Privacy Policy
Short version: Bo stores your peptide library, doses, injection sites, and streak data locally on your device. We do not sell your data. We use a privacy-respecting analytics provider (PostHog, EU region) to understand how the app is used in aggregate. If you use the optional Ask Bo AI chat, your messages and a short summary of your log data are sent securely to our AI provider (OpenAI) to generate a reply, and are not used to train AI models.
1. Data we collect
1.1 On-device data
- Your peptide library (names, vial size, BAC water, default units, color, notes)
- Dose logs (date, units, mg, tablet count, injection site, notes)
- Streak count and earned freezes
- App preferences (reminder time, sex pick for body map)
This data is stored on your device using Apple's SwiftData and never leaves it.
1.2 Subscription data
If you subscribe to Bo Premium, our payments partner RevenueCat and Apple process the transaction. We receive entitlement status (active / not active) but never your payment details.
1.3 Analytics
We use PostHog (EU Cloud, GDPR-compliant) to capture anonymous, aggregated product analytics: onboarding completion, paywall views, dose logged counts, feature usage. Each install is identified by a randomly-generated UUID. We do not capture any personally identifiable information, and we do not link analytics to advertising networks.
1.4 Ask Bo (AI chat)
Ask Bo is an optional, Premium-only AI assistant for general peptide questions. It is off until you open it and accept its disclaimer. When you send a message, the following is transmitted over TLS to our backend and on to our AI provider, OpenAI, solely to generate that reply:
- The text of your message and recent messages in the conversation
- A compact summary of your own app data (peptide names, concentrations, recent dose logs, current streak) so Bo can answer in context
Your conversation history is stored on your device; our backend does not retain the transcript. Requests are keyed to your random install UUID; we do not attach your name, email, or Apple ID. Under OpenAI's API terms, data sent through the API is not used to train their models. You can decline by simply not using Ask Bo; doing so does not affect the rest of the app. Ask Bo provides general, educational information only and is not medical advice (see our Terms of Use).
2. How we use the data
- To run the app: your library and logs power every screen
- To deliver subscription benefits (RevenueCat / Apple)
- To improve the app: anonymous usage analytics tell us which features need work
We never sell your data. We never use it for advertising.
3. Notifications
If you grant notification permission, Bo schedules local notifications for daily dose reminders, streak protection, and re-engagement. These are scheduled and delivered entirely on your device; no server is involved.
4. Data sharing
We share data only with these processors, strictly to deliver the service:
- Apple: App Store, payments, push delivery
- RevenueCat: subscription management
- PostHog (EU): anonymous product analytics
- OpenAI: processes Ask Bo chat messages to generate replies (only if you use the AI chat; not used for model training)
5. Your rights
Under GDPR/CCPA you have the right to access, correct, export, or delete your data. Because all your peptide data lives on your device, deleting the app removes it instantly. To request deletion of your analytics record (UUID-keyed), email support@bopeptides.com.
6. Children
Bo is not directed at children under 13. We do not knowingly collect data from children.
7. Security
App data sits inside Apple's app sandbox and is encrypted by iOS at rest. Network traffic to RevenueCat and PostHog is over TLS 1.2+.
8. International transfers
Analytics are stored in PostHog's EU region (Frankfurt). Subscription data may transit through US data centers via Apple and RevenueCat under their published safeguards.
9. Changes
We will update this page when our practices change and revise the "Last updated" date above.
10. Contact
Melvin Morina · support@bopeptides.com