What should a peptide tracker app actually record?

Why does the search rarely give a straight answer?

Search "peptide tracker app" today and the ranked lists are written by the apps they rank first. Checked on their own sites on October 9, 2026: Regimen's "best peptide tracker apps" page, updated September 25, 2026, ranks Regimen first and says in its own text that it is not an independent review. Dosefi's roundup, dated June 2026, ranks Dosefi first. MeAgain's list, with sources checked June 11, 2026, ranks MeAgain first and states that MeAgain publishes the page. DoneDose's six-app list, updated May 3, 2026, is written by the app's builder and ranks DoneDose first.

None mentions Protocol Her, and this page is published by Protocol Her, so apply the same discount here. What follows is not a ranking but what a record has to contain to be useful in an appointment; the feature-by-feature comparison lives on its own compare page. All app names belong to their respective owners.

What does a dose record need to hold?

This is the part that goes wrong. The FDA reports receiving multiple reports of adverse events, some requiring hospitalization, that may be related to dosing errors with compounded semaglutide, and attributes them to patients measuring and self-administering incorrect doses as well as to health care professionals miscalculating them. The agency encourages patients to talk with their provider or compounder about how to measure the intended dose.¹

A record that can catch that kind of error has to hold more than "took my shot": the vial's mass in milligrams, the water added in millilitres, the concentration that produces, the amount intended, and the syringe units it reads as. The mg to units page and the reconstitution page work through that arithmetic, which the record should preserve for every dose, because a vial reconstituted with a different volume next month reads differently on the same syringe.

In Protocol Her, a vial record stores the milligrams and the millilitres, the reconstitution calculator draws the result on a U-100 syringe gauge, and each dose is logged in the compound's own unit against the supply it was drawn from.

What happened around each dose?

The labels require rotation: Wegovy's says to rotate injection sites with each dose.² A record without the site cannot tell you where the last one went, which is the whole question. Where do you inject semaglutide, and how often should you rotate? covers the sites and the evidence behind rotating.

Then the aftermath, with dates. A side effect is useful to a clinician only with the day it started, its severity, and which dose preceded it. Protocol Her logs each one with a severity from 1 to 5 and links it to the most recent dose within the previous 7 days, asking which compound if more than one was dosed in that window.

Doses that did not happen belong in the record too. A skipped dose in Protocol Her is stored with a reason from a fixed list, Side effects, Supply, Chose to skip, Forgot, or Other, and a break from a protocol with its own list, Supply, Illness, Travel, Planned, or Other. An unexplained gap in a dose history looks like a lapse; a gap with "Supply" next to it is a fact.

What context do generic trackers drop?

For women, the cycle. A 2026 analysis of FDA adverse event reports found menstrual events reported more often than expected with semaglutide and, to a lesser degree, tirzepatide, while noting that obesity independently affects menstrual regularity and that reports cannot establish cause.³ Separately, women measured across their cycles gain about half a kilogram of extracellular water around menstruation.⁴ A weight log and a symptom log that carry no period dates cannot tell either of those stories apart from a change in the protocol. Protocol Her places doses, symptoms, and weight in cycle-phase context once periods are logged, and Can semaglutide or tirzepatide affect your period? covers what is known.

Then labs, as values. Protocol Her stores a lab result as the test, the number, the unit as you typed it, and the sample date, with no reference range and no flag: interpreting the number is the clinician's job.

Where does the data live?

A consumer health app is generally not covered by HIPAA. The Federal Trade Commission's Health Breach Notification Rule exists for that gap, and the FTC's April 2024 final rule was written, in the agency's words, to underscore its application to health apps and similar technologies not covered by HIPAA.⁵ The practical question for any tracker is not whether it is "HIPAA compliant" but where the record sits and who else can read it.

Apple's App Privacy labels are the quickest check. Developers must declare what an app collects, and Apple defines "collect" as transmitting data off the device in a way that allows access beyond servicing the request; data processed only on device is not "collected" and need not be declared.⁶ A label listing health data as collected means it leaves the phone.

Protocol Her keeps the record on the iPhone. There is no account to create, and Protocol Her never receives a copy of what you log; the database is protected by iOS Data Protection, encrypted at rest. What does leave the device is purchase and attribution data, not logs: for Apple and RevenueCat, the App Store receipt, a randomly generated anonymous app-user ID, subscription status, the device identifiers their SDKs use, an Apple Search Ads attribution token, and the optional creator code if you typed one; for AppsFlyer, anonymous install and subscription events and screen and paywall milestones (which screen appeared, never what you entered), with your advertising identifier only if you allow tracking when iOS asks. None of it carries a peptide name, a dose, a site, or free text you wrote; the privacy policy describes each processor and what it receives. The database does ride your normal iPhone backup, iCloud or computer, which you control through your own Apple account; progress photos and lab files are deliberately kept out of that backup. Her Bot, the app's assistant, answers from pre-written sentences on the device with no language model and no network request. For a copy in your own hands, the app produces a clinician PDF, a CSV bundle, and a JSON file, and you decide for each export whether cycle data and standalone notes are included. The app cannot read a JSON export back in today, so treat it as your records copy rather than a restore tool.