Effective date: September 8, 2026
Last updated: September 17, 2026
PEP YEAH (“PEP YEAH,” “we,” “us,” or “our”) is a protocol tracking app operated by Thamer Hannona under the Shake and Bake Labs brand. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the PEP YEAH mobile application and related sites including pepyeah.com (collectively, the “Service”).
This is not legal advice. If you need a lawyer-reviewed policy for your specific situation, have counsel review this policy before relying on it.
PEP YEAH helps you track and organize information you enter about protocols, doses, vials, schedules, body-map injection sites, reminders, nutrition, side effects, and related notes. Optional features may include an AI coach that summarizes your own records, push reminders, and photos you choose to upload (for example meal and label photos for nutrition features, and progress photos).
PEP YEAH does not prescribe medication, source compounds, diagnose conditions, or recommend dose changes. It is a personal tracking tool, not a medical device or substitute for professional care.
When you create or sign in to an account, we may collect:
Depending on what you use, this may include:
You control what you enter. Do not enter information you are not comfortable storing with us.
If you use photo features, we collect the images you choose to upload, which may include meal photos, nutrition label photos, and progress photos. Camera / photo library access is only used for those features and requires your permission on device.
If you subscribe (for example via Apple In-App Purchase or another payment provider), we receive purchase status, product identifiers, and transaction metadata needed to unlock features. Payment card details are processed by Apple or the payment provider — not stored by us on our servers as full card numbers.
Important: deleting the app does not automatically cancel an Apple subscription. Apple subscriptions are managed through your Apple ID settings.
On pepyeah.com we may collect standard web analytics (pages viewed, referrer, device/browser) and any information you submit through contact forms.
We use information to:
We do not use your protocol or health-related content to train public AI models for unrelated third parties, and we do not sell your personal information.
Pep Coach may process the records and messages you provide to generate summaries and pattern explanations.
We share information only as needed to run the Service:
We do not sell personal information.
We retain account and logged content while your account is active. If you delete your account or request deletion, we delete or anonymize personal data within a reasonable period, except where we must retain limited records for legal, security, accounting, or dispute reasons.
You may export certain records where the product provides export (for example CSV), subject to feature availability.
Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to / restrict certain processing.
In-app / account: use available profile or settings controls to update information, manage notifications, export reports (where available), or delete your account where offered.
By email: contact support@pepyeah.com with “Privacy Request” in the subject line.
Deleting the app: removing the app from your phone does not delete your account data by itself. Use the in-app delete option (if available) or email us.
Subscriptions: subscriptions purchased through Apple are managed and canceled in your Apple ID subscription settings.
You can also revoke OS permissions (camera, photos, notifications) in your device settings. That may limit features.
California / similar laws: we do not sell personal information. You may request know/delete/correct as applicable by emailing us.
EEA/UK users: we process data to provide the Service (contract), with consent where required (e.g. certain device permissions), and for legitimate interests such as security — balanced against your rights.
We use industry-standard safeguards appropriate to a consumer app (encryption in transit, access controls, authenticated accounts). No method of transmission or storage is 100% secure. Please use a strong unique password and protect your devices.
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided information, contact us and we will take appropriate steps to delete it.
Your information may be processed in the United States or other countries where we or our providers operate. Where required, we use appropriate transfer mechanisms.
The Service may link to third-party sites or services (for example educational content). Their privacy practices are their own. Review their policies before providing information.
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. Material changes may also be communicated in-app or by email when appropriate.
Questions or privacy requests:
Email: support@pepyeah.com
Web: pepyeah.com
When you fill App Privacy in App Store Connect, typical data types for PEP YEAH include (adjust to match final build):
Purpose examples: App Functionality, Analytics (if used). Mark not used for tracking unless you add advertising tracking SDKs.
Questions: support@pepyeah.com