Terms of Service & Privacy Policy

Effective date: 11 May 2026 · Last updated: 11 May 2026

Terms of Service

1. Acceptance of these Terms

These Terms of Service (the "Terms") form a legally binding agreement between you ("you", "your") and Viktor Maric, an individual operating in Hungary ("we", "us", "our"). They govern your access to and use of the Pep iOS application and any related services we make available (together, the "App").

By downloading, installing, or using the App, you confirm that you have read, understood, and accept these Terms in full. If you do not accept them, you must not install or use the App. Apple's standard Licensed Application End User License Agreement also applies to your use of the App, and you accept it as a condition of installing the App.

2. Eligibility

You may only use the App if you are at least the age of legal majority in your jurisdiction (in most places, 18). The App is not directed at children and is not intended for use by anyone under 13. By using the App, you represent that you meet these requirements.

3. License to use

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to install and use one copy of the App on devices you own or control, solely for your personal, non-commercial use.

You must not, and must not allow any third party to:

• copy, modify, distribute, sell, sublicense, or lease the App or any part of it;
• reverse-engineer, decompile, or attempt to derive the source code of the App, except where permitted by mandatory applicable law;
• use the App in a way that violates any applicable law or regulation;
• use the App to develop or train a competing product;
• remove or alter any proprietary notices on the App.

All rights not expressly granted to you in these Terms are reserved by us.

4. Nature of the App

The App is an organizational logbook. Its sole purpose is to let you manually record entries that you choose to record. The App stores what you type. It does not interpret it.

Specifically:

• The App does not calculate dilutions, reconstitutions, or volumes.
• The App does not recommend any dose, schedule, route of administration, compound, or protocol.
• The App does not assess the safety, efficacy, legality, purity, or appropriateness of any substance.
• Any half-life value, decay estimate, or numerical projection shown in the App is an educational illustration derived from variables you yourself enter. It is not a medical opinion, prediction, or guidance.

5. No medical advice

The App is not a medical device within the meaning of Regulation (EU) 2017/745 (MDR), the U.S. Food, Drug, and Cosmetic Act, or any equivalent regulation. It is not intended to diagnose, treat, cure, prevent, or mitigate any disease or condition.

Nothing in the App constitutes medical, pharmaceutical, legal, or professional advice of any kind. You should never:

• start, stop, increase, decrease, or alter any medication, peptide, supplement, or therapy based on what the App shows you;
• rely on the App in any medical emergency. If you are experiencing a medical emergency, contact your local emergency services immediately;
• treat the App as a substitute for consultation with a qualified healthcare professional.

You acknowledge that you have full and exclusive responsibility for any decision you make about your own health, including any decision to use, possess, store, or administer any substance you choose to log in the App.

6. User-generated content

Any data you enter into the App — compound names, doses, units, injection sites, notes, memos, photos of vials, or anything else (your "Content") — remains yours. We claim no ownership of your Content.

Your Content is stored on your device and, if you enable iCloud Sync, in your private Apple iCloud container under your own Apple ID. We do not have access to that data. We cannot read, recover, or restore it.

You are solely responsible for your Content and for any consequences of recording it. You must not enter data that violates applicable law, infringes third-party rights, or is unlawful in your jurisdiction.

7. Acceptable use

You agree that you will not use the App:

• to log or facilitate the use of substances whose possession or use is illegal where you live;
• in any way that is harmful, fraudulent, deceptive, or interferes with any other person's use of the App;
• to attempt to gain unauthorized access to any system, account, or data of ours or of any third party;
• to circumvent any security feature of the App or the iOS platform.

You are responsible for verifying that your use of the App is lawful in your country, state, or other jurisdiction. The availability of the App in your local App Store does not constitute a representation that your local laws permit any specific substance, route of administration, or use.

8. Third-party services

The App relies on Apple's iOS platform, including iCloud sync (provided by Apple Inc.), local biometric authentication (Face ID / Touch ID), and the App Store. Apple's terms and privacy policies apply to those services and are outside our control.

The App uses Mixpanel as an anonymous analytics provider. Mixpanel receives only the events and properties described in the Privacy Policy below, with no personally identifying information attached. Mixpanel's privacy policy governs its handling of that information.

9. Disclaimers

To the maximum extent permitted by applicable law, the App is provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise. We expressly disclaim all warranties of merchantability, fitness for a particular purpose, accuracy, reliability, non-infringement, and any warranties arising from course of dealing or course of performance.

We do not warrant that the App will be uninterrupted, error-free, or free of harmful components, or that any data you enter will be preserved, transmitted, or recoverable.

You use the App entirely at your own risk.

10. Limitation of liability

To the maximum extent permitted by applicable law, in no event will we (Viktor Maric, our representatives, contractors, or affiliates) be liable for:

• any indirect, incidental, special, consequential, exemplary, or punitive damages;
• any loss of profits, revenue, goodwill, data, or business opportunity;
• any damages arising from your use of, or inability to use, the App;
• any damages arising from any decision you make about your own health, the substances you choose to use, or the doses you choose to administer, based on or in connection with the App;
• any damages arising from acts of any third party (including Apple, Mixpanel, or any retailer or supplier of any substance you choose to log).

Our aggregate liability to you, for any claim arising out of or relating to the App or these Terms, will not exceed the greater of (a) the total amount you have paid us for the App in the 12 months preceding the claim (which, for a free app, is zero), and (b) EUR 50.

Nothing in these Terms excludes or limits any liability that cannot lawfully be excluded or limited under Hungarian law or under the consumer-protection laws of your country of residence, including liability for death or personal injury caused by negligence or for fraud.

11. Indemnification

To the maximum extent permitted by applicable law, you agree to indemnify, defend, and hold harmless Viktor Maric from and against any claim, loss, liability, demand, damage, cost, or expense (including reasonable legal fees) arising out of or relating to: (a) your Content; (b) your use or misuse of the App; (c) your violation of these Terms; or (d) your violation of any law or third-party right.

12. Termination

These Terms remain in force as long as you use the App. You may end them at any time by uninstalling the App. We may suspend or terminate your access to the App, or stop offering the App altogether, at any time, with or without notice, if we reasonably believe you have violated these Terms or if continuing to offer the App becomes impractical for legal, technical, or commercial reasons.

The provisions of these Terms which by their nature should survive termination (including license restrictions, disclaimers, limitation of liability, indemnification, governing law, and these survival provisions) will survive.

13. Changes to the Terms or the App

We may update these Terms from time to time. If we make a material change, we will update the "Last updated" date above and, where reasonable, notify you in-app or by other appropriate means. Your continued use of the App after the change becomes effective constitutes acceptance of the updated Terms.

We may also modify, suspend, or discontinue the App or any part of it at any time, with or without notice.

14. Governing law & dispute resolution

These Terms are governed by the laws of Hungary, without regard to its conflict-of-laws principles. The courts of Hungary will have exclusive jurisdiction over any dispute arising from or relating to these Terms or the App, except where mandatory applicable consumer-protection law grants you the right to bring an action in the courts of your country of residence.

If you are a consumer resident in the European Union, you may also use the EU online dispute-resolution platform at ec.europa.eu/consumers/odr.

Privacy Policy

This Privacy Policy describes how we handle information in connection with the App. It is written to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Hungarian data-protection law. Where this Policy and the Terms appear to conflict on a privacy point, this Policy prevails.

A. Who we are (the data controller)

The data controller for the limited information processed in connection with the App is:

Viktor Maric (private individual, Hungary)
Contact: contact@viktormaric.com

For privacy-related questions, requests, or complaints, please use the email address above. We aim to respond within 30 days, as required by the GDPR.

B. What we collect

We process the following limited categories of information:

B.1 Anonymous product analytics

Through our analytics provider Mixpanel, we collect anonymous, aggregate, mechanical events about how the App is being used:

• app_opened — the app was launched.
• onboarding_started, onboarding_finished — onboarding flow milestones. The finish event includes the user's chosen biological-sex preference (male/female) and default unit (mg/mcg/IU/units) so we can understand which body-map layout to invest in. These two properties are not personally identifying.
• rating_prompt_answered — a non-content signal that the rating screen was shown.
• compound_logged — a log entry was saved. The event carries only: is_preset_compound (true/false), unit_type (mg/mcg/IU/units), and has_site_attached (true/false). The compound name, dosage amount, body site, and any note are never sent.
• site_rotation_saved — the app's site-rotation suggestion was accepted. No site is sent.
• export_button_tapped — the user tapped Export. No exported content is transmitted.
• app_lock_toggled — the user changed the biometric-lock preference (true/false).
• custom_compound_created — a custom compound was added. No compound details are sent.

Mixpanel may automatically collect technical context such as device model, OS version, app version, and a randomly generated anonymous installation identifier so it can deduplicate events. We do not link this identifier to any personally identifying information.

B.2 Crash and diagnostic reports (Apple)

If you have opted in to share App Analytics with developers in your device's iOS Settings, Apple may send us aggregated, anonymized crash logs and performance data. This data is provided to us by Apple under Apple's own privacy terms.

B.3 App content you create

Compound entries, log entries, notes, memos, body-site selections, vial dates, and all other data you create in the App are stored:

• locally on your device, in the App's private sandbox; and
• if you keep iCloud Sync enabled, in your personal iCloud database, under your own Apple ID, in Apple's CloudKit infrastructure.

This content is not visible to us at any point. We have no server-side database, no admin console, and no technical means to read it. We cannot recover it for you if you lose it.

C. What we don't collect

We never collect, transmit, or have access to:

• compound names you log;
• dosage amounts;
• injection sites you select;
• protocol memos or notes;
• vial opened dates or freshness data;
• your name, email address, phone number, or any contact information (we don't ask);
• your location;
• your contacts, calendar, photos, microphone, or other device sensors (we don't request access);
• any advertising identifier — we do not show or serve ads.

D. Legal basis under GDPR

For the anonymous analytics described in B.1, our legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in understanding whether the App is working, identifying crashes, and improving usability. Because the analytics are anonymized at source and cannot be tied to you as an individual, the privacy risk is minimal. You may opt out at any time by uninstalling the App or disabling network access for the App in iOS Settings.

For App Store delivery, your purchase or download is processed by Apple under Apple's own contractual and legal basis.

Where you provide content to the App (the compound data, log entries, and notes you create), no processing by us takes place, because that content does not leave your device or your iCloud account.

E. Storage & international transfers

Mixpanel processes analytics events on infrastructure operated in the United States and the European Union. Where data is transferred outside the European Economic Area, Mixpanel relies on the European Commission's standard contractual clauses to provide an adequate level of protection.

Apple processes iCloud data globally according to its own infrastructure and terms. We have no contractual relationship with Apple regarding your iCloud content other than as a developer of an app that you choose to install.

F. Analytics in detail

You can read the full set of analytics events the App emits in section B.1 above. Each event is a single message with a string event name and at most two or three short boolean / categorical properties. No free-text or numeric content from your logs is ever included.

If you would like analytics to be disabled entirely, the simplest mitigation today is to turn off network access for the App in iOS Settings ▸ Pep ▸ Cellular Data and Wi-Fi. We are evaluating an in-app opt-out toggle for a future version.

G. Your rights under GDPR

If you are in the EU, UK, or another jurisdiction with similar laws, you have the following rights with respect to your personal data:

• Right of access (Art. 15): to ask whether we hold personal data about you, and to receive a copy.
• Right to rectification (Art. 16): to ask us to correct inaccurate personal data.
• Right to erasure (Art. 17): to ask us to delete personal data we hold about you.
• Right to restrict processing (Art. 18).
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): to object to processing based on legitimate interest, including profiling.
• Right to lodge a complaint with the Hungarian Data Protection Authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH) at naih.hu, or the supervisory authority of your usual residence.

In practice, because we collect only anonymous analytics with no link to you as an individual, we are typically unable to locate "your" data in our analytics records. If you contact us with a request and can provide enough information for us to attempt to identify any data, we will do our best to help, but the GDPR does not require us to re-identify anonymous data solely to comply with a request.

For data stored in your private iCloud, you exercise your rights directly through Apple and your device: delete the App and the data is removed; delete the iCloud container or use "Erase All Content and Settings" to wipe all of it.

H. Retention

Anonymous analytics events are retained by Mixpanel for the period defined in our Mixpanel data-retention configuration (currently up to 24 months) and then automatically purged. We do not retain raw analytics ourselves.

Data in your iCloud is retained by Apple for as long as you keep your iCloud account active and the relevant container present. We have no role in setting that retention period.

I. Children

The App is not intended for, marketed to, or directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect any data about children. If you are a parent or guardian and you believe your child has somehow provided data through the App, please contact us and we will work in good faith to investigate and address it.

J. Changes to this Policy

We may update this Privacy Policy from time to time. If we make a material change in how we handle personal data, we will update the "Last updated" date and, where reasonable, notify you in-app.

Contact

For any question relating to these Terms or this Privacy Policy, or to exercise any of your rights, contact:

Viktor Maric
contact@viktormaric.com

We aim to respond to all reasonable enquiries within 30 days.