PRIVACY POLICY

PeptideWell • Version 1.0
Effective date: July 22, 2026
Last updated: August 11, 2026

Operator:
Joye Ventures LLC dba Healthy Aging Well

This Privacy Policy explains how PeptideWell ("PeptideWell," "we," "us," or "our") collects, uses, discloses, and protects information when you use the PeptideWell mobile application, website, and related services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Important Health and Medical Notice
PeptideWell is a wellness education, organization, and tracking tool. It is not a medical provider, pharmacy, laboratory, emergency service, or substitute for professional medical advice, diagnosis, or treatment. Information entered into or displayed by PeptideWell should be reviewed with an appropriately licensed healthcare professional before you make decisions about medications, peptides, supplements, nutrition, exercise, or other health matters.

Do not use PeptideWell for emergencies. If you believe you are experiencing a medical emergency, call 911 or your local emergency number.

PeptideWell is generally not a HIPAA-covered healthcare provider or health plan. Information you enter may therefore not be protected by the Health Insurance Portability and Accountability Act (HIPAA), although we still handle it as sensitive information and use reasonable safeguards.

2. Information We Collect
Information you provide:
Account information, such as your name, email address, login credentials, profile details, and account preferences.
Wellness and health-tracking information you choose to enter, such as goals, medication or peptide names, dosing schedules, reminders, symptoms, side effects, weight, measurements, nutrition, exercise, hydration, sleep, progress notes, and related entries.
Assessment responses and educational interests, including information you provide while exploring wellness or treatment topics.
Communications and support information, including messages, feedback, survey responses, and records of requests you send to us.
Content you choose to save, upload, share, or add to lists, notes, calendars, or community features, where available.

Information collected automatically:
Device and app information, such as device type, operating system, app version, language, identifiers, and settings.
Usage and diagnostic information, such as screens viewed, feature interactions, approximate timestamps, crashes, performance data, and error logs.
Network and security information, such as IP address, authentication events, and information used to detect fraud, abuse, or unauthorized access.

Information from connected services:
If you connect a third-party service, such as Google Calendar or a sign-in provider, we receive the information needed to provide the requested connection. For calendar synchronization, this may include authorization tokens and the calendar information necessary to create, display, update, or remove PeptideWell-related events. We do not receive your Google password. You can revoke a connection through the applicable service or, when available, within PeptideWell.

3. How We Use Information
• Provide, operate, maintain, personalize, and improve the Services.
• Create and manage accounts, synchronize selected features, and remember preferences.
• Provide tracking tools, reminders, progress views, assessments, educational content, and other functions you request.
• Respond to questions, support requests, feedback, and administrative messages.
• Protect the Services and users; detect, investigate, and prevent fraud, misuse, security incidents, and technical problems.
• Analyze performance and usage in aggregated or de-identified form and develop new features.
• Comply with law, enforce our terms, and establish, exercise, or defend legal claims.
• Send service-related notices and, only where permitted, marketing communications. You may opt out of promotional email while still receiving essential service messages.

We do not use information from Google user data for advertising. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements, where applicable.

4. How We Disclose Information
We may disclose information in the following limited circumstances:
• Service providers and processors that support hosting, cloud storage, authentication, communications, analytics, diagnostics, customer support, security, and app operation. They may process information only for contracted purposes and subject to appropriate obligations.
• Connected services at your direction, such as when you authorize calendar synchronization or choose to share information through your device or another application.
• Legal and safety purposes when we reasonably believe disclosure is required by law, legal process, or a valid government request, or is necessary to protect rights, safety, security, and integrity.
• Business transfers involving a merger, financing, acquisition, restructuring, bankruptcy, or sale of all or part of the business, subject to applicable law.
• With your consent or at your direction.

We do not sell your personal information for money. We do not share sensitive health-tracking information for cross-context behavioral advertising.

5. Data Storage, Retention, and Security
We retain personal information for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary according to the type of information, why it was collected, and applicable requirements. We may retain aggregated or de-identified information that no longer reasonably identifies you.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and promptly notifying us of suspected unauthorized access.

6. Your Choices and Privacy Rights
Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to withdraw consent; or to object to or restrict certain processing. You may also:
• Update available profile and account information within the app.
• Change device notification permissions through your device settings.
• Disconnect third-party services through PeptideWell or the third party's security settings.
• Opt out of promotional email by using the unsubscribe link, when provided.
• Request account and associated data deletion by contacting us at info@healthyagingwell.com.

We may need to verify your identity before completing a request. We may deny or limit a request where permitted by law, and we will explain the reason when required. Authorized agents may submit requests where applicable, subject to verification of authority and identity. You may appeal a denied request by replying to our decision.

7. Children's Privacy
The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Users under the age of majority in their jurisdiction should use the Services only with the involvement and consent of a parent or legal guardian.

8. International and State-Specific Considerations
PeptideWell is operated from the United States. If you access the Services from another jurisdiction, your information may be processed in the United States or other locations where our service providers operate, subject to applicable safeguards.

Residents of certain U.S. states may have additional rights regarding personal data, including sensitive data. Where required, we will obtain consent before processing sensitive data and provide legally required methods to exercise rights. You may contact us using the details below.

9. Third-Party Links, Providers, and Affiliate Relationships
The Services may contain links to healthcare providers, pharmacies, educational resources, merchants, or other third parties. PeptideWell may receive compensation when you use certain affiliate links. A third party's collection and use of information is governed by its own privacy policy and terms, not this Privacy Policy. PeptideWell does not control and is not responsible for third-party privacy, security, medical eligibility decisions, services, products, or claims.

10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised policy and update the "Last updated" date. If changes are material, we may provide additional notice through the app, website, or email where appropriate. Your continued use of the Services after the effective date of a revised policy means the revised policy applies to your continued use, to the extent permitted by law.

11. Contact Us
For privacy questions, requests, or complaints, contact:
Joye Ventures LLC dba Healthy Aging Well
PeptideWell Privacy Team
Email: info@healthyagingwell.com
Website: https://healthyagingwell.com