in your browser and are not sent to us unless you create an account and submit them.

We also collect an email address paired with a health topic in two places:

• if you ask us to email you the consultation checklist from the intake, we receive your email and the goals you picked, and nothing you typed;
• if you unlock the education courses, we receive your email and the one interest topic you choose.

Only from you, through the intake form. We do not buy or infer consumer health data from other sources.

• to prepare a sample protocol and a review file for a licensed clinician;
• to route your file to a clinician licensed in your state;
• to keep a record of what was proposed and decided, for you and the clinician.

We do not use it for advertising, and we do not sell it.

• the licensed clinician assigned to review your case;
• Anthropic, which processes your answers to generate the sample protocol;
• Supabase (database), Vercel (hosting) and Clerk (accounts), which store or carry it on our behalf;
• Resend, which delivers the emails you ask for.

Our analytics (Vercel Web Analytics and Google Analytics) receive counts and structural events only, never your goals, symptoms, history or any compound name.

We ask for your consent before you submit the intake. You can withdraw it at any time by contacting us; we will then stop processing your consumer health data except where the law requires us to keep it.

You can ask us to:

• confirm whether we hold your consumer health data, and give you a copy;
• tell you which third parties received it;
• delete it;
• withdraw your consent.

Email hello@peptideassociation.org from the address on your account. We respond within 45 days. Deletion removes your intake answers, sample protocols, review records, conversations, email sign-ups and account from our systems in one step. We keep a record that a deletion happened, with no details about you. We cannot delete payment records that Stripe keeps for tax law, or emails already delivered to your inbox. If we decline your request, you can appeal by replying to our decision, and if we deny the appeal you may contact the Washington State Attorney General.