Privacy Policy

Readout is a record of the peptides and medications you take. This policy says what the app collects, where it is stored, and how to delete it.

Health data has its own policy: the Consumer health data privacy policy covers what Readout collects about your health, who processes it, and how to withdraw consent.

Who is responsible

Summit Creative Tech LLC publishes Readout and is the data controller. Contact: hello@summitcreativetech.com.

What Readout collects

Account. When you sign in with Apple or Google, Readout receives your email address and a user id. If you use Apple's Hide My Email, the relay address is the email Readout holds.

Health data you enter. Doses, skipped doses, protocols, outcomes and side effects, blood work, vials and stock, certificates of analysis, compounds you add, notes, and your settings. Readout stores this data on your device. While you are signed in, it also syncs it to your Readout account so a new device can restore it.

Progress photos. Readout stores photos on your device. It uploads them to your account only when Backup is on in the Photos screen.

Apple Health. With your permission, Readout reads weight, body composition, resting heart rate, heart rate, heart rate variability, blood oxygen, VO2 max and sleep from Apple Health. These readings are read on the device and never leave it. With a separate permission, Readout writes weight, body fat and side effects you log back to Apple Health.

Voice logging. The device turns your speech into text. Audio is never uploaded.

Subscription. Apple processes the payment through the App Store. Readout receives whether your subscription is active and never receives your payment details.

What Readout uses it for

App functionality: showing your record, syncing it to your account, and restoring it on a new device.

Readout contains no analytics SDK and no advertising. Readout does not sell, license or share your data, identified or de-identified.

Readout does not track you across other apps or websites, and neither the app nor this site responds to Do Not Track signals, because neither one sends your browsing anywhere.

Where it is stored

Supabase hosts your account and synced data, on Postgres and file storage in the us-east-1 region of the United States. Every table uses row-level security, so only the signed-in owner of a row can read or change it. A private bucket holds photos under the same rule.

Assist

Assist, the AI feature, is not available in this release. This policy will be updated before it ships.

How long it is kept

Your account keeps your data until you delete the account. Your device keeps its copy until you delete it in the app or delete the app.

Security

Data moves between the app and your account over TLS. Supabase encrypts stored data at rest. The app can be locked with Face ID or your passcode.

Your rights

• Access. Everything Readout holds about you is visible in the app.
• Export. Settings, Export your data. CSV is one row per dose. PDF is a formatted dose and outcome history.
• Deletion. Settings, Account and data, Delete everything. This removes your rows and photos from your account and from the device. It cannot be undone.

To exercise any of these another way, or to ask a question about your data, write to hello@summitcreativetech.com.

Children

Readout is for people 18 and over. If a person under 18 has created an account, write to the address above and it will be deleted.

Changes to this policy

When this policy changes, the effective date at the top changes with it. The current version is always at this address.

Contact

Summit Creative Tech LLC
hello@summitcreativetech.com