Privacy Policy

Last updated: October 27, 2026

This Privacy Policy explains how Ikigai Software Development LLC ("we," "us," or "our") handles information in connection with the Caliper mobile application ("Caliper" or the "App"), available on the Apple App Store (iOS) and Google Play (Android).

Caliper is a tool for organizing your own medication and peptide-protocol data. We built it to be private by design: we don't sell your data, we don't show you ads, and we never use your health or protocol data for advertising. So that you don't lose your data and can move between devices, the App also backs up the information you enter to servers we operate. This policy explains what we store, why, and how you can delete it. By using Caliper, you agree to the practices described here.

Caliper is intended only for adults aged 18 or older.

The short version

The health and protocol data you enter — the compounds you track, doses you log, schedules, weights, symptoms, inventory, and notes — is stored on your device and backed up to servers we operate so you don't lose it and can continue on another device. We do not sell it, and we never share it with advertisers or analytics providers.
Progress photos are the exception: they stay only on your device and are never uploaded to us or anyone else.
You sign in with Sign in with Apple (iOS) or Sign in with Google (Android). Our account service stores your email, your name (if the provider shares it), a user identifier, and session tokens.
To process your subscription, a limited amount of non-health information (such as an app-specific identifier and your subscription status) is handled by Apple (App Store, iOS) or Google (Google Play, Android) and by our paywall provider, Superwall.
We use PostHog for product analytics on our onboarding and paywall flows. PostHog never receives your health or protocol data.
On our blog and tool pages, PostHog records that a page was viewed, how far down it was scrolled (25%, 50%, 75%, 100%), whether the interactive tools (reconstitution calculator, units converter, COA checklist) were viewed or used, a general outcome label (for example, whether a calculation completed or which checklist stage was reached), and whether their buttons were clicked. A call-to-action in a blog post is recorded with the post, whether the button was in the middle of the post or at the end, and the button's label. When you follow a link from our blog to sign up that carries campaign tags, those tags (which page and which button you came from) stay attached through checkout. PostHog never receives the answers or numbers you enter, or the results you calculate.
The reconstitution calculator saves your last setup in your own browser's storage so it's there when you return, and puts it in the page's web address so you can copy a link to the same setup. Those numbers stay in your browser unless you share that link; we remove them from page addresses before any analytics are sent, and the calculator's Clear button deletes the saved setup.
If you reach our website through a creator or affiliate link, we use Refersion to credit that partner. Refersion receives a referral identifier and, if you subscribe on the web, details of that purchase — never your health or protocol data.
We use YouTube API Services for YouTube channels that Caliper owns, through a scheduler we operate at post.getcaliper.app. We upload videos to those channels with the YouTube Data API and read those channels' own statistics with the YouTube Analytics API. We do not access your YouTube account. OAuth tokens, channel information, video metadata, and analytics are stored encrypted on our server, are not sold or shared with third parties, and are deleted within 30 days if that access is revoked or if you ask us at support@getcaliper.app.
You can delete your synced backup and/or your entire account at any time — in the App or from our account and data deletion page.

The rest of this policy explains the details.

Information you enter

When you use Caliper, you enter information so the App can organize it for you. This may include:

Compounds or medications you choose to track, and their form (pen or vial)
Doses you log, dose amounts, and the dates and times of doses
Dosing schedules and reminders
Reconstitution details for vials (such as vial strength and diluent volume)
Inventory you record (vials and pens on hand, use-by information)
Weight entries and goal weights
Symptoms or side effects you choose to log
Other notes and preferences you enter

This information is stored in a database on your device and is backed up to servers we operate, as described in Cloud backup below.

Progress photos you add are handled differently: they are stored only on your device and are never uploaded to our servers or to any third party.

Cloud backup

So that you don't lose your data and can restore it or continue on another device, Caliper backs up the information you enter to a first-party server that we operate (under the getcaliper.app domain). This backup includes the health and protocol data listed above — your compounds, dose logs, schedules, reconstitution details, inventory, weights, symptoms and side effects, notes, and preferences.

We use this backup only to provide the backup, restore, and cross-device continuity features of the App. We do not sell it, and we do not share your health or protocol data with advertisers, analytics providers, or any other third party. As noted above, progress photos are not included in this backup.

You can delete your backed-up data at any time — see Data retention and deletion.

Your account and sign-in

Caliper accounts are created with Sign in with Apple (on iOS) or Sign in with Google (on Android). There is no separate password.

When you sign in, our self-hosted authentication service (api.getcaliper.app) stores the information needed to maintain your account: your email address, your name if the provider shares it (with Sign in with Apple, your email may be a private relay address), a user identifier, and session tokens that keep you signed in. Apple's and Google's own handling of your information is governed by their respective privacy policies.

Analytics (PostHog)

We use PostHog (us.i.posthog.com), a third-party analytics provider, to understand how people move through our onboarding and paywall so we can improve them.

For those flows, PostHog receives:

A user or device identifier
Product-interaction events (for example, which onboarding steps and paywall screens you view and interact with)
Device and usage information
Approximate location derived from your IP address (GeoIP) — we do not collect precise location

PostHog does not receive your health or protocol data; that data is scrubbed out before events are sent. PostHog's handling of the information it receives is governed by PostHog's privacy policy. We use this only to measure and improve the App — not to advertise to you.

Subscriptions and payments

Caliper offers auto-renewing subscriptions, sold through the app stores:

On iOS, Apple processes your payment and manages your subscription through the App Store.
On Android, Google processes your payment and manages your subscription through Google Play.

We do not receive or store your payment card details. We use Superwall to display our subscription offers (the paywall) and to determine and manage your subscription status. To do this, Superwall processes a non-health, app-specific user identifier, your subscription and purchase status, a device identifier, and information about how you interact with the paywall and the App. Superwall's handling of this information is governed by Superwall's privacy policy. We use it only to operate and improve our subscription experience — not to advertise to you.

We do not use third-party advertising networks, we do not use a third-party crash-reporting SDK, and we do not share your health or protocol data with any analytics or advertising provider.

Affiliate and creator referrals (Refersion)

Some people find Caliper through a creator, partner, or affiliate link. So that we can credit the right partner, we use Refersion, a third-party referral-tracking provider. Refersion runs on our website only — it is not part of the App.

If you arrive from an affiliate link, Refersion stores a referral identifier in your browser. If you then subscribe on our website, Refersion receives:

The referral identifier from the link you arrived through
An identifier for the resulting subscription and the amount paid
A customer identifier from our payment processor

Refersion does not receive your health or protocol data, and it is not an advertising network — we use it only to pay partners who refer customers to us. Refersion's handling of this information is governed by Refersion's privacy policy.

If you would rather not be counted as a referral, visit our website directly instead of through an affiliate link.

YouTube API Services

Caliper uses YouTube API Services to publish videos and to read performance for YouTube channels that Caliper owns. This runs on a scheduler we operate at post.getcaliper.app, separate from the App. The scheduler does not connect to your YouTube account, and it does not receive your health or protocol data.

We use the YouTube Data API v3 to upload videos to those channels, and the YouTube Analytics API to read statistics for those same channels.

What we access and store. For each channel we connect, we access and store:

OAuth tokens that authorize the connection, and channel information (such as the channel name and identifier)
Video metadata for videos on that channel (such as title and description)
Analytics for that channel

We store this information encrypted on a server we operate.

How we use it. We use this information only for publishing videos to channels we own and for performance reporting on those channels.

Sharing. We do not sell this information, and we do not share it with third parties.

Use of YouTube API Services is subject to the YouTube Terms of Service. Google's handling of information is governed by the Google Privacy Policy (http://www.google.com/policies/privacy).

Revoking access. You can revoke Caliper's access to a Google account at any time on the Google security settings page (https://security.google.com/settings/security/permissions). Revoking access there stops the scheduler from using YouTube API Services for that account. You can also ask us to delete what we have stored, as described below.

Deletion. If that access is revoked, or if you ask us to delete it, we delete the OAuth tokens, channel information, video metadata, and analytics we have stored for that account within 30 days. To ask, email support@getcaliper.app. Deleting data we have stored does not delete videos or other data kept by YouTube. To remove those, use YouTube.

Questions or complaints about this practice can be sent to support@getcaliper.app.

Who handles your information

Provider	What they receive	Purpose
Apple (iOS) / Google (Android)	Sign-in identifiers; payment and subscription details (non-health)	App-store sign-in and billing
Superwall	App-specific identifier, device identifier, subscription/purchase status, paywall interactions (non-health)	Paywall and subscription management
PostHog	User/device identifier, product-interaction events, device/usage data, approximate location from IP (non-health)	Product analytics for onboarding and paywall
Refersion	Referral identifier from an affiliate link; web subscription identifier, amount, and payment-processor customer identifier (non-health)	Crediting creator and affiliate referrals (website only)
YouTube API Services (Google)	OAuth tokens and channel information, video metadata, and analytics for YouTube channels Caliper owns	Publishing to those channels and performance reporting, on `post.getcaliper.app`
Our own servers (`getcaliper.app`)	Your account and your backed-up health and protocol data; the YouTube data described above, stored encrypted	Account, backup, restore, and cross-device continuity; our own channel publishing and reporting

We do not sell your personal information, and we do not share your health or protocol data with advertisers.

How we use information

We use the information described above only to:

Provide the App's features and store the data you enter on your device
Back up your data and provide restore and cross-device continuity
Authenticate you and maintain your account
Process and manage your subscription and restore purchases
Measure and improve our onboarding and paywall (analytics)
Publish videos to YouTube channels we own, and report on those channels' performance
Maintain the security and proper functioning of the App
Respond to your support requests
Comply with legal obligations

We do not sell your personal information, and we do not use your health or protocol data for advertising.

Apple Health & Android Health Connect

Caliper can connect to Apple Health (iOS) and Health Connect (Android) so your health metrics stay consistent across your apps. This connection is optional and turned off until you choose to enable it, and you can allow individual metrics without allowing the others.

What we access. With your permission, Caliper accesses only the health metrics listed here — no other health or fitness data. You choose which to allow on Apple's and Android's own permission screens, and per metric you decide whether Caliper may read, write, or both (where Caliper offers both):

Weight — read and write. We read your existing weight entries so your full history and trends appear in Caliper, including weigh-ins from before you started using the app; and weigh-ins you record in Caliper, including ones you backdate, are written back to Apple Health / Health Connect so your records stay in sync.
Lifestyle metrics — read only. With your permission we import the following so they appear alongside your protocol in Caliper: calories consumed, water intake, steps, sleep, resting heart rate, heart rate variability (HRV), blood glucose, blood pressure, and lean body mass. We do not write these back.

Your control. You grant access through Apple's and Android's own system permission screens, and you decide which metrics Caliper may read or write. You can review or revoke this at any time in the Apple Health app (Sharing → Apps → Caliper) or in Health Connect (Settings → Apps & permissions). Turning it off stops Caliper from reading or writing immediately.

How we use it. This data is used only to power your tracking inside Caliper — your trends, charts, statistics, and history. It is handled exactly like data you enter in Caliper directly, including being stored in your cloud backup as described above, and Caliper never changes or removes anything in Apple Health / Health Connect beyond the entries it writes at your request.

What we never do. We never use Apple Health or Health Connect data for advertising or data mining, we never sell it, and we never share it with third parties or transmit it to analytics or ad tools. Your health data is not part of any advertising or analytics activity.

Caliper organizes and describes the data you track — it does not provide medical advice or recommend a dose, schedule, or outcome.

What Caliper is not

Caliper organizes and describes information you choose to enter. It does not provide medical advice and does not recommend a dose, schedule, or outcome. Caliper is not a medical device and is not a substitute for professional medical care. Always consult a qualified healthcare provider for medical decisions. This section is included for clarity; it does not limit your rights under this policy.

Data retention and deletion

You control your data and can delete it at any time:

On your device: delete individual entries within the App, where supported, or delete the App from your device, which removes its local database and the data stored in it (including your progress photos).
Your cloud backup and account: use the in-app deletion option (Settings, also reachable from a link on the paywall) or our account and data deletion page — no sign-in required, and it works even if you no longer have the App installed. You can choose to delete your synced data only (which removes your cloud backup but keeps your account and sign-in) or to delete your account and all associated data (which removes both your cloud backup and your account). Account deletion is irreversible.
YouTube data we store for channels we own (OAuth tokens, channel information, video metadata, and analytics): deleted within 30 days after access is revoked on Google's security settings page, or after you ask us to delete it at support@getcaliper.app. See YouTube API Services.

Information held by Apple, Google, and Superwall in connection with your subscription is retained according to their respective policies. You can view, manage, or cancel your subscription at any time in the App Store (iOS) or Google Play (Android).

Your privacy rights

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act (as amended), including rights to access, correct, delete, or restrict the use of your personal information, and the right not to be discriminated against for exercising these rights.

You can exercise the most important of these rights directly — by viewing, editing, or deleting your data in the App, by deleting your cloud backup or account as described above, or by deleting the App. For other requests, or to ask a question about your rights, contact us at support@getcaliper.app. We will respond as required by applicable law.

Security

We protect your information using industry-standard measures, both on your device and in transit to and at rest on our servers. On your device, your data is also protected by your device's own security protections. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. Keeping your device updated and protected with a passcode or biometric lock helps protect your information.

Children's privacy

Caliper is intended for adults aged 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us at support@getcaliper.app.

International users

Caliper is operated from Austin, Texas, in the United States, and the servers we use may process and store information in the United States and other countries. If you use the App from outside the United States, be aware that information handled by us and by our third-party providers may be processed in countries with different data-protection laws.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the App after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Ikigai Software Development LLC
support@getcaliper.app