Privacy Policy

This Privacy Policy explains how The Amino Exchange ("we", "us", the "Service") collects, uses, stores, and shares information when you use our website and mobile-web application. It applies to visitors, registered users, and coaches on the Service.

By creating an account, using the Service, or clicking "I agree to the Privacy Policy and Terms of Service" during signup, you consent to the practices described here.

Account information. Your name, email address, hashed password, and (optionally) a handle, avatar URL, timezone, and short bio.

Health & dosage data. Everything you log inside the app: peptide names, doses, injection sites and times, vial inventory, reconstitution notes, side effects, side-effect journal tags, cycle definitions, body weight, waist and body-fat measurements, goal weights, calorie/macro goals, nutrition entries (including AI meal parses, voice-to-text transcripts, and photo thumbnails you choose to save), supplement logs, and any notes.

Communication. Messages you send to coaches, community posts and replies, direct messages, testimonials, and reports.

Technical data. IP address, browser user agent, feature-flag toggles, session tokens (stored as JWTs on your device), timezone, and the last time you logged in. We use this to keep your session secure and to keep the app running smoothly.

Payments (if applicable). If you upgrade to Pro, our payment providers (Stripe, PayPal, or Venmo) collect and process your billing information. We only receive confirmation events (subscription started, renewed, cancelled) via signed webhooks — we never store or see your full card number.

What we do not collect. We do not ask for social security numbers, insurance details, government ID, or any information beyond what you voluntarily enter. We do not track you across other websites.

Your data is stored in MongoDB, a document database hosted in a secured cloud environment. Each record is written into a per-collection document keyed to your unique user ID so your data is logically isolated from every other user.

• Encryption in transit. Every request between your browser and our servers uses TLS 1.2+ (HTTPS). Signed JWT session tokens gate all API endpoints; anonymous access to your data is refused at the database layer.
• Encryption at rest. The underlying MongoDB volumes are encrypted at the disk layer by our cloud provider. Password credentials are stored only as bcrypt hashes — plaintext passwords are never persisted, and no employee can recover a password from our systems.
• Access control. Only a small number of production engineers can access the database, and access is logged. Administrators of the Service can view a user's account status and role for support purposes but cannot see logged doses or messages without explicit permission.
• Backups. We keep encrypted rolling backups so we can restore your account in the event of infrastructure failure. Backups are pruned on a rotating schedule.
• Signed webhooks. Payment webhooks from Stripe and PayPal are verified with HMAC-SHA256 signatures before any change is applied to your account.

No system is 100% impregnable. If we ever discover a data incident that materially affects your account, we will notify you by email without undue delay.

• To operate the Service — save your logs, compute your countdowns, generate charts, build your history exports, and power your dashboard.
• To send you the reminder and digest emails you opt into (dose reminders, weekly digests, weight streaks). You can unsubscribe from every recurring email.
• To improve accuracy of our AI features (voice-to-nutrition, meal photo parsing, text meal parsing). AI providers we use — currently OpenAI Whisper and Anthropic Claude — process your submission to return macros. Providers do not retain your content beyond the transient request per their zero-retention APIs.
• To protect the Service — detect fraud, ban abusive accounts, and keep the community safe.
• To comply with law.

We do not sell your personal data. We do not serve third-party advertising. Your health data is never packaged for marketers.

The Amino Exchange includes an optional Coaching feature. When you connect to a coach — by accepting their invite or requesting their guidance — you are affirmativelygranting that coach access to your logged data for the duration of the coaching relationship.

• What a coach sees: your active peptide cycles, shots, doses, injection sites, weight logs, nutrition entries (including AI-parsed meals), streak progress, and any messages you send them.
• What a coach does NOT see: your password, your billing information, private community DMs with users other than themselves, or accounts you have not connected to them.
• Ending a coaching relationship. You can disconnect from a coach at any time from your Profile. Once disconnected, the coach loses access to any future logs. Data they already saw remains in their memory but is no longer accessible from their dashboard.
• Coach obligations. Coaches on our platform agree to keep client data confidential, use it only to provide guidance, and never re-share it. Violations are grounds for immediate removal from the Service.
• Admin oversight. Site administrators can, in limited circumstances (a user-reported dispute or safety concern), review a coach's client-visible data. Any such access is logged.

The Service relies on a small number of well-known infrastructure partners:

• OpenAI (Whisper) — transcribes your voice recordings into meal text.
• Anthropic (Claude) — parses meal text and photos into estimated macros.
• Resend / SMTP — delivers transactional and reminder emails you opt into.
• Stripe / PayPal / Venmo — process subscription payments (if you upgrade).
• Cloud hosting provider — runs our servers and MongoDB.

Each provider is contractually obligated to use your data only to deliver its service back to us. None of them are permitted to use your data to train general-purpose models.

Privacy is a core value — but so is a safe community. When any member uses the in-app Report button on a post, reply, or direct message, that report is reviewed by The Amino Exchange staff (admins and moderators).

• Staff review rights. By using the community and messaging features you acknowledge that The Amino Exchange staff has the right to review and remove any content that has been reported for violating our safety rules — including harassment, spam, doxxing, illegal content, and misinformation.
• What we log. Every report stores the flagged content (as a short snippet), the author of the content, who reported it, the reason, and any admin action taken. This log lives in a separate collection accessible only to admin + moderator accounts.
• Purpose limitation. These moderation logs are stored and reviewed strictly for the purpose of community safety — never used for marketing, sold to third parties, or exposed to any user outside the reporter and staff who need to action the report.
• Repeat offenders. If a member accumulates three reports in a rolling seven-day window that end in a Remove action, their posting privileges are temporarily paused for 24 hours ("auto-mute") and admins are notified.
• Data subject rights still apply. You can request a copy or deletion of your own moderation history — same rights as the rest of your data (§10).

The Amino Exchange is a tracking tool. It is not a doctor, a pharmacist, or a substitute for professional medical advice.

• Nothing you see in the peptide library, calculator, community, or AI outputs is a prescription, a diagnosis, or a recommendation of treatment.
• Peptides, hormones, and supplements can carry serious health risks. You should consult a licensed healthcare provider before starting, changing, or stopping any regimen, and especially before self-administering injectable compounds.
• AI-generated nutrition estimates are approximations. Do not rely on them for medical, allergen, or clinical purposes.
• The countdowns, reminders, and calculators are convenience tools. You are solely responsible for what you do with the numbers you log.
• If you are pregnant, breastfeeding, under 18, or managing a medical condition, seek qualified professional care rather than relying on this Service.

If you believe you are having a medical emergency, call your local emergency number immediately.

You have the following rights over the data you've entrusted to us:

• Access & export. You can view every entry inside the app and download your dosage history, nutrition log, and combined health report as PDF or CSV at any time from the History and Nutrition pages.
• Correction. You can edit your name, handle, timezone, avatar, and every logged shot, meal, weight, or vial directly in the app. If you spot something we can't edit ourselves, email support@theaminoexchange.com.
• Deletion. You can delete individual entries with a 10-second Undo safety net. To delete your entire account and every associated record, email support@theaminoexchange.com from the address on file and we will honor the request within 30 days.
• Withdraw consent. You can turn off individual features (AI parsing, coaching, community, marketing emails) at any time from your Profile or unsubscribe links.
• Data portability. Our CSV exports are open-format and can be imported into any spreadsheet or health-tracking tool.

Depending on where you live, you may also have rights under GDPR (EU/UK), the CCPA/CPRA (California), or other privacy laws — including the right to object, restrict processing, or file a complaint with a regulator. Contact us and we will respond in accordance with the applicable law.

We keep your account data for as long as your account is active. If you delete your account we permanently delete your logs from our primary database within 30 days. Encrypted backups roll off within an additional 90 days. Aggregated, non-personal statistics (e.g. "500 users this month") may be retained indefinitely.

The Service is intended for adults 21 and older — signup requires an age attestation, and we do not knowingly collect data from anyone under 21. If you believe someone under 21 has created an account, please email us and we will delete it.

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top and — for material changes — email you or ask you to re-accept the updated terms next time you log in.

Privacy questions or data requests? Reach us at support@theaminoexchange.com. We aim to respond within 5 business days.