This Privacy Policy explains how Ratio Labs, Incorporated (“Ratio Labs,” “we,” “us,” or “our”) handles information when you use Paco: Peptide Tracker (“Paco” or the “App”) or contact Paco support.
1. Information Paco handles
Information you choose to enter
Depending on how you use Paco, the App may process:
- Protocol labels, compounds, routes, dose forms, schedules, check-in times, reminder preferences, and user-entered instructions.
- Check-in history, taken or skipped status, notes, and injection-site rotation when applicable.
- Vial or oral inventory, concentration inputs, expiration dates, and supply calculations.
- Manual health logs such as energy, sleep, mood, optional weight, and notes.
- Onboarding choices and App preferences.
This information may be sensitive health-related information. Paco uses it to provide the tracking and organization features you request.
App, device, and service information
Paco and its service providers may also process:
- An anonymous app-account identifier used to keep your private cloud snapshot separate from other users.
- An Apple Push Notification service token if you enable remote notifications.
- Subscription products, entitlement status, purchase results, and restore status supplied through Apple’s StoreKit services.
- Limited product events, such as whether onboarding was completed or a feature was opened. Paco’s analytics rules exclude protocol names, compounds, dose values, notes, injection sites, calculator inputs, and exported health history.
- Information you include when you email support, along with ordinary email metadata.
Paco’s Apple privacy manifest declares Health, Other User Content, User ID, Device ID, Purchase History, and Product Interaction. These categories support App Functionality, and User ID, Device ID, Purchase History, and Product Interaction also support Analytics. Paco does not request permission for tracking and does not declare tracking domains.
2. How we use information
We use information to:
- Save, display, calculate, and organize the routine you enter.
- Schedule reminders and deliver notifications you choose to enable.
- Maintain a private, best-effort backup for the current anonymous app account.
- Process and restore subscriptions through Apple.
- Keep the App reliable, understand broad feature usage, and prevent abuse.
- Respond to support requests and important service communications.
- Comply with legal obligations and protect users, our services, and our rights.
3. Local storage and private cloud backup
Paco is offline-first. It writes a protected snapshot of your data to your device so core tracking continues without a network connection. When cloud services are available, Paco mirrors that snapshot to Supabase under an anonymous app account protected by access controls that separate one user’s snapshot from another’s.
The current anonymous account is designed for the installation using it. It is not a conventional Paco login and should not be treated as dependable multi-device or reinstall recovery. Export anything you need to retain before deleting the App or resetting its data.
4. When information is shared
We disclose information only as needed to operate Paco, complete a transaction, comply with law, or protect users and the service. Service providers may include:
- Apple for App Store distribution, StoreKit purchases, and notifications.
- Supabase for anonymous authentication, private snapshot storage, and server functions.
- Knock for notification-token management and approved lifecycle notifications. Paco does not send user-entered protocol names, compounds, doses, sites, notes, calculator inputs, or health history to Knock.
- Superwall for subscription offer presentation and related product events.
- Firebase, only if enabled in a later production build, for limited product analytics and crash diagnostics. Paco will update its App Privacy disclosure and this policy before enabling additional collection.
These providers process information on our behalf or under their own terms for platform services. We may also disclose information in connection with a business transaction, legal process, safety issue, or request from an authority where legally required.
We do not sell personal information or health information. Paco does not use your information for targeted advertising or cross-app tracking.
5. Notifications
Notifications are optional. If you enable them, Paco may register a device token and use your selected reminder settings to send local reminders or approved lifecycle notifications. Disabling notifications in Paco removes the registered remote token when possible; failed removal is retained for retry. You can also change notification permission in iOS Settings.
6. Retention
Data stored by Paco remains on your device and in the private cloud snapshot until you reset Paco, delete it through the available controls, or the data is otherwise no longer required to provide the service. If cloud deletion cannot complete while you are offline, Paco records the pending deletion locally and retries it before restoring cloud data.
Limited analytics, transaction records, fraud-prevention information, and support correspondence may be kept as reasonably necessary for operations, security, legal compliance, dispute resolution, and accounting. Apple independently retains App Store transaction information under Apple’s policies.
7. Your choices and controls
- Export: In Paco, open Settings → Export Paco data to create a readable JSON export through the iOS share sheet.
- Delete: Open Settings → Reset all app data to remove Paco data from the device, cancel reminders, unregister notifications when possible, and delete the private cloud snapshot.
- Notifications: Turn reminders off in Paco or adjust Paco’s permission in iOS Settings.
- Purchases: Manage or cancel subscriptions in your Apple account. Use Restore Purchases in Paco when needed.
- Support: Contact us to ask a privacy question or request help using these controls.
Privacy rights vary by jurisdiction. Subject to applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. Because Paco uses an anonymous app account rather than a conventional account profile, the in-app export and reset controls are usually the fastest and most complete way to act on Paco data.
8. Security
We use technical and organizational safeguards designed to protect Paco data, including iOS file protection, encrypted network transport, anonymous authentication, row-level access controls, server-side secret handling, and restricted notification payloads. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
Paco is not directed to children. If you are under the minimum age required to consent to digital services where you live, do not use Paco without authorization from a parent or legal guardian. If you believe a child has provided personal information improperly, contact us.
10. International processing
Ratio Labs and its providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.
11. Changes to this policy
We may update this policy as Paco changes. We will update the “Last updated” date and provide additional notice when required by law.
12. Contact
Questions or privacy requests can be sent to seth@ratiolabapps.com.
Ratio Labs, Incorporated
United States