- We sign you in with a phone number. We store a one-way hash of it, your country code, and the last four digits. We do not keep the number itself.
- Peplii records health information you enter: peptides, doses, schedules, injection sites, body measurements, and lab values. It stays private to your account unless you deliberately share it.
- Selfies and before/after photos are sent to our AI provider to make a picture, then deleted from our servers minutes later. Only photos you post to a clan are stored, and only clan members can load them.
- Other people see your username, avatar, level, XP, streak, and clan activity. They never see your doses, measurements, or lab values unless you turn on protocol sharing.
- We do not sell your information, we run no advertising networks, and we do not track you across other companies' apps or sites.
- Deleting your account is permanent and immediate. Nothing is archived for later.
Chibbi Studio Inc. ("Chibbi Studio," "we," "us," or "our") builds mobile apps, including Peplii, a peptide tracking app. This Privacy Policy explains how we collect, use, share, and protect information when you use our apps, our websites, and related services (the "Services"). Peplii holds sensitive health information, so this document is more specific than most. By using the Services, you agree to this Policy.
01Information You Give Us
Account and identity
- Phone number: we sign you in with a one-time code sent by SMS. Your number passes through Amazon Web Services to deliver that message. In our database we store only a keyed one-way hash of the number, your two-letter country code, and the last four digits, which is what lets us recognise you on your next sign-in without holding the number.
- Email address: optional, and only if you add one.
- Username and display name: chosen by you and visible to other users.
- Profile details: age, gender, weight, your stated goals, and your time zone. These are optional and are used to size the app around you, not to identify you.
Health and protocol data (Peplii)
This is the most sensitive category we hold, and all of it is information you type in yourself:
- The peptides in your stack, including custom ones you name yourself, along with strengths, reconstitution numbers, vials, and expiry dates.
- Schedules, dose times, cycles, and the dose logs you record, including the time you say you took a dose and any notes you attach.
- Injection sites, if you record them.
- Body measurements you log: weight, body fat percentage, waist measurement, and notes.
- Lab panel values you enter: marker name, value, unit, reference range, and notes.
- Derived progress: streaks, XP, level, Chibcoins, items you own, and your avatar.
Photos
- A selfie, if you choose to generate a pixel avatar from one.
- Before and after photos, if you use the AI picture tool.
- Photos you post into a clan, if you share progress with your group.
Section 03 covers exactly what happens to each of these, because the handling is different for all three.
Social and community
- Clans you create or join, clan challenges, invites, and referral codes you use or share.
- Reactions you leave on shared posts.
- Reports you file and accounts you block.
02Information We Collect Automatically
- Device and app: device model, operating system version, app version, build environment, and time zone.
- Push token: an Apple-issued device token, so we can send the notifications you have enabled.
- Device attestation: Peplii uses Apple's App Attest to confirm requests come from a genuine, unmodified copy of the app. This produces a device key and an installation identifier. It is an anti-abuse measure and is not tied to your identity outside our system.
- Product analytics: events describing how features are used, such as opening the app, logging a dose, or viewing the subscription screen. These are keyed to your account identifier, never your phone number. Names of custom peptides are never included, only a count.
- Server logs: IP address, timestamps, and request metadata, kept briefly for security, abuse prevention, and debugging.
- Purchase records: when you buy something, Apple sends us a signed receipt containing the product identifier, transaction identifier, and expiry date. Apple processes the payment. We never see your card number or billing address.
- Website analytics: chibbi.studio uses Google Analytics for aggregate traffic measurement. It is separate from the app and holds no account data.
03Photos and AI-Generated Images
Three features accept a photo, and each one keeps it for a different length of time. We think this is worth spelling out.
Avatar from a selfie
Your selfie is sent to our AI image provider, which draws a chibi pixel character in Peplii's art style. The result is converted into a small grid of coloured pixels, and that grid is what we store as your avatar. The selfie itself is never written to our database. It exists in the worker's memory for the length of the job and is gone when the job ends.
Before and after pictures
Your photo is sent to our AI image provider along with the goal you picked, and the provider invents an "after" picture. Both the photo you supplied and the generated result are deleted from our servers a few minutes after the image finishes (five minutes by default). The copy you keep lives in your photo library on your device, and we cannot see it.
The generated picture is an invention. It is not a photograph of you, it is not edited from your body, and it does not predict or promise any result. The app labels it as AI-generated, and the exported card carries that label burned into the image.
Photos shared into a clan
A photo you post to your clan's feed is a post, so it is stored durably until you remove it, we remove it, or the clan or your account is deleted. This is the one photo path where we hold the image. Unlike avatars and item art, these images sit behind an authenticated, membership-checked route: only signed-in members of that clan can load them, and they are not served from a public cache.
Screening
Photos submitted to any of these three features are screened automatically before they are stored or shared, to keep sexual and violent content out of a community that legitimately contains shirtless progress shots. Screening results, and any content you report, may be retained for safety and enforcement purposes even after the underlying content is removed.
04How We Use Information
- To run the app: keeping your stack, calculating streaks and XP, awarding Chibcoins, generating avatars, and syncing across your devices.
- To power social features: clans, the leaderboard, challenges, referrals, and shared posts.
- To send notifications you asked for: dose reminders, streak nudges, clan activity, and service notices. Every category can be turned off in settings.
- To handle purchases: activating a subscription or trial, crediting Chibcoins, and honouring restores.
- To keep people safe: screening images, acting on reports and blocks, and enforcing our Terms.
- To improve the app: understanding which features help people stay consistent, and fixing bugs.
- To protect the Services: preventing fraud, abuse, and unauthorised access.
We do not use your health information to advertise to you, and we do not sell it. If we ever wanted to use it for a genuinely new purpose, we would ask you first.
05Who Else Touches Your Data
We keep the list of processors short on purpose. Each one handles only what its job requires, under contract, and none of them may use your information for their own purposes.
| Provider | What it does | What it sees |
|---|---|---|
| Amazon Web Services | Hosting, database, image delivery, SMS | Everything stored in the Services, plus your phone number at the moment a sign-in code is sent |
| OpenAI | Avatar generation, before/after images, image screening | The photo you submit, for the duration of the request |
| Apple | App Store purchases, push notifications, App Attest | Payment details (which we never receive), your push token, device attestation |
| Mixpanel | Product analytics | Usage events and profile attributes keyed to your account identifier |
| Slack | Where our team reviews reported content | Reported posts and the surrounding report record |
| Google Analytics | chibbi.studio website traffic | Website visits only, no account data |
We also share information in these situations:
- With other users, as described in section 06.
- For legal reasons: when required by law, or to protect the rights, safety, and security of our users, the public, or the Services.
- In a business transfer: if Chibbi Studio is involved in a merger, acquisition, or sale of assets, information may transfer as part of that deal. We would notify you before your information became subject to a different policy.
06What Other People Can See
Peplii has social features, so some of your information is visible to others by design. This is the full list.
- On the leaderboard: your username, avatar, level, XP, and streak. The leaderboard carries no user identifiers and no health data.
- In a clan: everything above, plus your daily completion status and your contribution to clan progress.
- Protocol sharing: off unless you turn it on. When you turn it on, clanmates can see which peptides you take and how you dose them. Peptides you added yourself are masked to clanmates: the name is replaced with "custom peptide" and your abbreviation is never sent at all.
- Shared posts: before and after photos you deliberately post into a clan, plus reactions on them.
- Referral and clan links: these open a public web page showing only the app icon and a generic invitation. They contain no personal information.
Your dose logs, injection sites, body measurements, lab values, notes, vials, and costs are never shown to other users. There is no setting that exposes them.
Anything you post to a clan can be seen, screenshotted, and shared onward by the people in that clan. Blocking hides content in both directions, but it cannot recall something already seen.
07Your Choices and Controls
- Edit anything: your profile, stack, logs, measurements, and lab entries can be changed or deleted individually in the app at any time.
- Notifications: every category has its own toggle in settings, including dose reminders, clan reminders, daily drops, subscriber rewards, and re-engagement messages.
- Protocol sharing: one switch, off by default.
- Block and report: available on user-generated content throughout the app. Blocked accounts are managed in privacy settings.
- Leave a clan at any time to stop sharing progress with it.
- Delete your account: see section 08.
- Access a copy: write to us and we will provide the personal information we hold about you.
08Deleting Your Account
You can delete your account from inside the app. It is permanent and it happens immediately. There is no grace period, no archive, and no way for us to restore it afterwards.
Deletion removes your profile, avatar and generated avatar art, peptides and schedules and cycles, dose logs, vials, injection sites, body measurements, lab panels, streaks, XP history, wallet and owned items, clan memberships, shared posts, device tokens, and your sign-in record. Your phone hash is released, so the same number can be used to sign up again as a genuinely new account.
If you own a clan, deleting your account deletes that clan for everyone in it. Ownership is not transferred. Transfer or disband the clan first if that matters to you.
We may retain a limited record where the law requires it, or where it is needed to resolve a dispute, prevent abuse, or enforce our agreements. Backups roll off on their own schedule. Anonymised and aggregated statistics that can no longer identify you may be kept.
09How Long We Keep Things
| Data | Retention |
|---|---|
| Account, health, and progress data | While your account is active, then deleted on request |
| Selfie used for an avatar | Never stored. Held in memory for the length of the job |
| Before/after source photo and result | Deleted a few minutes after the image finishes, five by default |
| Photos posted to a clan | Until removed by you, by us, or by deletion of the clan or account |
| Moderation and safety records | Retained after content removal, for enforcement |
| Server logs | Short-lived, for security and debugging |
| Purchase records | As long as required for tax, accounting, and dispute handling |
10Security
We encrypt data in transit, store your phone number only as a keyed hash, store session tokens only as hashes, verify that requests come from a genuine copy of the app, gate shared photos behind membership checks rather than public URLs, and restrict internal access to what a task requires.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant regulators as required by law.
11Children's Privacy
Chibbi Studio's apps are not directed to children under 13, or the minimum age required where you live, and we do not knowingly collect personal information from them. Peplii is different: it is for adults only, and you must be at least 18 to use it. If you believe a child has provided us information, contact us and we will delete it.
12International Users
Chibbi Studio Inc. is based in British Columbia, Canada. Our infrastructure and our service providers operate in Canada, the United States, and other countries, so your information may be processed outside the country where you live, including in jurisdictions whose privacy laws differ from your own. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
13Your Regional Rights
Canada. We handle personal information in accordance with PIPEDA and British Columbia's Personal Information Protection Act. You may request access to your personal information and ask us to correct it. You may also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
EEA, UK, and Switzerland. Our legal bases are: performing our contract with you (running the app), your consent (health information, photos, and optional notifications), our legitimate interests (security, abuse prevention, and product improvement), and legal obligations. You have the right to access, correct, erase, restrict, port, or object to processing of your personal information, and to withdraw consent at any time. Health information is a special category of data, processed only on your explicit consent, which you can withdraw by deleting the relevant entries or your account. You may lodge a complaint with your local supervisory authority.
California and other US states. You may request to know, delete, or correct your personal information, and you will not be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of.
To exercise any of these rights, email support@chibbi.studio. We will verify your request through your account and respond within the period the law allows.
14Changes to This Policy
We may update this Policy as the apps change. If a change is material, we will notify you in the app or by email and update the date at the top. Continuing to use the Services after a change takes effect means you accept the updated Policy.
15Contact Us
Questions about privacy, or a request about your data? We answer every one.
Chibbi Studio Inc.
British Columbia, Canada
Email: support@chibbi.studio