Privacy Policy — PepLab

Last updated: April 22, 2026

YAKOV LLC ("we", "our", or "the Company"), registered in the State of Wyoming, United States of America, operates the PepLab mobile application ("the App"). This Privacy Policy describes how we collect, use, store, and protect user information in connection with the App, in compliance with applicable privacy laws.

By using PepLab, you agree to the terms of this Policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information you provide voluntarily

When you create an account or use App features, we may collect:

Identification data: name and email address (provided via Google or Apple ID login).
Protocol data: peptides selected, dosages, frequencies, and application schedules you configure in the App.
Preference data: selected language, notification settings, and dose history you record.

1.2 Information collected automatically

When you use the App, we automatically collect:

Usage data: screens accessed, features used, and session duration, in aggregated and anonymized form.
Device data: device model, operating system version, and anonymized device identifiers.
Diagnostic data: error and crash reports, without any personally identifiable information.

1.3 Information we do NOT collect

PepLab does not collect sensitive health data, laboratory results, medical diagnoses, biometric data, or any information that would allow identification of specific health conditions.

2. How We Use Your Information

We use your data exclusively for the following purposes:

Purpose	Legal Basis
Create and manage your user account	Contract performance
Sync your protocol across devices	Contract performance
Send dose reminder notifications	Consent
Improve the App with aggregated data	Legitimate interest
Process subscription payments	Contract performance
Comply with legal obligations	Legal obligation

We do not use your data for advertising purposes, do not sell your data to third parties, and do not engage in profiling for marketing purposes.

3. Sharing of Information

Your personal data may be shared only in the following circumstances:

Service providers: we share data with technical service providers essential to the App's operation, including authentication services (Google, Apple), cloud infrastructure, and payment processing. These providers are contractually required to protect your data and may not use it for their own purposes.

Legal obligation: we may disclose data when required by law, court order, or competent governmental authority.

Protection of rights: we may disclose data when necessary to protect the rights, property, or safety of YAKOV LLC, our users, or third parties.

We do not transfer data for commercial purposes to third parties unrelated to the operation of the App.

4. Data Storage and Security

Your data is stored on secure servers located in the United States. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including encryption in transit (TLS) and at rest.

Data retention periods are as follows:

Account data: retained while your account is active. Deleted within 30 days of a deletion request.
Protocol data: stored locally on your device and, if synced, on our servers while your account is active.
Diagnostic data: retained for a maximum of 90 days in anonymized form.

5. Your Rights

You have the following rights regarding your personal data:

Access: request confirmation of whether we process your data and obtain a copy.
Correction: request correction of incomplete, inaccurate, or outdated data.
Deletion: request deletion of your data when it is no longer necessary for the purposes for which it was collected.
Data portability: request transfer of your data to another service provider.
Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Objection: object to processing based on legitimate interest.

To exercise any of these rights, contact us at: askpeplab@gmail.com. We will respond within 15 business days.

6. Children's Privacy

PepLab is intended exclusively for users 18 years of age or older. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor, we will delete that information immediately. If you believe a minor has provided data to the App, please contact us.

7. International Data Transfers

Your data may be transferred to and processed in the United States of America, where YAKOV LLC is headquartered. By using the App, you consent to this transfer. We ensure that transferred data receives a level of protection equivalent to that required by applicable law, through contractual clauses with our service providers.

8. Changes to This Policy

We may update this Policy periodically. When we make material changes, we will notify you through the App or by email. The date of the last update is always indicated at the top of this document. Continued use of the App after notification constitutes acceptance of the changes.

9. Contact

For questions, requests, or complaints related to the processing of your personal data, please contact:

YAKOV LLC Registered Agent: Wyoming, United States of America Email: askpeplab@gmail.com Website: peplab.app/privacy

This Privacy Policy was drafted in compliance with applicable U.S. privacy laws, the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018), and the requirements of the Google Play and Apple App Store platforms.