Privacy Policy

Last updated: October 2026

1. Who is responsible

The data controller is Niklas Almstedt, sole trader, Sweden, trading as Almstedt Studio. Contact: [email protected]. This policy covers the Protokit apps for iOS and Android and Protokit on the web.

2. What we collect

• Records you enter yourself – peptides, logged doses, schedules, cycles, inventory, injection sites and notes, with their dates.
• Account details – your e-mail address if you create an account. Passwords are handled by Google Firebase Authentication; we never see or store them.
• An anonymous identifier – used to store your data before you create an account (apps only).
• Purchase status – whether you have Protokit Pro, and the store or reseller it was bought through.

We do not collect your name, phone number or location, and we do not use advertising trackers.

3. Why we use it

To provide the Service you asked for: storing and syncing your records between devices, and unlocking Pro (legal basis: performance of a contract). To meet legal obligations such as bookkeeping (legal basis: legal obligation).

4. Where it is stored

Your records are stored in Google Firebase Firestore in the EU (europe-west1) and encrypted in transit.

5. Service providers

• Google Firebase – authentication and database.
• RevenueCat – manages which account has Pro, across the App Store, Google Play and the web. Receives an identifier derived from your account (a one-way hash of your e-mail), not your records.
• Paddle.com – our reseller and Merchant of Record for web purchases. Paddle collects the name, e-mail, payment and billing details needed to process your payment, as an independent controller under Paddle's privacy policy. We never see your card details.
• Apple / Google – for purchases made in the apps, under their own privacy policies.
• Cloudflare – hosts protokit.net.

We do not sell your data or share it with anyone else.

6. Cookies and browser storage

Protokit on the web uses your browser's local storage to keep you signed in and remember settings. We do not use advertising or tracking cookies. Paddle's checkout may set cookies needed to complete a payment.

7. Reminders

Dose reminders in the apps are scheduled locally by iOS or Android. Their content is not sent to us.

8. Keeping and deleting data

We keep your data while your account is active. You can delete individual entries in the app, or delete your whole account under Settings → Account → Delete Account. You can also e-mail us from your account's address with the subject "Delete My Account"; we complete it within 30 days. Deletion removes your account, e-mail, records and settings. Purchase records may be kept by Apple, Google, Paddle or us where the law requires it (for example bookkeeping).

9. Your rights

Under the GDPR you can request access to, correction of, export of, or deletion of your personal data, and object to or restrict its processing. Contact us at [email protected]. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

10. Age

Protokit is intended for users aged 18 and over. We do not knowingly collect data from children.

11. Not medical advice

Protokit is a personal tracking tool. It does not provide medical advice, diagnosis or treatment.

12. Changes

Updates to this policy are published on this page with a new date.