Privacy Policy for STAKK Peptide Tracker

Last updated: 18 July 2026

This Privacy Policy explains how Trusted Brands UG (haftungsbeschränkt) processes personal data in connection with the STAKK Peptide Tracker mobile application for iOS, referred to below as the “App” or “STAKK”.

STAKK has been designed according to the principle of data minimisation. Peptide entries, schedules, dosage information, notes and other information entered into the App are stored locally on the user’s device. We do not operate a user account system or a cloud database for this information.

The only third-party tracking technology used in the App is the Meta SDK, which is used solely for advertising attribution and campaign performance measurement and only where the user has provided the required consent.

1. Controller

The controller responsible for processing personal data in connection with STAKK is:

Trusted Brands UG (haftungsbeschränkt)
Mühlensiek 9
32584 Löhne
Germany

Email: service@tbrands.de
Website: https://tbrands.de

Registered with the Local Court of Bad Oeynhausen under HRB 18770.

VAT identification number pursuant to Section 27a of the German VAT Act: DE360303903.

Authorised managing director:

Parvenu Holding UG (haftungsbeschränkt), represented by its Managing Director Dennis Steinmann, Mühlensiek 9, 32584 Löhne, Germany, registered with the Local Court of Bad Oeynhausen under HRB 18733.

2. Scope of this Privacy Policy

This Privacy Policy applies to the STAKK iOS application.

It does not govern the independent processing activities of Apple, Meta or other services that a user may access outside the App. Those companies provide their own privacy information and act independently for parts of their processing.

3. Information stored locally on your device

STAKK allows users to record and manage information such as:

Peptide names
Dosages
Injection or intake dates
Schedules and reminders
Inventory information
Personal notes
Progress information
Other information entered voluntarily into the App

This information may constitute health-related information. However, it is stored locally within the App on the user’s device.

We do not receive, access, upload, transmit, analyse or store this information on our servers.

In particular, this information is not transmitted to Meta.

Local information remains on the device until the user deletes individual entries, resets the App or deletes the App from the device. We have no technical ability to retrieve, restore or delete locally stored information remotely.

The security of locally stored information also depends on the security of the user’s device. Users should protect their device with an appropriate passcode, Face ID, Touch ID and current operating-system updates.

Depending on the user’s Apple device and backup settings, locally stored App information may be included in a device backup managed by Apple. We cannot access or control backups administered by Apple.

4. No user account or cloud profile

STAKK does not require users to create an account.

We do not collect or store through the App:

Names
Postal addresses
Email addresses
Telephone numbers
Usernames or passwords
Peptide records or dosage histories
Medical records
Photos
Contact lists
Precise location information
Payment card details

An exception applies when a user voluntarily contacts us, as explained in Section 10.

5. Meta advertising attribution and campaign measurement

5.1 Purpose

We use the Meta SDK for the limited purpose of understanding whether an installation or first use of STAKK resulted from an advertising campaign displayed through Meta services such as Facebook or Instagram.

This allows us to evaluate advertising campaign performance, compare campaigns and avoid spending advertising funds on ineffective campaigns.

We do not use the Meta SDK to analyse peptide usage, dosage information, schedules, health information, notes or other content entered into STAKK.

5.2 Events transmitted to Meta

Subject to the user’s consent and device settings, STAKK may transmit limited advertising measurement events such as:

Installation of the App
First launch or activation of the App
Date and time of the event
App version
Campaign, advertisement or attribution information
Technical confirmation that an attributable event occurred

We do not intentionally transmit custom event names, parameters or values that identify:

A peptide used by the user
A dosage or schedule
A medical condition
A treatment decision
A health objective
Notes entered into the App
Any other health-related activity

5.3 Technical information processed by Meta

Depending on the user’s consent, device configuration, iOS version and the technical operation of the Meta SDK, Meta may receive:

The Apple advertising identifier, known as the IDFA, where the user has authorised tracking
Other app or device identifiers permitted by Apple and applicable law
IP address
Device type and model
Operating-system version
App version
Language, country or time-zone information
Event date and time
Network and connection information
Advertising campaign and attribution information

Although we configure the Meta SDK for a narrow attribution purpose, Meta determines parts of the technical processing performed within its systems.

5.4 No transmission without consent

Where consent is legally required, the Meta SDK is not used for advertising tracking or attribution until the user has provided consent.

Users may refuse consent without losing access to STAKK’s peptide tracking functions.

On supported iOS versions, STAKK uses Apple’s App Tracking Transparency framework before accessing the device’s advertising identifier or performing tracking as defined by Apple.

If permission is denied, the advertising identifier is not made available to STAKK for tracking purposes and STAKK must not use alternative techniques to identify or fingerprint the device.

5.5 Legal basis

For users in the European Economic Area, the legal basis for advertising attribution processing is the user’s consent pursuant to:

Article 6(1)(a) of the General Data Protection Regulation
Section 25(1) of the German Telecommunications Digital Services Data Protection Act, where applicable

Consent is voluntary and may be withdrawn at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

5.6 Withdrawing tracking permission

Users can review or withdraw iOS tracking permission through:

iOS Settings → Privacy & Security → Tracking → STAKK

Users may also disable the general “Allow Apps to Request to Track” setting.

After tracking permission has been withdrawn, STAKK will no longer initiate tracking that requires this permission. Information already processed by Meta before withdrawal may remain subject to Meta’s retention policies and applicable legal obligations.

5.7 Meta as recipient and joint controller

For users located in the European Economic Area, the relevant Meta entity is generally:

Meta Platforms Ireland Limited
ATTN: Privacy Operations
Merrion Road
Dublin 4
D04 X2K5
Ireland

To the extent that we and Meta jointly determine the purposes and means of collecting and transmitting advertising event data through the Meta Business Tools, we and Meta Platforms Ireland Limited act as joint controllers pursuant to Article 26 GDPR.

The allocation of responsibilities is governed by Meta’s applicable Controller Addendum. Users may exercise their rights against either joint controller.

Meta may process the information for attribution, measurement, security, reporting and other purposes described in its own policies and contractual terms.

Further information is available in:

6. International data transfers

Meta operates internationally. Information transmitted through the Meta SDK may therefore be processed in the United States or in other countries outside the European Economic Area.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, Meta states that it relies on recognised transfer mechanisms where applicable, including:

Adequacy decisions
The EU-US Data Privacy Framework
Standard Contractual Clauses approved by the European Commission
Supplementary technical and organisational safeguards

Further information about Meta’s international transfers is available through Meta’s Privacy Policy and Data Privacy Framework information.

7. Retention of attribution information

We do not maintain our own user-level database containing Meta advertising identifiers or raw App event information.

Campaign reports and aggregated advertising statistics may be available within our Meta advertising account. We retain access to these reports for as long as they are reasonably required to:

Evaluate campaign effectiveness
Compare advertising performance
Administer our advertising account
Document business expenditure
Establish, exercise or defend legal claims
Meet applicable statutory obligations

Meta determines the retention periods applying within Meta’s own systems according to its policies, account settings and legal obligations.

Users seeking information about retention by Meta should consult Meta’s Privacy Policy or contact Meta directly.

8. Apple and the App Store

STAKK is distributed through Apple’s App Store.

Apple may independently process information relating to:

App downloads and updates
Apple ID and App Store activity
Device information
App Store purchases and subscriptions
Payment processing
Refunds
Crash or diagnostic information
Apple advertising attribution services
Device backups

Apple processes this information under its own terms and privacy policies. We do not receive users’ full payment card details.

Where STAKK offers in-app purchases or subscriptions, payments are processed by Apple. We may receive limited transaction information, such as product type, subscription status, transaction status and an Apple-generated transaction identifier, where required to provide or restore the purchased functionality.

Further information is available in the Apple Privacy Policy.

9. No sale of peptide or health information

We do not sell, rent or disclose users’ peptide entries, schedules, dosage information, notes or other locally stored App content.

This information is not available to us and is not transmitted to Meta.

We do not use health-related App content for:

Advertising
User profiling
Insurance decisions
Employment decisions
Credit decisions
Data brokerage
Training advertising models
Creating advertising audiences

10. Support requests and direct communications

When a user contacts us by email or through another communication channel, we may process:

Name, if provided
Email address
Message contents
Attachments voluntarily submitted
Date and time of communication
Technical details voluntarily included in the request

We use this information to respond to the request, provide support and document the communication.

The legal basis is:

Article 6(1)(b) GDPR where the communication relates to a contract, subscription or pre-contractual request
Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in responding to general inquiries, providing support or protecting our legal interests
Article 6(1)(c) GDPR where retention is required by law

Support communications are retained until the matter has been resolved and subsequently for any applicable statutory retention or limitation period.

Users should not send peptide histories, medical records or other sensitive health information when contacting support unless it is strictly necessary. We will never request a complete peptide or medical history for ordinary technical support.

11. Legal disclosures

We may process or disclose information where this is reasonably necessary to:

Comply with a binding legal obligation
Respond to a valid order from a court or competent authority
Establish, exercise or defend legal claims
Investigate fraud, security incidents or unlawful use
Protect the rights, safety and property of users, third parties or Trusted Brands UG

The legal basis may be Article 6(1)(c) or Article 6(1)(f) GDPR, depending on the circumstances.

Because STAKK’s peptide records are stored locally and are not accessible to us, we generally cannot provide those records to third parties or authorities.

12. Automated decision-making

We do not use peptide information or other locally stored App content for automated decision-making or profiling that produces legal effects or similarly significant effects for users.

Meta may use information within its own advertising systems according to Meta’s policies. That processing is controlled by Meta and is not used by us to make medical, employment, insurance, credit or other significant decisions concerning users.

13. Your data protection rights

Where the GDPR or comparable legislation applies, users may have the following rights:

Right of access to personal data
Right to rectification of inaccurate data
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interests
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority
Right not to be subject to certain solely automated decisions

Because we do not operate user accounts and do not maintain a database of peptide records, we cannot access or provide locally stored information from a user’s device.

Where a request concerns information processed by Meta, users may also submit the request directly to Meta. We will reasonably assist with requests relating to processing for which we are responsible.

We may need to request limited information to verify the identity of a person making a data protection request. We will not request more information than reasonably necessary for verification.

Requests may be sent to:

service@tbrands.de

14. Right to complain

Users have the right to lodge a complaint with a competent data protection supervisory authority.

The supervisory authority responsible for our establishment is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

Users may also contact the supervisory authority in the country or region where they live, work or believe an infringement occurred.

15. Information for residents of California and other US states

We do not sell personal information for monetary compensation.

Depending on the definitions used by applicable US state privacy laws, the disclosure of identifiers and advertising event information to Meta for advertising attribution or measurement may be considered:

Sharing
Targeted advertising
Cross-context behavioural advertising

Users can opt out by declining the App Tracking Transparency request or disabling tracking permission for STAKK through the iOS settings.

We do not knowingly sell or share the personal information of children.

Subject to applicable law, residents of certain US states may have rights to:

Confirm whether personal information is processed
Access personal information
Correct inaccurate personal information
Delete personal information
Obtain a portable copy
Opt out of targeted advertising, sale or sharing
Appeal the denial of a privacy request
Receive equal service without unlawful discrimination

Requests can be submitted to service@tbrands.de.

Because we do not maintain user accounts or a user-level database, we may have limited information with which to identify or verify a requester.

16. Children’s privacy

STAKK is not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13 through the App. Where local law establishes a higher minimum age for consent to advertising tracking, that higher age applies.

If we become aware that personal information has been collected from a child contrary to applicable law, we will take reasonable steps to delete or restrict that information.

Parents or guardians may contact us at service@tbrands.de.

17. Data security

We apply reasonable technical and organisational measures designed to protect personal data for which we are responsible.

STAKK reduces privacy risks by storing peptide-related information locally rather than transmitting it to a company-operated server.

However, no device, software application or method of electronic storage can be guaranteed to be completely secure. Users are responsible for maintaining the physical and digital security of their devices.

18. No obligation to provide data

Users are not required to provide personal data to us in order to use STAKK’s core local tracking functions.

Refusing Meta tracking consent does not prevent the use of the App’s peptide tracking functionality. It only limits our ability to attribute installations or App activity to a particular advertising campaign.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

Changes to STAKK
Changes to the Meta SDK or other technical systems
Changes to legal requirements
Changes to our business operations
Guidance from courts or supervisory authorities

The current version will be made available through the App, the App Store listing or our website.

Where required by law, we will provide additional notice or request new consent before materially changing how personal data is processed.

20. Contact

Questions, complaints or data protection requests may be addressed to:

Trusted Brands UG (haftungsbeschränkt)
Mühlensiek 9
32584 Löhne
Germany

Email: service@tbrands.de
Website: https://tbrands.de