Privacy Policy
Introduction
Injectables AI, LLC (“Injectables AI”, “we”, “our”, “us”) operates the Injectables AI website and the Injectables AI mobile application (together, the “Services”). This Privacy Policy explains how we collect, use, share, and protect personal information.
Controller: Injectables AI, LLC, Delaware, United States.
Contact: privacy@injectablesai.app.
Injectables AI is a personal medications companion for compounded peptide identification and protocol tracking. AI label reads and dose suggestions are informational aids for you. They are not medical advice, dispensing decisions, coverage determinations, or clinical diagnoses.
Injectables AI is not a HIPAA covered entity. HIPAA’s legal duties apply to health plans, health care providers, health care clearinghouses, and their business associates. A personal medications companion tool is not one of those. That means HIPAA’s specific patient rights and covered-entity obligations do not apply to Injectables AI the way they do with your clinician or pharmacy — even while we still design for strong privacy and never sell your personal data.
What Information We Collect
Website waitlist
- First name and email address — when you join the pre-launch waitlist, after you confirm your email.
- Consent flag — that you agreed to this Privacy Policy and to being contacted about Injectables AI.
- Timestamp — when your signup was confirmed.
- Abuse-prevention signals — Google reCAPTCHA v3 score and related technical signals used to reduce automated abuse of the form.
App medication and protocol data
When you use the Injectables AI app, we may process:
- Vial or label photos — images you capture so we can read compounding labels.
- AI identification results — peptide name, strength, diluent, concentration, lot or expiration text, and similar fields extracted from the label.
- Prescribed dose and protocol details — information you confirm for tracking (for example dose amount and schedule).
- Injection logs — date and time, dose administered, and injection body site.
- Reminders and vial timing — schedules and countdowns you set for administration or reconstituted-vial freshness.
- Export history — administration summaries you choose to generate or share with your prescriber.
Automatic technical data
- Essential technical data needed to deliver the website (see our Cookies page).
- Standard server request logs on our hosting provider (for example IP address, user agent, and request path) used for security and reliability.
We do not use advertising pixels or third-party analytics SDKs on the website or in the app as described in this policy.
How We Use Your Information
Where the GDPR or UK GDPR applies, we rely on the following bases:
- Contract (Art. 6(1)(b)) — operating the waitlist, delivering the app’s tracking features, and providing related support.
- Consent (Art. 6(1)(a)) — processing vial or label photos and sending them to Google Gemini for identification; contacting you about Injectables AI after waitlist signup. You can withdraw waitlist consent by emailing us; withdrawal does not affect prior lawful processing.
- Legitimate interests (Art. 6(1)(f)) — security, abuse prevention (including reCAPTCHA), and product reliability. We balance these interests against your rights.
- Legal obligation (Art. 6(1)(c)) — when we must retain or disclose information to comply with law.
We use Google Gemini to read vial and label photos and return structured identification text. Injectables AI does not train its own AI models on your data. Our use of the Gemini API is subject to Google’s terms; we configure and contract for API use consistent with not using your customer content to train Google’s foundation models where those options are available.
For more detail on AI-generated content, see our AI transparency page.
Who We Share Information With
We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising. We use processors that help us run the Services:
- Google Cloud Run — hosting the website (United States).
- Google Sheets — storing confirmed waitlist signups.
- Google reCAPTCHA — abuse prevention on the waitlist form.
- Google Fonts — font delivery for the website.
- Google Gemini — vial and label photo identification in the app.
- Resend — transactional email (waitlist confirmation and related notices).
We may disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction, subject to appropriate safeguards.
Washington and Nevada consumer health data
Medication identity, dose, injection-site logs, and similar protocol information may be “consumer health data” under Washington’s My Health My Data Act and related Nevada law. Our separate Washington Consumer Health Data Privacy Policy describes that collection for Washington consumers. Nevada consumers may contact privacy@injectablesai.app to exercise applicable consumer-health rights under Nevada law.
International transfers
We process and store Service data in the United States. If you are in the EEA, UK, or Switzerland, transferring personal data to the U.S. requires an appropriate safeguard under GDPR Chapter V (for example the EU–U.S. Data Privacy Framework for certified recipients, and/or Standard Contractual Clauses with our processors, plus a transfer impact assessment where required). Contact privacy@injectablesai.app for our current transfer documentation.
Retention
- Waitlist records are kept while the waitlist is active so we can invite you and respond to requests, unless you ask us to delete them sooner.
- App medication photos, identification results, and logs are kept while you use the app features that depend on them, or until you delete that content or request deletion.
- When you request deletion, we erase associated personal data subject to short technical backups and any legal retention duties.
Your rights
Depending on where you live (including Delaware, Washington, Nevada, GDPR/UK GDPR, and similar laws), you may have rights to:
- Access a copy of your personal data
- Correct inaccurate data
- Delete personal data
- Export / portability of data you provided
- Restrict or object to certain processing
- Withdraw consent where processing is consent-based
- Opt out of sale/share (we do not sell or share for advertising) and of certain profiling for decisions with legal effects (we do not use AI for clinical, hiring, or coverage decisions)
- Not be discriminated against for exercising privacy rights
How to exercise: email privacy@injectablesai.app. We aim to respond within one month (or sooner where state law requires).
Children
The Services are for adults. You must be at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information, contact us and we will delete it.
Security
- TLS encryption in transit
- Encryption at rest provided by our hosting and storage providers’ defaults
- Access controls for administrative accounts
No method of transmission or storage is perfectly secure.
Emails
We send transactional mail (waitlist confirmation and service-related notices). After you join the waitlist, we may also send launch and product updates about Injectables AI. You can ask us to stop marketing-style updates by emailing privacy@injectablesai.app.
Changes
We may update this policy. We will change the Effective Date above when we do. Continued use after an update means you acknowledge the revised policy where permitted by law; for material changes that require consent, we will ask again where appropriate.
Contact
- Email: privacy@injectablesai.app
- Postal: Injectables AI, LLC, Delaware, United States