Privacy

PeptiHealth.AI is a private, single-user dashboard operated by Darrin Isaak for his own use. It is not offered to the public.

What is collected

• Data from Oura, only for the permissions granted on Oura's consent screen: sleep, readiness, activity, heart rate, HRV, stress, SpO2, workouts, sessions, tags, and profile details such as age and height.
• Entries typed into the health log: blood pressure, weight, alcohol, caffeine, fasting, water, supplements, symptoms, exercise, mood, energy, and notes.
• Oura authorization tokens, which let the dashboard fetch new data.

How it is protected

• Health records, manual entries, and Oura tokens are encrypted at rest with AES-256-GCM. The key is held only in the server's environment.
• The dashboard requires a password and is served only over HTTPS. Session cookies are HttpOnly, Secure, and SameSite.
• The Oura client secret stays on the server and is never sent to a browser.
• Logs record events and errors, never tokens or health values.

Sharing

Data is not sold, shared, or sent anywhere except to Oura's API to request your own data. There are no analytics or advertising trackers.

Your control

• Export everything as a JSON file from the Your data page.
• Disconnect Oura at any time. The dashboard asks Oura to revoke access and deletes its saved authorization. You can also remove access in the Oura app.
• Delete all stored data permanently from the Your data page.

Not medical advice

This dashboard is for wellness tracking. It is not a medical device and does not diagnose, treat, or prevent any condition. Talk to a clinician about health decisions.

Last updated September 27, 2026. Back to dashboard