Privacy Policy

Last updated: September 8, 2026

SupplementMD ("SupplementMD", "we", "us") is operated by Adeptech Enterprise Solutions Inc. This policy explains what information the SupplementMD app and website collect, how we use it, who we share it with, and the choices you have. It applies to the app on iOS and Android, to supplementmd.com, and to our emails. If anything here is unclear, write to support@supplementmd.com.

SupplementMD is not a medical service. The plan it builds and the safety checks it runs are informational and do not replace advice from your doctor or pharmacist.

1. Information we collect

Information you give us

Account: your name, email address, and password (stored only as a one-way hash), or, if you sign in with Google or Apple, the identifier and email those services share with us. An optional profile photo and your language preference.
Health profile: what you tell us during onboarding and afterwards, to build and check your plan: biological sex, date of birth, height and weight, health conditions, medications, allergies, diet and lifestyle, health goals, and the supplements you already take.
Your routine: your supplement plan and schedule, the doses you log, daily check-ins, notes, and reminders you set.
Support: anything you send us through Help & Support or by email.

Information from Apple Health and Health Connect (optional)

If you connect Apple Health (iOS) or Health Connect (Android), we read the following types, for the periods the app shows: steps, active energy, height, weight, resting heart rate, heart rate variability, blood oxygen, sleep, and, where available, VO2 max. We never write to Apple Health or Health Connect. This data is used only to personalize your plan and to show you adherence and trend insights; it is never used for advertising or marketing, never sold, and never shared with third parties except the service providers listed in section 4 that store or process it on our behalf. You can disconnect at any time in the app (Profile → Health data) or in your phone's Health / Health Connect settings, and we stop reading immediately.

Information collected automatically

Device and app: device model, operating system version, app version, language, time zone, IP address, and a push-notification token if you allow notifications.
Usage: the screens you visit and the actions you take in the app (for example opening a supplement page, logging a dose, or viewing the paywall).
Session recordings: we may record how the screen changes as you use the app so we can find usability problems. Anything you type is masked before it leaves your device. You can switch this off, together with usage analytics, in Profile → Account → Privacy.
Diagnostics: crash and error reports, including the device details above and the sequence of screens before a crash. These contain no health profile data.
Purchases: your subscription status and history (plan, dates, renewal state). Payments are handled by Apple or Google; we never see your card number.

2. How we use your information

To build your personal supplement plan, check it against your conditions, medications and allergies, apply dose upper limits, and update it when your profile changes.
To run your daily routine: schedule, reminders, intake logging, check-ins, streaks, insights, and your Stack Score.
To provide your subscription and free-trial access.
To answer support requests and send service emails such as email verification and password reset.
To understand how the app is used, fix problems, and improve it.
To keep the service secure and prevent abuse.
To send product news, only if you opted in; every such email has an unsubscribe link.

3. Automated analysis and AI

Your plan is produced by our own rules engine. For some features we also use large language models from an AI provider (currently Anthropic): reviewing a proposed plan for safety issues, generating explanations, and analyzing a meal photo you choose to submit. For these requests we send only what the feature needs, such as the relevant parts of your health profile and supplement list, and never your name, email address, or account identifier. Under our agreement with the provider, data sent through its API is not used to train its models. Product and barcode lookups send only the product identifier to product databases, never anything about you.

4. Who we share information with

We do not sell your personal information, and we do not share it with advertisers. We share it only with service providers that process it on our behalf, under contracts that limit their use to providing the service to us:

Amazon Web Services — hosting, database and file storage (United States).
Apple and Google — sign-in, app distribution, payments, and (if you enable them) push notifications and Health data on your device.
RevenueCat — subscription management and receipt validation.
PostHog and Google Firebase — usage analytics and, for PostHog, session recordings (both covered by the in-app opt-out).
Sentry — crash and error reporting (operational data; not covered by the opt-out).
Expo — delivery of push notifications.
SendGrid — transactional email; Mailchimp — newsletters you opted into.
AI providers as described in section 3.

We may also disclose information if required by law or a valid legal request, to protect the rights, safety or property of SupplementMD, our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

5. Security

All data is encrypted in transit (TLS) and at rest. The most sensitive health fields, such as your medications, are additionally encrypted at the application level. Access by our staff is limited to what is needed to run the service and to help you when you contact support, and every such access is logged. No system can be guaranteed to be completely secure, so please use a strong, unique password and keep your device updated.

6. Your choices

Edit your profile, conditions, medications, allergies, and supplements at any time in the app.
Analytics and session recordings: switch off in Profile → Account → Privacy. Crash reporting stays on because we need it to keep the app working.
Health data: disconnect in Profile → Health data, or revoke access in Apple Health / Health Connect.
Notifications: manage reminders in the app and permissions in your phone's settings.
Emails: unsubscribe from newsletters with the link in any newsletter; service emails continue while you have an account.
Export or questions: email support@supplementmd.com and we will respond within 30 days.

7. Deleting your account and data retention

You can delete your account in the app: Profile → Account → Delete account. Deletion removes your profile, health profile, plan, logs, check-ins, devices, and notifications from our systems; it is not reversible. Records we must keep for accounting or legal reasons (for example purchase records held by Apple, Google and RevenueCat, and internal audit entries) are kept in a form that no longer identifies you. Copies in our encrypted backups are removed within 30 days. Analytics and crash data are retained by the providers in section 4 for a limited period and are not linked back to a deleted account. If you cannot access the app, email us and we will delete your account for you.

8. Where your data is stored

Our servers are hosted by Amazon Web Services in the United States. If you use SupplementMD from another country, your information is transferred to and processed there.

9. Children

SupplementMD is for adults. We do not knowingly collect information from anyone under 18, and we will delete such information if we learn of it.

10. Website and cookies

supplementmd.com uses cookie-less analytics to count visits; it sets no advertising or tracking cookies. The website may link to other sites, whose privacy practices are their own.

11. Changes to this policy

When we change this policy we update the date at the top and, for significant changes, tell you in the app or by email. The current version is always available in the app (Profile → Privacy) and at supplementmd.com/privacy.

12. Contact

SupplementMD, Adeptech Enterprise Solutions Inc. — support@supplementmd.com