Last updated: May 8, 2026
Ligand ("the App") is published by Evelaina. Your privacy matters to us — especially given the sensitive nature of the data you track. This policy explains what data the App collects, how it is used, where it is stored, and your rights.
Ligand stores the following data on your device. With iCloud Sync enabled (default), the same data also syncs through your private Apple iCloud account using Apple's CloudKit:
By default, the data above syncs across your devices through your private Apple iCloud account using Apple's CloudKit. The sync is end-to-end encrypted by Apple between your devices. Evelaina does not have access to your iCloud data. You can disable iCloud sync for Ligand at any time in your device's Settings → Apple ID → iCloud.
The Peptide Assistant is a Pro feature that answers questions about peptide kinetics and commonly reported protocols. When you ask the Assistant a question, the App sends the following to our backend service at a Cloudflare Worker we operate:
Our backend forwards your question and grounding context to Anthropic's Claude API to generate the response. Under Anthropic's commercial terms, your prompts and completions are not used to train models. Anthropic may retain the request for up to 30 days for trust-and-safety review per their commercial data-handling policy, after which it is deleted; we do not currently have a Zero-Data-Retention agreement with Anthropic.
Our backend stores only:
Our backend does not log your question text, your answers, your body stats, your vials, or your goals — these are forwarded to Anthropic for processing and are not retained on our infrastructure beyond the in-flight request. Operational logs on our side capture only a request id, a stage label (e.g. "siwa-verify-failed"), and a 16-character SHA-256 hash of your identifier; they never contain question content or personal context.
We do not share any data with third parties for advertising. We do not sell your data.
If you do not want any data sent to our backend, simply do not use the Peptide Assistant feature. The rest of the App functions fully offline.
The first time you use the Peptide Assistant, the App asks you to sign in with Apple. The App requests no Apple ID scopes — Apple returns only a per-app stable identifier (Sign in with Apple's "sub") and a short-lived identity token. The App does not request your email, your name, or any other Apple ID profile data. The identity token is stored in your device's secure Keychain and used to authenticate Assistant requests. Our backend uses the per-app identifier to key your rate-limit counter and entitlement cache (see Peptide Assistant above); operational logs only ever contain a 16-character hash of that identifier, never the raw value. Sign in with Apple is governed by Apple's privacy policy.
Ligand offers an optional Pro subscription (monthly and yearly) processed entirely through Apple's App Store using StoreKit 2. Apple handles payment, billing, refunds, and family sharing. Evelaina never receives your name, billing address, or payment instrument. Subscription status is verified through Apple's StoreKit entitlement system. You can manage and cancel subscriptions in your Apple ID Account Settings.
If you enable Dose Reminders, Ligand schedules local notifications on your device for upcoming protocol doses. There is no push-notification server. Reminders are computed and scheduled entirely on-device.
Ligand is not intended for and does not knowingly collect data from anyone under 18. Peptide research and use is an adult activity that involves health, medical, and legal considerations.
You can delete all vials, archived vials, and dose logs at any time from Settings → Delete all vials and history. This wipes the data from this device and from your iCloud account. Personal Context (body stats and goals), subscription status, and onboarding preferences are preserved separately and can be cleared by deleting the App.
To remove all Ligand data, delete the App from every device and disable Ligand in your iCloud settings. Backend rate-limit counters and entitlement caches expire automatically (monthly counters reset; entitlement cache expires after 24 hours).
Ligand is a personal organization and logging tool. It does not provide medical advice, diagnosis, or treatment. Information shown by the Peptide Assistant is general peptide reference content — it is not personalized medical advice. Always consult a qualified healthcare provider before any decision about a medication or compound.
We may update this Privacy Policy from time to time. The updated version will be posted at this URL with a revised "Last updated" date. Material changes will be surfaced in the App.
If you have questions about this Privacy Policy, contact us at support@evelaina.com.
Back to Ligand