Privacy Policy

Last updated: April 23, 2026

1. Information We Collect

We collect information you provide directly when using GlpStack:

• Account information: Name and email address when you create an account
• Health data: GLP-1 medication type and dosage, health conditions, symptoms, weight, and nutrition information you choose to log
• Usage data: How you interact with the app, features you use, and actions you take
• Photos: Food photos you capture for AI-powered nutrition analysis (processed and not stored permanently)
• Device information: Device type and operating system for app compatibility

2. How We Use Your Information

We use the information we collect to:

• Generate your personalized supplement stack based on your GLP-1 medication and health profile
• Provide AI-powered food scanning and calorie tracking features
• Track your nutrition, symptoms, and health progress over time
• Send supplement reminders and injection tracking notifications you request
• Improve our supplement recommendations and app features
• Respond to your support requests

3. Third-Party Services

GlpStack uses the following third-party services to operate:

• Supabase: Secure database and authentication infrastructure. Your data is stored encrypted at rest. Privacy Policy
• OpenAI: Powers our AI food scanning feature. Food photos are sent to OpenAI for analysis and are not stored. Privacy Policy
• RevenueCat: Manages subscription billing and purchase verification. Privacy Policy
• Google: Optional sign-in via Google OAuth. Privacy Policy
• Apple: Optional sign-in via Sign in with Apple, HealthKit integration, and App Store payments. Privacy Policy

4. HealthKit

With your permission, GlpStack can read and write data to Apple HealthKit. This includes weight, nutrition, and activity data. HealthKit data is used only to enhance your experience within GlpStack and is never shared with third parties or used for advertising.

5. Data Storage and Security

Your data is stored securely using Supabase with encryption at rest and in transit. We use Row Level Security (RLS) to ensure you can only access your own data. We implement industry-standard security measures to protect your information.

6. Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from the Profile tab in the app. Upon deletion, your data is permanently removed from our systems within 30 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@glpstack.org or use the Delete Account feature in the app.

8. Children's Privacy

GlpStack is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. GDPR and CCPA

If you are located in the European Union or California, you have additional rights under GDPR and CCPA respectively, including the right to data portability and the right to know what personal information is collected. Contact us at privacy@glpstack.org to exercise these rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Continued use of GlpStack after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

• Email: privacy@glpstack.org
• Website: https://glpstack.org