Consumer Health Data Policy

1. What counts as consumer health data here

We only ever hold health data you typed in or uploaded yourself. Specifically:

• Your list: the supplements, medications, and regular food and drink you add, the doses and times you give them, and the record of what you added, changed or stopped
• Health profile: medical conditions, medications, allergies, age range, sex, pregnancy status, and any concerns you type in
• Lab values you type in: for each report, the results you enter (the test, the value and unit, and the lab's own range and flag if you add them), the date the sample was collected, the lab's name if you give one, and the time you ticked the consent box for that report. There is no upload, and no name, date of birth or patient number is kept. Section 4 of the Privacy Policy has the detail.
• Your notes, if you turn them on: the reasons you give when you change or stop something; notes on how you have been (better or worse than usual, or just a note; an area such as sleep or mood; how much it got in the way; up to 200 characters in your own words; the day it is about); your check-in answers; the weeks you chose to keep notes for; and the time and wording of the consent you gave. We also count, on our own servers and without reading any note, how often notes are printed and check-in cards are shown and answered, how you answer if you choose to answer whether notes are useful, and how often notes are turned on, turned off or cleared.
• Derived genetic data: the nutrition-relevant variants and genotypes extracted from a raw DNA file you upload, and the notes written from them. The raw file itself is parsed in memory and never stored.
• Answers to food questions the list asks only when they matter (for example, whether you eat leafy greens most days), and, for accounts created before September 2026, the kitchen and dietary settings entered then
• Supplement label photos you scan. We process these in the moment and never store them.

We do not collect health data from any other source. We do not buy it, we do not infer it from your browsing, and we do not receive it from third parties.

2. Why we collect it

• To run the interaction check on your list, lay out My day, and produce the DNA report you asked for
• To set daily limits for your age range and pregnancy status
• To keep your list and its history, check it again when it or our rules change, and show your lab values beside it
• To keep your notes, show them to you and print them when you ask; and, without reading any note, to count how often check-in cards are shown and answered, how often notes are printed, how many list changes get a reason or a notes window, how people answer whether notes are useful, and how often notes are turned on, turned off or cleared, so we can decide whether to keep, change or remove Notes. We collect notes only after you turn them on with a clear opt-in that names these purposes, and we keep the time and the wording you agreed to. Notes are never used to run the check, for advertising, or to train any model.

That is the whole list. We do not use health data for advertising, profiling, training our own models, or any purpose you did not ask for.

3. Who we share it with

We do not sell consumer health data. We have never sold it, and we will not — no monetary or other valuable consideration, to anyone. We therefore do not collect the separate written authorizations that a sale would require under MHMDA, because there are no sales to authorize.

We share it only with the processors that run the service, named here by kind. We will tell anyone who asks which companies they are (write to privacy@canistackthis.com):

• Our database provider — stores your account, your list and its history, your notes, health profile, lab values and derived gene results. It also sees your IP address each time your browser or phone contacts it (for example to sign you in or load your account), and at times when your session is renewed.
• An outside AI provider — receives a label photo you scan, and any other bottles in the shot, in order to read it, and, for a stack you saved on the old version of this site, the items in it. It never receives your lab values, and it does not receive your health profile or anything from your DNA file or DNA results. Under the AI provider's API terms that data is not used to train its models. We do not send your name, email or account id. It never receives your notes.
• Our hosting provider — hosts the application and its logs
• Our email provider — sends the emails you opted into, which can name entries on your list. Notes are never put in an email.

Payment companies (a payment processor on the website, and Apple and an in-app purchase provider in the iPhone app) learn which plan or report you bought. Push services (your browser's, or Apple's in the iPhone app) carry the notifications you turn on. None of them receives your list, health profile, lab values or gene results, and a notification never names what you take. If you use “Say it” to add things by voice, your browser or phone may send your voice to its maker to be turned into text; we receive only the text.

These are service providers acting on our instructions, not independent recipients. Google Analytics measures site usage and is described in section 7 of the Privacy Policy, including how to opt out; it does not load on the pages that show your list, My day, your notes, labs, DNA results or account, and your health profile, notes and gene results are never sent to it.

A security-check provider checks that a person, not an automated program, is using the sign-in, sign-up and password-reset forms, while the check is in use. It then receives your IP address and technical details of your browser or phone, never what you type, and never your list, health profile, notes, lab values or gene results. It also uses those technical signals to improve its own detection of automated programs.

We also disclose health data if the law compels us to, or to protect someone from harm. If that ever happens and we are permitted to tell you, we will.

4. How long we keep it

Until you delete it. There is no automatic expiry — your list and its history, your notes, health profile, lab values and derived gene results stay in your account until you remove them or delete your account, and then they are deleted from our live database immediately. The one limit is on lab reports: we keep your twelve most recent, and saving a thirteenth drops the oldest. If an encrypted backup copy holds something you deleted, it is replaced or deleted within six months of your request (the limit RCW 19.373.040(1)(c)(iii) allows), and if a backup is ever restored, every deletion is applied again first. We never store raw DNA files or label photos.

5. Your rights

• Confirm and access. Email us from the address on your account and we will send you everything we hold about you, including the list of processors above.
• Delete. In the iOS app, Account → Delete account permanently erases your list and its history, your notes, health profile, lab values, gene results, anything saved before September 2026, and your login — immediately from our live database (section 4 says how backups are handled). On the website, Account → Delete my account does the same, or email us and we will do it for you. To delete only your gene results, use the Delete button on the DNA report page; to remove a single lab report, email us. To delete your notes, use Delete on any note, or Clear all my notes on Your notes or in Account. Under MHMDA we also pass a deletion request to our processors.
• Withdraw consent. Deleting the data withdraws the consent you gave when you saved it. You can also withdraw by emailing us, and we will delete it for you. For notes, you can also turn them off on Your notes or in Account at any time; nothing new is kept after that, and what you already wrote stays until you delete it.
• Appeal. If we refuse a request, we will tell you why and how to appeal. If we deny the appeal you may complain to the Washington Attorney General at atg.wa.gov/file-complaint, or to your own state's regulator.

To exercise any of these by email, or to ask us to do it for you, write to privacy@canistackthis.com. We will verify that the request comes from the account holder, and respond within 45 days. There is no charge, and using these rights never degrades the service you get.

6. Changes

If we change how we handle consumer health data we will update this page and its date, and we will not apply a materially different practice to data we already hold without asking you first.

7. Contact