This explains what we collect, why, who can see it, and when it gets deleted. It is written to meet the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission.
Effective 1 September 2026 · Last updated 1 September 2026
peptide.com.ph is operated by Elio Inc., which is the personal information controller for everything described here. The site is powered by amino.ph.
Write to [email protected] with “Data privacy” in the subject line. We aim to acknowledge within five working days and to resolve requests within fifteen working days, or to tell you why we need longer.
peptide.com.ph is an educational reference tool. It explains peptides, does arithmetic on figures you enter, and produces a protocol you can save or export as an image. It is not medical advice, not a diagnosis and not a prescription, and using it does not create a doctor–patient relationship. Nothing here replaces a licensed clinician.
Your name, email address and a password. We never store the password itself — only an irreversible PBKDF2-SHA256 hash with a per-account random salt. Nobody at Elio Inc. can read or recover your password.
The questionnaire asks for your age, sex, height, weight, primary goal, current medications, supplements, known allergies, peptide history and safety screening answers, which include a question about pregnancy. Under the Data Privacy Act these are sensitive personal information.
By default these answers never leave your device. They are held in your browser's local storage so a refresh does not lose your progress, and they are cleared when you sign out.
They are only written to our database if you tick the consent box at sign-up. That box is unticked by default. Ticking it is your consent under Section 13(a) of the Act, and you can withdraw it at any time from History → Your data, which also deletes what was stored under it.
When you complete the calculator while signed in, the resulting protocol — peptide, vial strength, dose, frequency, draw volume, reconstitution and discard dates — is saved to your account so you can find it again. This is saved whether or not you ticked the health consent box, because it is the output you asked the tool to produce.
If you use the Suggest box, we store what you wrote, the topic you picked and the email address on your account, so we can act on it and follow up.
Our servers see your IP address in order to rate-limit sign-ups and logins against abuse.
We store a short-lived counter derived from it — never a log of your browsing. A session
cookie named pep_session holds a random token that identifies your signed-in
session. It is strictly necessary for the site to work, so there is no cookie banner to
dismiss.
We run no analytics, no advertising and no third-party trackers. We do not profile you, and no automated decision-making produces legal or similarly significant effects on you.
| Information | Purpose | Legal basis (RA 10173) |
|---|---|---|
| Account | To create your account, sign you in and keep your protocols with you | Necessary for a service you asked for — Sec. 12(b) |
| Health answers | To tailor the protocol and carry it between your devices | Your explicit consent — Sec. 13(a) |
| Saved protocols | To show you your history | Necessary for a service you asked for — Sec. 12(b) |
| Suggestions | To read, act on and reply to your feedback | Your consent — Sec. 12(a) |
| IP-based rate limit | To stop automated abuse of sign-up and login | Legitimate interest in security — Sec. 12(f) |
We keep personal information only as long as the purpose it was collected for requires, then delete it. These are the periods we actually apply.
| What | How long | Then |
|---|---|---|
| Account | While the account is in use, and for 24 months after your last sign-in | Deleted |
| Health answers | While consent stands, and no longer than the account | Deleted the moment consent is withdrawn, and on account deletion |
| Saved protocols | Until you delete them, or the account is deleted | Deleted |
| Suggestions | Up to 24 months | Deleted. If you delete your account first, your email is stripped from the suggestion immediately and the text is kept anonymously |
| Session cookie | 30 days, or until you sign out | Expired and removed from our database |
| Rate-limit counters | Up to 1 hour | Overwritten |
| Health answers on your device | Until you sign out or clear your browser | Cleared |
Deletion means removal from the live database. Encrypted infrastructure backups may hold a copy for a short period afterwards before they are cycled out; nothing is restored from them except to recover from a failure.
We do not sell your personal information, and we do not share it for advertising. We do not disclose it to anyone except:
Nobody else. No partner, no advertiser, no data broker.
No system is perfectly secure. If a breach occurs that is likely to put your rights at serious risk, we will notify you and the National Privacy Commission within 72 hours of becoming aware of it, as the Act requires.
Under the Data Privacy Act you have the right to:
Your heirs or assigns may exercise these rights on your behalf after your death or incapacity. To exercise any of them, email [email protected].
You can lodge a complaint with the National Privacy Commission:
25th–27th Floors, The Upper Class Tower, Quezon Avenue corner Scout Reyes Street,
Quezon City
(+63) 2 5322 1322 · privacy.gov.ph
Check privacy.gov.ph for their current complaint channel and forms before filing.
This site is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has created an account, email [email protected] and we will delete it.
If we change how we handle your information we will update this page and move the “last updated” date. Where a change materially affects how we use data you have already given us, we will tell you in the app or by email before it takes effect, and where the law requires it we will ask for your consent again.
Elio Inc. · [email protected]
Questions, corrections, access requests and complaints all go to the same address.