Privacy Policy

Effective Date: April 6, 2026  |  Last Updated: April 6, 2026

Your privacy matters. This policy explains exactly what data Stackd collects, why we collect it, who we share it with, and what rights you have. Please read it carefully before using the app.

1. Who We Are

Stackd ("Stackd," "we," "us," or "our") is a sole proprietor business (LLC formation pending) operating the Stackd mobile application, accessible at stackd.health. We provide an educational platform for tracking dietary supplements and understanding how they may interact with personal health data.

For privacy-related questions, contact us at: support@stackd.health

2. Scope of This Policy

This Privacy Policy applies to all personal information collected through:

By using Stackd, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the app.

3. Information We Collect

3.1 Information You Provide Directly

Category Specific Data Why It's Collected
Account Email address, password (hashed), name Account creation and authentication
Health Profile Date of birth, biological sex, height, weight, health goals Personalized supplement analysis
Supplement Data Supplement names, dosages, schedules, brands, stacks Core app functionality — tracking and analysis
Lab Results Uploaded or manually entered lab values (e.g. blood panels) Enhanced AI analysis and insights
Payment Subscription tier; billing handled entirely by Stripe Subscription management

3.2 Information Collected Automatically

3.3 Information from Third Parties

If you sign in with Apple or Google, we receive your email address and name as provided by those services. We do not receive your Apple or Google password.

4. How We Use Your Information

We use your information exclusively to operate and improve Stackd. Specifically:

We do not sell your personal data. We do not use your data for advertising.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

6. Data Storage and Security

6.1 Where Your Data is Stored

Your data is stored in Supabase, a managed database platform hosted on AWS infrastructure. Data is stored in the United States. If you are located outside the US, your data will be transferred to and processed in the US.

6.2 Security Measures

6.3 No System is Perfect

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Not HIPAA Compliant: Stackd is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and does not operate as a HIPAA-compliant service. Do not use Stackd as a substitute for healthcare records management or medical data storage.

7. Third-Party Services

We use the following third-party services to operate Stackd. Each has its own privacy practices:

Service Purpose Data Shared
Supabase Database, authentication, file storage All user data including health profile, supplements, lab results
Stripe Payment processing Email address, subscription tier. Payment card data is handled entirely by Stripe — we never see or store card numbers.
Anthropic (Claude API) AI-powered supplement analysis Health profile, supplement data, and any lab results you choose to include in an analysis request
Expo Mobile app platform and delivery Device metadata, crash reports
Apple / Google Optional social sign-in Email and name (only if you choose to sign in with Apple or Google)
AI Data Use Notice: When you request an AI analysis, your health profile and supplement stack are transmitted to Anthropic's Claude API. Anthropic's data usage policies govern how they handle this data. We recommend reviewing Anthropic's Privacy Policy. We do not share your name or contact information with Anthropic.

8. Data Retention

We retain your personal data for as long as your account is active. Specifically:

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights and Choices

9.1 All Users

9.2 EEA / UK Users (GDPR / UK GDPR)

In addition to the above, you have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority.

9.3 California Residents (CCPA)

California residents have the right to know what personal information is collected, to request deletion, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising these rights.

To exercise any of these rights, contact us at support@stackd.health. We will respond within 30 days.

10. Children's Privacy

Stackd is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us immediately at support@stackd.health and we will delete the account promptly.

11. International Data Transfers

Stackd operates from the United States. If you access the app from outside the US, your data will be transferred to and processed in the US. By using Stackd, you consent to this transfer. We rely on standard contractual clauses and other appropriate safeguards where required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice in the app at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of Stackd after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data:

Stackd
Email: support@stackd.health
Website: stackd.health