Effective date: May 27, 2026 · Last updated: May 27, 2026
STapp is a supplement routine organizer. We built it to be useful, not intrusive. This policy explains exactly what data we collect, why we collect it, where it goes, and your rights over it. We do not sell your data. We do not use your data for advertising.
STapp is operated as an independent application. For privacy inquiries, contact us at:
privacy@stapp.app
| Data Type | What It Is | Why We Collect It | Linked to You? |
|---|---|---|---|
| Email address | Your email, provided when you create an account | Account authentication and password recovery | Yes |
| Supplement data | The supplements, dosages, and timing you enter | To display and sync your routine across your devices | Yes |
| Measurement preference | Imperial or Metric display setting | To show portion sizes in your preferred units | Yes |
| Notification preferences | Your reminder times (morning, midday, evening) | To send local on-device reminders you've configured | Yes |
| Camera images | Photos of supplement bottles taken or selected by you | To identify supplements via AI label scanning ("Snap to Stack") | No — never stored |
You may use STapp without creating an account. In this case, your supplement routine is stored only on your device using local storage and is never transmitted to our servers.
We do not use your data for advertising, profiling, analytics sold to third parties, or any purpose beyond operating the app for you.
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Cloud database for account storage and routine sync | Email, supplement data (encrypted in transit) | supabase.com/privacy |
| Google Gemini API | AI image analysis for supplement label recognition | Image content only, not linked to your account. Not retained after analysis. | ai.google.dev terms |
| Vercel | Hosting for our web app and serverless API functions | Standard server logs (IP address, request metadata). Not stored beyond standard log retention. | vercel.com/legal/privacy-policy |
| Apple App Store | App distribution on iOS | Governed by Apple's own policies | apple.com/legal/privacy |
Account data (email and supplement routine) is stored in Supabase, which uses industry-standard encryption in transit (TLS) and at rest (AES-256). Supabase infrastructure is hosted on AWS.
Local-only users (no account) have data stored exclusively on their device. We have no access to it.
Notification reminder times are stored locally on your device and are not transmitted to our servers.
We retain your account data for as long as your account exists. If you delete your account, all associated data (email, supplement routine, preferences) is permanently deleted from our systems within 30 days.
Camera images are not retained. They are discarded immediately after the AI analysis returns a result.
You have the right to:
To exercise any of these rights, email us at privacy@stapp.app. We will respond within 30 days.
You can request account deletion at any time by emailing privacy@stapp.app with the subject line "Delete my account." We will permanently delete your account and all associated data within 30 days and send you a confirmation.
STapp is not directed at children under 13 (or under 16 in the European Union). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at privacy@stapp.app and we will delete it promptly.
STapp is an educational organizer, not a medical device or service. The information provided is for general informational purposes only, sourced from the NIH Office of Dietary Supplements, NCCIH, and peer-reviewed research. STapp does not diagnose conditions, recommend dosages for your specific situation, or replace the advice of a doctor, pharmacist, or registered dietitian. Always consult a qualified healthcare professional before starting, stopping, or changing any supplement — especially if you take medications or have a health condition.
If we make material changes to this policy, we will update the effective date at the top of this page. For significant changes affecting how we use your data, we will notify you by email (if you have an account) before the changes take effect. Continued use of STapp after changes constitutes acceptance of the updated policy.
Questions, requests, or concerns about this Privacy Policy:
privacy@stapp.app