Privacy Policy

Effective Date: May 29, 2026

StackCare ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share information when you use the StackCare mobile application ("App") and any related services (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you use the Service, you may provide the following types of information:

• Health and Supplement Data: Supplement names, medication names, dosage information, ingredients, schedule details, inventory quantities, and related notes.
• Health Measurements: Vitals, body measurements, and other health metrics you choose to track.
• Health Profile: Date of birth, blood type, allergies, critical medications, and emergency contact information you optionally provide.
• Journal Entries: Symptom diary notes, side effect observations, and health journal entries.
• Appointment Data: Doctor visit details, appointment dates, and related notes.
• Scanned Label Data: Photographs of product labels processed via on-device or server-side OCR.

1.2 Automatically Collected Information

• Anonymous Usage Analytics: General usage patterns such as screen views, feature usage frequency, and session duration. These analytics are collected only if you have not opted out.
• Device Information: Device type, operating system version, and app version for crash reporting and compatibility.
• Subscription Status: Information about your subscription plan managed through Apple's App Store and RevenueCat.

2. How We Use Your Information

Purpose	Data Used
Providing core app functionality	Health data, supplement data, schedules, measurements
Syncing data across your devices	Account-linked data via Supabase (if enabled)
Processing subscriptions	Subscription status via RevenueCat
Improving the Service	Anonymous usage analytics
AI Review Prep features	Supplement stack data (processed server-side only when you explicitly request a review)
Label scanning	Label images (processed and discarded after extraction)

3. How We Store Your Information

3.1 On-Device Storage

The majority of your health data is stored locally on your device using encrypted storage mechanisms provided by Apple's iOS platform. This data does not leave your device unless you explicitly use sync or AI features.

3.2 Cloud Sync (Optional)

If cloud sync is enabled, your data may be stored on secure servers provided by Supabase (our backend service provider). Data in transit is encrypted using TLS. Data at rest is encrypted using industry-standard encryption.

3.3 Label Images

Photographs taken for label scanning are processed to extract text and product information. Images are not permanently stored on our servers and are discarded after processing.

4. Third-Party Services

We use the following third-party services:

Service	Purpose	Data Shared
Apple (App Store / StoreKit)	App distribution, payment processing	Purchase transactions
RevenueCat	Subscription management	Anonymous user ID, subscription status
Supabase	Backend data storage and sync	Account and health data (if sync enabled)

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share information only in the following circumstances:

• With your consent: When you explicitly authorize sharing (e.g., sharing your emergency card).
• Service providers: With trusted third-party services listed above, solely for the purpose of operating the Service.
• Legal requirements: If required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, safety, or property of StackCare, our users, or the public.

6. Data Retention and Deletion

Your data is retained for as long as you maintain an active account. You may delete your data at any time:

• On-device data: Delete the app to remove all locally stored data.
• Cloud data: Contact us at support@stackcare.app to request deletion of any cloud-stored data.
• Account deletion: Request complete account deletion by contacting support. We will delete all associated data within 30 days.

Anonymous analytics data that has already been aggregated cannot be associated with your account and is retained for service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data.
• Portability: Request your data in a portable format.
• Opt-out: Opt out of anonymous analytics via Settings → Analytics in the App.
• Withdraw consent: Withdraw any previously given consent.

To exercise any of these rights, contact us at support@stackcare.app.

8. Children's Privacy (COPPA)

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@stackcare.app.

9. Security

We implement reasonable administrative, technical, and physical security measures to protect your information. These include:

• On-device encryption using Apple's data protection APIs
• TLS encryption for all data in transit
• Encrypted storage at rest for cloud-synced data
• Regular security reviews of our infrastructure

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

10. Cookies and Tracking

The App is a native iOS application and does not use cookies. We do not use web-based tracking technologies within the App. Our website (stackcare.app) may use essential cookies for basic functionality.

11. International Data Transfers

If you access the Service from outside the country where our servers are located, your data may be transferred internationally. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: You may request deletion of your personal information.
• Right to Opt-Out of Sale: We do not sell personal information. There is no need to opt out.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact support@stackcare.app.

13. European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• We process your data based on your consent (which you may withdraw at any time) and legitimate interests (such as improving the Service).
• You have the right to access, rectify, erase, restrict processing, object to processing, and data portability.
• You have the right to lodge a complaint with your local supervisory authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: support@stackcare.app