Privacy

Privacy contact

For privacy questions about Stack Harmony, contact support@stackharmony.com.

Information used for your assessment

The service is designed to process your saved supplement and medication entries, product-label details, recorded routine, goals, country and eligibility declarations. Your sign-in identity links you to your saved records. Billing uses payment-provider references, and report delivery uses the email address you confirm.

Recorded amounts and label strengths describe your entries. Stack Harmony does not provide personalized dosage recommendations.

Sign-in information

Email and password sign-in is currently limited to internal testing. Supabase Auth processes the sign-in email, password and authentication requests; Resend delivers confirmation and recovery messages. Stack Harmony stores account and session information needed to protect access to your records, but does not save your password in its application database. Google sign-in is also available only for internal testing. General customer sign-in is not open. Google sign-in requests basic profile and email information to identify your account; it does not request access to your Gmail messages or Google Drive files.

Your sign-in email is separate from the addresses you confirm for report delivery and account messages. Changing one does not update the others. Customer sign-in uses email and password or Google; a ChatGPT account is not required.

Service processing and optional emails

Permission to process your routine is separate from optional educational emails and release updates. Purchasing a report or membership does not enroll you in those optional lists. Their unsubscribe links let you withdraw the relevant email preference.

You can manage service-processing permission from your stack. Withdrawing permission stops further processing; it does not itself cancel billing or remove copies already delivered to your mailbox.

Dated notes — closed capability under review

Dated notes are structured user reports: the wording you confirm, event-time clarification, recalled use, uncertainty and an optional reference to an exact saved routine item. They are separate from an assessment finding or verified ingestion. Customer note collection is not open.

The candidate note capability uses a separate dated-note permission and exact per-note save confirmation. Routine/report permission alone cannot authorize a note; note-only permission does not enable routine saves or reports. A later service withdrawal stops new note processing until fresh explicit note-only permission is recorded. Restoring routine permission alone does not restore note permission. Note saves do not retain transcripts or audio or authorize provider transmission.

Access, retention and source-handling rules must be explicitly reviewed before collection. The note interface displays that exact scope before permission and each save. Earlier immutable lifetimes and source rules are preserved; a policy change does not restore expired or deleted bodies. A temporary source-access restriction can hide an associated routine snapshot without deleting its stored body. Actual source expiry, deletion or physical body loss is handled by the selected cleanup rule, with no replacement from another version.

Withdrawing note permission stops new saves and corrections without deleting existing bodies or cancelling billing. Existing authorized profile deletion denies access immediately; active-storage cleanup clears every note-revision body and embedded snapshot. Minimal ownership, permission and action references can remain. Application cleanup does not establish erasure from provider logs or backups.

Reports delivered by email

The intended customer delivery is a short email with the assessment, including its evidence gaps and limitations, attached as a PDF. Resend processes the delivery address, message and attached report. The report is linked to your address in your mailbox. Email providers and recipients may retain copies, and Stack Harmony cannot remove a delivered attachment from your mailbox. A PDF attachment is not anonymous merely because internal records use random identifiers.

Storage and access

Sites hosts the application and stores saved records and report files. The application reads your entries to prepare an assessment; encryption of stored copies does not mean the hosting service never processes readable information.

The current test setup uses encrypted saved-stack and report copies with a 30-day limit. A report copy may expire sooner because its source stack expires. Report History displays the stored-copy deadline when a download is available.

After your paid membership period ends, you have two calendar months to download membership records. After that window, older membership history is restricted. You can still view and edit your current routine and purchase a one-time assessment. Independently purchased reports keep their separate access. A new paid membership restores access to retained membership history; it cannot restore deleted or expired records. Access restriction does not delete records. Production records are intended to be kept without automatic deletion when that access window ends. This is separate from the test-only expiry rule. The production retention controls are not enabled yet; explicit privacy requests and applicable legal obligations require separate handling.

Deleting a saved profile removes access to its stack and report copies and stops unfinished processing. Encrypted PDF files are removed by scheduled cleanup after their report records are deleted. Billing, consent and account-security references can remain to preserve ownership, prevent access from returning after deletion and record unfinished account changes. Deleting your saved profile does not automatically delete your Supabase sign-in account or cancel a subscription. Retained billing access is separate from access to deleted health records. Use Membership to manage renewal, or contact support for a broader account-deletion request. Provider copies, backups and emailed attachments require separate handling; complete deletion propagation has not yet been verified.

Optional written-timing interpretation

During a supervised test, you may choose to send one saved timing description or alternative preference to OpenAI for a proposed interpretation. We send that text and whether the item is a supplement or medication, without adding your account details or other entries. Personal information included in your text is still transmitted. Provider retention may apply. The sharing choice is required for each request.

A proposal is not saved to your routine automatically. You can correct its meaning, leave it for later, or explicitly confirm it and save a new version. Confirmation records what you meant; it does not verify a prescription, establish medical accuracy or authorize a schedule change. Minimal request and cost records are kept separately without the text or interpretation.

Assistant allowance records

We keep request counts and a minimal account-linked record of the one-time extra-request exception to enforce the monthly allowance and prevent the exception being repeated after renewal, resubscription or replacement of a saved profile. This record does not contain your question, answer, supplement list or medication list.

Optional founding feedback

After a confirmed founding purchase, you may choose to tell us what influenced your choice, what value you hope to get and which features you want. Please leave out health details and contact information. Feedback is encrypted and linked to your purchase. It does not change assessment eligibility or enroll you in marketing. You can remove it from the order page; deleting your profile also removes it from active storage. Test feedback expires after 30 days. Production feedback follows the retained-record policy described above.

Offer measurement

When enabled, we count signed-in visits to the founding offer and whether someone explores it or chooses the single report. We use a daily keyed identifier to limit duplicates; it does not contain your account ID, IP address, health information or contact details. These interest records expire after 30 days. We respect browser Do Not Track and Global Privacy Control signals for this measurement. Billing outcomes and report-use totals are counted separately from their existing records. No third-party analytics service receives these events.

Lookups and optional evidence checks

Product searches send search terms or selected label identifiers to the NIH Dietary Supplement Label Database. Medication searches send search terms or selected medication identifiers to the National Library of Medicine’s RxTerms and RxNorm services. Catalog lookups send a selected formula identifier to our Supabase catalog. These requests do not add your account identity or full saved routine, but a search term or product identifier can still reveal health-related interests. Avoid entering unrelated personal details in search fields. If you open a reference link, such as a DailyMed medication label, that website receives your browser request and applies its own privacy policy.

Customer access to Examine and MedData evidence checks is not enabled. These optional checks require separate permission to share the selected ingredient and medication names. Their request bodies do not add your account identity or full saved routine; the names themselves may reveal health information. A provider's missing result does not mean a combination is safe.

Payment information

Stripe processes checkout and subscription payments. Stack Harmony sends the selected offer and order reference, and uses payment and subscription references to manage your purchase. The checkout request does not include your supplement list, medication list or report contents. Payment information you enter on Stripe is processed separately under Stripe's privacy policy. Removing your saved health profile does not erase payment-provider records.

Service-provider limits

The current build uses Sites hosting and storage, Supabase for sign-in testing, scheduled operations and the public-label catalog, and the email, payment, lookup and optional processing services described above. ChatGPT sign-in remains in use for development and test records only. Harmony is planned for a later release and is not part of the initial membership offer. Provider storage, logs, backups and delivered mailbox copies have separate handling; the application's test expiry is not a deletion deadline for those services. Final provider retention and international-transfer disclosures remain launch requirements.

Review, corrections and requests

Use review your stack to inspect saved entries and download an input backup. Edit and save a new version for a future assessment; this does not rewrite an existing report. Use Report History for assessment downloads.

For an access, correction or deletion request you cannot complete in your account, contact support. We may need to verify ownership. Please do not email medication lists, report attachments, passwords or verification links.