This Privacy Policy describes how Supplemented ("we", "us", "the app") collects, uses, stores, and protects information when you use the Supplemented mobile or web application. We designed Supplemented to be private by default. We do not sell your data, ever.
HealthKit data is never sold, shared with advertisers, or used for marketing.
When you grant Supplemented permission to access Apple Health, we may read and/or write the following categories — only those you explicitly authorise in the iOS Health permission sheet:
Read (from Apple Health into Supplemented):
Write (from Supplemented into Apple Health, only when you opt in):
Where it is stored: HealthKit data read from Apple Health is processed on your device to power dashboards and correlations. When you sign in with an account and enable cloud sync, an encrypted copy of the values you have logged inside Supplemented is stored on our servers (operated by reputable cloud providers in the United States) so that your stack and history are available across your devices. You can disable sync, revoke HealthKit permission in iOS Settings → Privacy & Security → Health, or delete your account at any time to remove this data.
What we never do with HealthKit data: we do not sell it, share it with third-party advertisers or data brokers, use it for advertising, share it with employers or insurance companies, or use it for any purpose other than providing the in-app features you have asked for.
We rely on a small set of trusted processors to operate the service:
Your data is retained while your account is active. You can delete individual entries at any time, clear all local data from Settings, or delete your account from Settings → Account → Delete Account. Account deletion permanently removes your stored profile, stack, logs, journal entries, and any synced HealthKit-derived values from our servers within 30 days.
We use HTTPS for all transport, hash passwords with industry-standard algorithms, and restrict server access to authenticated requests scoped to your user. No system is perfectly secure, but we follow current best practices and continuously improve.
Supplemented is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the account.
Depending on where you live (including the EEA, UK, and California), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly inside the app, or by emailing us at privacy@supplemented.life.
If we materially change this policy we will update the "Last updated" date and, where appropriate, notify you in-app before the change takes effect.
Questions or requests? Email privacy@supplemented.life.