Legal

Your Data Rights

Last updated June 22, 2026. This document is a template provided for product transparency. It is not legal advice and must be reviewed and adapted by qualified counsel before production use.

Your record is yours

Peptalk is patient-portable by design: you own your record at the platform level, and clinics are granted scoped access through relationships you control. The rights below put that ownership into practice.

Access & export

You can download a portable copy of your record at any time. Sign in and open Data export to get your data as a JSON file. The export includes the patient-owned data that travels with you between clinics — profile basics, protocols and vials, dose and injection-site history, weight and metric logs, your clinics and what you share with each, your information requests, and your consents. It does not include a clinic's internal notes or other clinic-only records.

Correction

Much of your record is editable directly in the app. For information you cannot edit yourself, or to correct clinic-entered clinical records, contact your clinic or reach us via Contact and we will help route the request.

Portability

This is the whole thesis. You can add a new clinic, carry your history forward, and have a new clinic see your shared record on day one — no record migration. Your record stays with you across clinic relationships.

Revoking a clinic's access

You can revoke any clinic's access from Clinics. Revocation takes effect immediately — it is enforced at the database with Row-Level Security, so the clinic loses access on its next request. Active protocols from a clinic you remove are paused and need to be reviewed by a new provider before continuing. Revoking access does not change your medical care directly; speak with your current provider before discontinuing any therapy.

You can also control exactly what each clinic sees with per-clinic sharing scopes, also managed under Clinics.

Deletion

You can request deletion of your Peptalk account from Account deletion. Closing your account takes effect immediately and is recorded in the audit trail. Removing the underlying records afterwards is a reviewed step, so clinics can meet their own legal retention obligations.

What happens when you request account deletion

  • Your account is closed immediately: you are signed out on every device and can no longer sign in.
  • Every clinic loses access at once: each clinic relationship is ended, just as if you revoked it yourself.
  • Your personal record is then removed by our team under our retention policy, and every step is logged in our audit trail.
  • Clinic-held medical records may be retained where a clinic is legally required to keep them. Those are the clinic's records, subject to the clinic's own retention obligations — not the patient-owned portable record.

Before you delete, consider using Data export to keep your own copy of your record.

Contact for requests

To exercise any of these rights, use the in-app links above where available, or reach the right team via Contact. When you write to us, please include enough detail for us to locate your account and the specific right you are exercising.