Monarch Prime Pin Privacy Policy

Monarch Prime Pin
Effective Date: June 5, 2026
Last Updated: June 5, 2026

-----

1. Introduction

This Privacy Policy describes how Monarch Prime Pin (“the App”, “we”, “us”, or “our”) collects, uses, and protects information when you use our mobile application. By using the App, you agree to the practices described in this policy.

The App is a research tracking tool intended SOLELY for laboratory research use. The App is not intended to facilitate or support human consumption of any compound referenced within it. See the in-app Legal disclaimer for full terms.

-----
2. Information We Collect

2.1 Information You Provide

When you create an account or use the App, we may collect:

Account information: Email address, display name, and password (passwords are never stored in plain text)
Research log data: Injection records you create, including peptide name, dosage, date, time, site, severity ratings, weight, notes, and optional photo attachments
Subscription information: If you subscribe to Prime AI+ in the future, payment processing is handled by Apple App Store or Google Play; we do not store your payment information

2.2 Information Collected Automatically

Device information: Device model, operating system version, app version, and crash reports (used solely to fix bugs)
Usage data: General usage patterns (e.g., features used, sessions per week), used solely to improve the App. We do NOT track which specific peptides or doses you log for analytics purposes.

2.3 Information We Do NOT Collect

We do not collect, sell, or share:

Your specific research data with third parties for marketing or advertising
- Your location (unless you explicitly grant permission for a future feature)
- Your contacts, calendar, or other personal data outside the App

3. How We Use Your Information

We use the information we collect to:

1. Provide and maintain the App’s functionality
1. Sync your research data across your devices (only if you enable cloud sync)
1. Authenticate you when you sign in
1. Send notifications you’ve opted into (injection reminders, weekly summaries, etc.)
1. Respond to your support requests
1. Detect and prevent fraud, abuse, or security incidents
1. Comply with legal obligations

We do NOT use your information for:

- Personalized advertising
- Selling to third parties
- Building user profiles for resale
- Training AI models on your personal research data

4. Data Storage and Security

4.1 Local Storage

By default, all your research data is stored locally on your device using secure storage APIs provided by iOS and Android. This data is not transmitted to our servers unless you explicitly enable cloud sync.

4.2 Cloud Storage (Optional)

If you enable cloud sync, your data is stored on our cloud infrastructure provided by Supabase, Inc., which uses industry-standard encryption in transit (TLS) and at rest (AES-256). Supabase serves as our data processor under their privacy and security policies.

4.3 Photo Attachments

If you attach progress photos to injection logs:

Local mode: Photos remain on your device only
Cloud sync mode: Photos are uploaded to a private storage bucket associated with your account; only you can access them

4.4 Data Retention

We retain your data as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days, except where retention is required by law.

5. Permissions Requested

The App requests the following device permissions, all of which are optional:

Photo Library: To attach progress photos to injection logs
Camera: To capture progress photos for injection logs
Notifications: To send injection reminders and weekly summaries (only if you enable them)

You can revoke any of these permissions at any time in your device settings without affecting the App’s core functionality.

6. Third-Party Services

The App uses the following third-party services:

Supabase, Inc. — Cloud database and authentication (when cloud sync is enabled). [supabase.com/privacy](https://supabase.com/privacy)
Apple App Store Services — App distribution, in-app purchases, and Apple Sign In (iOS only). [apple.com/legal/privacy](https://www.apple.com/legal/privacy/)
Google Play Services— App distribution, in-app purchases, and Google Sign In (Android only). [policies.google.com/privacy](https://policies.google.com/privacy)
Expo Application Services — Crash reporting and analytics. [expo.dev/privacy](https://expo.dev/privacy)

We do not share your data with any other third parties.

7. Children’s Privacy

The App is not intended for users under 17 years of age. We do not knowingly collect data from children. If you believe a child under 17 has provided us with personal information, please contact us at the email below and we will delete it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your data (also available in-app via Settings → Delete Account)
- Export your data in a portable format (Settings → Export CSV / PDF)
- Object to processing of your personal data
- Withdraw consent for processing where we rely on consent

For California residents (CCPA/CPRA): You have the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

For European residents (GDPR): Our legal basis for processing is your consent and the performance of our contract with you. You may lodge complaints with your local data protection authority.

To exercise any of these rights, contact us at the email address below.

9. Data Breach Notification

In the unlikely event of a data breach involving your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in compliance with applicable laws.

10. International Data Transfers

If you use the App outside of United States, your data may be transferred to and processed in United States or other countries where our service providers operate. We use Standard Contractual Clauses or equivalent safeguards to protect your data during international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the App or by email at least 30 days before the changes take effect. Continued use of the App after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Email: support@revivalfitnessathletics.com
**Mailing Address: Revival Fitness Athletics LLC, 2059 West 11th Street, Brooklyn, NY 11223

13. Important Research-Use Disclaimer

Monarch Prime Pin is a research data logging tool only. The compounds referenced in the App are NOT approved for human consumption by the FDA, EMA, or any regulatory authority. The App does not constitute medical advice, diagnosis, or treatment recommendations. Use of the App is at your own risk and you accept full legal and ethical responsibility for your research activities.

If you are experiencing a medical emergency, contact emergency services immediately.

*This privacy policy is provided as a template and does not constitute legal advice. We recommend consulting with a qualified attorney to ensure compliance with all applicable laws in your jurisdiction.*