Legal

Your Data Rights

Last updated June 22, 2026. This document is a template provided for product transparency. It is not legal advice and must be reviewed and adapted by qualified counsel before production use.

Your record is yours

Peptalk is patient-portable by design: you own your record at the platform level, and clinics are granted scoped access through relationships you control. The rights below put that ownership into practice.

Access & export

You can download a portable copy of your record at any time. Sign in and open Data exportto get your data as a JSON file. The export includes the patient-owned data that travels with you between clinics — profile basics, protocols and vials, dose and injection-site history, weight and metric logs, your clinics and what you share with each, your information requests, and your consents. It does not include a clinic's internal notes or other clinic-only records.

Correction

Much of your record is editable directly in the app. For information you cannot edit yourself, or to correct clinic-entered clinical records, contact your clinic or reach us via Contact and we will help route the request.

Portability

This is the whole thesis. You can add a new clinic, carry your history forward, and have a new clinic see your shared record on day one — no record migration. Your record stays with you across clinic relationships.

Revoking a clinic's access

You can revoke any clinic's access from Clinics. Revocation takes effect immediately — it is enforced at the database with Row-Level Security, so the clinic loses access on its next request. Active protocols from a clinic you remove are paused and need to be reviewed by a new provider before continuing. Revoking access does not change your medical care directly; speak with your current provider before discontinuing any therapy.

You can also control exactly what each clinic sees with per-clinic sharing scopes, also managed under Clinics.

Deletion

You can request deletion of your Peptalk account from Account deletion. Deletion is processed as a reviewed, audited request rather than an instant teardown, so that the action is accountable and so clinics can meet their own legal retention obligations.

What happens when you request account deletion

  • Your account is closed and your active sessions are revoked.
  • Your personal record is scheduled for removal, and the request is logged in our append-only audit trail so the action is accountable.
  • Clinic-held medical records may be retained where a clinic is legally required to keep them. Those are the clinic's records, subject to the clinic's own retention obligations — not the patient-owned portable record.

Before you delete, consider using Data export to keep your own copy of your record.

Contact for requests

To exercise any of these rights, use the in-app links above where available, or reach the right team via Contact. When you write to us, please include enough detail for us to locate your account and the specific right you are exercising.