This Privacy Policy explains how Ratio Labs, Incorporated (“Ratio Labs,” “we,” “us,” or “our”) handles information when you use Wolverine: Peptide Tracker (“Wolverine” or the “App”) or contact Wolverine support.
1. Information Wolverine handles
Information you choose to enter
Depending on how you use Wolverine, the App may process:
- Protocol labels, compounds, routes, dose forms, schedules, check-in times, reminder preferences, and user-entered instructions.
- Check-in history, taken or skipped status, notes, and injection-site rotation when applicable.
- Vial or oral inventory, concentration inputs, expiration dates, and supply calculations.
- Manual health logs such as energy, sleep, mood, optional weight, and notes.
- Onboarding choices and App preferences.
- If you enable Ask Wolverine, the Chat information described below.
This information may be sensitive health-related information. Wolverine uses it to provide the tracking and organization features you request.
Ask Wolverine Chat information and permission
Ask Wolverine is optional. Before the first AI request, Wolverine explains what will be shared and asks for your permission. If you decline, Wolverine does not send a Chat request, Chat stays off, and the rest of the App remains available.
If you enable Chat and send a message, Wolverine sends the following through its authenticated Supabase server function to OpenRouter and Google, which operates the Gemini model used to generate the response:
- The message you type and the recent messages in that Chat conversation.
- Up to six names from your active routines, including their compound or stack labels.
- The identifiers of any Wolverine Library items linked to those active routines.
Wolverine does not automatically add dose amounts, schedules, check-in history, health logs, or notes to the AI request. You can still type sensitive information into a message, so do not include names, contact details, or medical details that are not needed for your question.
Wolverine does not run an AI model on your device. OpenRouter routes the request only to Google, and Google’s Gemini model returns the response.
App, device, and service information
Wolverine and its service providers may also process:
- An anonymous app-account identifier used to keep your private cloud snapshot separate from other users.
- An Apple Push Notification service token if you enable remote notifications.
- Subscription products, entitlement status, purchase results, and restore status supplied through Apple’s StoreKit services.
- Limited product events, such as whether onboarding was completed or a feature was opened. Wolverine’s analytics rules exclude protocol names, compounds, dose values, notes, injection sites, calculator inputs, and exported health history.
- Information you include when you email support, along with ordinary email metadata.
Wolverine’s Apple privacy manifest declares Health, Other User Content, User ID, Device ID, Purchase History, and Product Interaction. These categories support App Functionality, and User ID, Device ID, Purchase History, and Product Interaction also support Analytics. Wolverine does not request permission for tracking and does not declare tracking domains.
2. How we use information
We use information to:
- Save, display, calculate, and organize the routine you enter.
- Schedule reminders and deliver notifications you choose to enable.
- Maintain a private, best-effort backup for the current anonymous app account.
- Process and restore subscriptions through Apple.
- Keep the App reliable, understand broad feature usage, and prevent abuse.
- Respond to support requests and important service communications.
- Comply with legal obligations and protect users, our services, and our rights.
3. Local storage and private cloud backup
Wolverine is offline-first. It writes a protected snapshot of your data to your device so core tracking continues without a network connection. When cloud services are available, Wolverine mirrors that snapshot to Supabase under an anonymous app account protected by access controls that separate one user’s snapshot from another’s.
The current anonymous account is designed for the installation using it. It is not a conventional Wolverine login and should not be treated as dependable multi-device or reinstall recovery. Export anything you need to retain before deleting the App or your account.
4. When information is shared
We disclose information only as needed to operate Wolverine, complete a transaction, comply with law, or protect users and the service. Service providers may include:
- Apple for App Store distribution, StoreKit purchases, and notifications.
- Supabase for anonymous authentication, private snapshot storage, and server functions.
- Knock for notification-token management and approved lifecycle notifications. Wolverine does not send user-entered protocol names, compounds, doses, sites, notes, calculator inputs, or health history to Knock.
- Superwall for subscription offer presentation and related product events.
- OpenRouter and Google (Gemini), only after you enable Ask Wolverine and send a message, to process the Chat information listed above and return a response. OpenRouter acts as the routing service and the request is restricted to Google as the AI model provider.
- Firebase for limited product analytics and crash diagnostics. Wolverine does not send protocol names, compounds, dose values, notes, injection sites, calculator inputs, exported health history, or Ask Wolverine message text to Firebase.
These providers process information on our behalf or under their own terms for platform services. We may also disclose information in connection with a business transaction, legal process, safety issue, or request from an authority where legally required.
We do not sell personal information or health information. Wolverine does not use your information for targeted advertising or cross-app tracking.
How AI providers may use and protect Chat information
The same or equal protections described in this policy apply to user data processed by our third-party service providers, including OpenRouter and Google. Ratio Labs authorizes them to use it only to provide and secure the AI response, prevent abuse, comply with law, and perform the limited processing described in their applicable service terms. We do not authorize them to use Wolverine Chat information for advertising or to train AI models.
Wolverine configures each request to deny provider data collection and restrict routing to Google. OpenRouter states that its default API settings do not retain prompt or response content, although it keeps non-content request metadata such as model, token count, and latency. Google’s terms for paid Gemini API services and Vertex AI state that prompts, responses, and customer data are not used to improve or train its AI models without permission, but Google may log prompts for a limited time to detect and prevent abuse and to satisfy legal or regulatory obligations. Their practices and safeguards are described in OpenRouter’s data-collection documentation, OpenRouter’s Privacy Policy, Google’s Gemini API terms, and Google’s Vertex AI data-governance documentation.
Ask Wolverine safety boundary
Ask Wolverine is limited to app help and reviewed educational context. It is not a clinician and cannot diagnose, prescribe, select a peptide, recommend a dose, or assess an emergency. Questions and responses may be processed by the providers above solely to deliver the feature and protect it from abuse.
5. Notifications
Notifications are optional. If you enable them, Wolverine may register a device token and use your selected reminder settings to send local reminders or approved lifecycle notifications. Disabling notifications in Wolverine removes the registered remote token when possible; failed removal is retained for retry. You can also change notification permission in iOS Settings.
6. Retention
Data stored by Wolverine remains on your device and in the private cloud snapshot until you delete it through the available controls or it is otherwise no longer required to provide the service. Delete account requires a network connection. Wolverine removes the anonymous cloud account and notification profile before clearing saved data and reminders from your device. If deletion fails, your local data remains available and you can retry from Settings.
Wolverine keeps Chat messages locally for the current Chat session. Starting a new Chat clears those session messages. Wolverine does not store a Chat transcript in its database or send one to product analytics. OpenRouter and Google may retain request metadata or limited copies of prompts and responses as described above. Withdrawing permission stops future AI requests; it cannot undo processing that occurred while permission was active or remove information a provider must retain for security or legal reasons.
Limited analytics, transaction records, fraud-prevention information, and support correspondence may be kept as reasonably necessary for operations, security, legal compliance, dispute resolution, and accounting. Apple independently retains App Store transaction information under Apple’s policies.
7. Your choices and controls
- Export: In Wolverine, open Settings → Export Wolverine data to create a readable JSON export through the iOS share sheet.
- Delete: Open Settings → Account → Delete account to permanently remove your anonymous cloud account, saved cloud and device data, notification profile, and reminders. This does not cancel your Apple subscription.
- Notifications: Turn reminders off in Wolverine or adjust Wolverine’s permission in iOS Settings.
- AI Chat: Choose Not now on the initial permission request to keep Chat off. You can enable Chat later from the Chat screen, review the AI-sharing details from the Chat menu, and withdraw permission at any time from Settings → Your data → AI chat sharing. Withdrawing permission disables future AI requests and clears the local Chat. This choice is stored on your device and is reset when you delete your Wolverine account.
- Purchases: Manage or cancel subscriptions in your Apple account. Use Restore Purchases in Wolverine when needed.
- Support: Contact us to ask a privacy question or request help using these controls.
Privacy rights vary by jurisdiction. Subject to applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. Because Wolverine uses an anonymous app account rather than a conventional account profile, the in-app export and account deletion controls are usually the fastest and most complete way to act on Wolverine data.
8. Security
We use technical and organizational safeguards designed to protect Wolverine data, including iOS file protection, encrypted network transport, anonymous authentication, row-level access controls, server-side secret handling, and restricted notification payloads. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
Wolverine is not directed to children. If you are under the minimum age required to consent to digital services where you live, do not use Wolverine without authorization from a parent or legal guardian. If you believe a child has provided personal information improperly, contact us.
10. International processing
Ratio Labs and its providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.
11. Changes to this policy
We may update this policy as Wolverine changes. We will update the “Last updated” date and provide additional notice when required by law.
12. Contact
Questions or privacy requests can be sent to support@ratiolabs.app.
Ratio Labs, Incorporated
United States