StackCare ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share information when you use the StackCare mobile application ("App") and any related services (the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.
StackCare is designed with privacy at its core. Your health data is stored primarily on your device. We do not sell your data to third parties. Anonymous usage analytics never include medicine names, measurement values, notes, contacts, or appointment details.
1. Information we collect
1.1 Information you provide
When you use the Service, you may provide the following types of information:
- Health and Supplement Data: Supplement names, medication names, dosage information, ingredients, schedule details, inventory quantities, and related notes.
- Health Measurements: Vitals, body measurements, and other health metrics you choose to track.
- Health Profile: Date of birth, blood type, allergies, critical medications, and emergency contact information you optionally provide.
- Journal Entries: Symptom diary notes, side effect observations, and health journal entries.
- Appointment Data: Doctor visit details, appointment dates, and related notes.
- Scanned Label Data: Photographs of product labels processed via on-device or server-side OCR.
1.2 Automatically collected information
- Anonymous Usage Analytics: General usage patterns such as screen views, feature usage frequency, and session duration. These analytics are collected only if you have not opted out.
- Device Information: Device type, operating system version, and app version for crash reporting and compatibility.
- Subscription Status: Information about your subscription plan managed through Apple's App Store and RevenueCat.
Our anonymous usage analytics explicitly never include: medicine or supplement names, exact measurement values, journal or diary content, health contact details, appointment specifics, emergency card information, or any other personally identifiable health data.
2. How we use your information
| Purpose | Data Used |
|---|---|
| Providing core app functionality | Health data, supplement data, schedules, measurements |
| Syncing data across your devices | Account-linked data via Supabase (if enabled) |
| Processing subscriptions | Subscription status via RevenueCat |
| Improving the Service | Anonymous usage analytics |
| AI Review Prep features | Supplement stack data (processed server-side only when you explicitly request a review) |
| Label scanning | Label images (processed and discarded after extraction) |
3. How we store your information
3.1 On-device storage
The majority of your health data is stored locally on your device using encrypted storage mechanisms provided by Apple's iOS platform. This data does not leave your device unless you explicitly use sync or AI features.
3.2 Cloud sync (optional)
If cloud sync is enabled, your data may be stored on secure servers provided by Supabase (our backend service provider). Data in transit is encrypted using TLS. Data at rest is encrypted using industry-standard encryption.
3.3 Label images
Photographs taken for label scanning are processed to extract text and product information. Images are not permanently stored on our servers and are discarded after processing.
4. Third-party services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Apple (App Store / StoreKit) | App distribution, payment processing | Purchase transactions |
| RevenueCat | Subscription management | Anonymous user ID, subscription status |
| Supabase | Backend data storage and sync | Account and health data (if sync enabled) |
Each third-party service operates under its own privacy policy. We encourage you to review their policies.
5. Data sharing
We do not sell, rent, or trade your personal data to third parties. We may share information only in the following circumstances:
- With your consent: When you explicitly authorize sharing (e.g., sharing your emergency card).
- Service providers: With trusted third-party services listed above, solely for the purpose of operating the Service.
- Legal requirements: If required by law, regulation, legal process, or governmental request.
- Safety: To protect the rights, safety, or property of StackCare, our users, or the public.
6. Data retention and deletion
Your data is retained for as long as you maintain an active account. You may delete your data at any time:
- On-device data: Delete the app to remove all locally stored data.
- Cloud data: Contact us at privacy@quillwind.com to request deletion of any cloud-stored data.
- Account deletion: Request complete account deletion by contacting support. We will delete all associated data within 30 days.
Anonymous analytics data that has already been aggregated cannot be associated with your account and is retained for service improvement.
7. Your rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data.
- Portability: Request your data in a portable format.
- Opt-out: Opt out of anonymous analytics via Settings → Analytics in the App.
- Withdraw consent: Withdraw any previously given consent.
To exercise any of these rights, contact us at privacy@quillwind.com.
8. Children's privacy (COPPA)
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@quillwind.com.
9. Security
We implement reasonable administrative, technical, and physical security measures to protect your information. These include:
- On-device encryption using Apple's data protection APIs
- TLS encryption for all data in transit
- Encrypted storage at rest for cloud-synced data
- Regular security reviews of our infrastructure
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
10. Cookies and tracking
The App is a native iOS application and does not use cookies. We do not use web-based tracking technologies within the App. Our website (stackcare.app) may use essential cookies for basic functionality.
11. International data transfers
If you access the Service from outside the country where our servers are located, your data may be transferred internationally. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.
12. California residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: You may request deletion of your personal information.
- Right to Opt-Out of Sale: We do not sell personal information. There is no need to opt out.
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise these rights, contact privacy@quillwind.com.
13. European residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):
- We process your data based on your consent (which you may withdraw at any time) and legitimate interests (such as improving the Service).
- You have the right to access, rectify, erase, restrict processing, object to processing, and data portability.
- You have the right to lodge a complaint with your local supervisory authority.
14. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
15. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:
Email: privacy@quillwind.com