Security, privacy
& compliance
Peptide Prime handles sensitive health and protocol data across our mobile app, web app, and provider console. We built our platform with security and privacy as foundational requirements — not afterthoughts.
HIPAA-aligned practices
We design products and workflows around PHI minimization, consent-aware sharing, and safeguards expected under HIPAA and the HITECH Act — especially for clinic and provider workflows.
SOC 2-aligned controls
Our engineering and operations follow security control categories common to SOC 2 (security, availability, confidentiality) — including access management, monitoring, and change discipline.
Privacy by design
Users control what they log. Provider views are consent-scoped. We collect only what features require and document how data flows across the mobile app, web app, and provider console.
Documentation
Request security documentation
Clinics, partners, and procurement teams can request our security package. We typically share materials under mutual NDA for qualified organizations evaluating Peptide Prime for clinical or enterprise use.
Peptide Prime's security and privacy practices are aligned with the HIPAA and SOC 2 frameworks. This reflects our security standards and engineering practices and is not a claim of formal certification, attestation, or completed third-party audit unless explicitly stated in a signed agreement.
Request documentation
Standards we align with
We align engineering, product, and operational practices with frameworks clinics and enterprises expect when evaluating health-adjacent software.
HIPAA & the HITECH Act
We design products and workflows around PHI minimization, consent-aware sharing, and safeguards expected under HIPAA and the HITECH Act — especially for clinic and provider workflows.
SOC 2 trust service criteria
Our engineering and operations follow security control categories common to SOC 2 (security, availability, confidentiality). Control mapping and policy summaries aligned to SOC 2 trust service criteria are available on request.
GDPR, CCPA & other data protection laws
Your data belongs to you. We respect your privacy rights under GDPR, CCPA, and other data protection laws. Delete your account anytime, export your data, or exercise your privacy rights.
Business Associate Agreements
Business Associate Agreement templates and PHI handling summary for covered entities and clinics. Available on request.
App Tracking Transparency
In the mobile app, analytics and attribution features are optional. On iOS, where required, we request App Tracking Transparency permission before enabling cross-app or cross-website tracking.
Your data belongs to you
Export your data first
Before deleting your account, we recommend downloading a copy of your data. You can export all your injection logs, protocols, wellness data, and more in JSON or CSV format directly from the app settings.
Deletion is permanent
When you delete your account, all data is permanently removed from our servers within 30 days. This includes injection logs, health data, protocols, badges, and all other information. This action cannot be undone.
Peptide Prime Premium — built for serious protocols
- Cancel anytime no hidden fees or long-term commitments
- Works across iOS, Android, and web
- Restore purchases on any device
Short-term flexibility
Weekly:Full Premium feature access
Short-term flexibility. Billed weekly from checkout.
Billed weekly from checkout
Month to month
Monthly:AI Companion and protocol tools
Flexible month-to-month — billed from checkout.
Billed monthly from checkout
Best long-term value
Annual:Everything in Premium
Best for consistent long cycles. Lowest effective long-term rate.
Extended holiday sale — $79.99/yr ($70.01 off $150)
Protecting
your data
- Encryption in transit & at rest
- Role-based access & least privilege
- Patient consent & scoped sharing
- Audit logging
- Backups & recovery
- Monitoring & alerting