Privacy Policy

1. What We Collect (and Why)

We only collect information when we have a reason to — usually because the service can't work without it. You give some of it to us directly when you:

• Analyze supplement combinations on our platform
• Create an account or save a stack
• Add optional health details (conditions, medications, allergies) to personalize your analysis
• Contact us for support
• Subscribe to our newsletter
• Report inaccurate supplement information

Like nearly every website, we also collect some information automatically when you visit:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Supplement queries and analysis interactions

2. How We Use Your Information

We use what we collect to:

• Provide and improve our supplement analysis services
• Understand how the site is used so we can make it better
• Respond to your inquiries and support requests
• Send important updates about our services
• Prevent fraud and keep the platform secure
• Comply with legal obligations

That's the whole list. We don't use your information to sell you supplements, and we don't run ads.

3. When We Share Information — and When We Never Do

We do not sell or trade your personal information. We share it only:

• With your explicit consent
• With service providers who help us run the site (hosting, payments, email) — and only so they can provide those services to us
• When required by law or to protect our rights

If the company ever changes hands: if CanIStackThis is ever acquired or merges with another company — we have no plans for that, but we'd rather be straight with you — your data would move with the service. Two things would not change: any new owner would still be bound by the genetic-data promises in this policy, and, where the law allows, we would notify you before any transfer so you can delete your data first.

4. Your DNA Data (Genetic Information)

Our optional DNA-based supplement analysis is built around data minimization. If you choose to use it:

• Processed in memory, never stored: When you upload a raw DNA file, it is parsed in server memory to extract nutrition-relevant genetic variants. The raw file itself is never written to disk or long-term storage and is discarded as soon as processing completes.
• Only derived results are saved: We store only your derived gene results and supplement insights (the specific variants analyzed and their recommendations) in your account — never your complete raw genome file.
• Explicit consent: DNA analysis only runs after you actively consent at upload time, and the moment of that consent is recorded.
• Your right to delete: You can permanently delete your genetic results at any time from the DNA analysis page. Deletion is immediate and removes the derived data from your account.
• No sale or third-party sharing: We never sell your genetic data or share it with third parties for advertising.

5. How We Protect Your Data

Honest truth first: no method of transmission or storage is 100% secure, and we won't pretend otherwise. Here is what we actually do:

• Encryption in transit: all traffic to and from the site uses HTTPS/TLS.
• Row-level security: our database (Supabase) enforces row-level security rules, so no other user can ever read your records.
• In-memory DNA design: raw DNA files are processed in memory and never written to disk — there is no stored raw genome to breach.
• Minimal retention: we keep only the derived results needed to show you your analysis, not the underlying raw data.

If we ever have a data breach that affects you, we will tell you quickly and plainly.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Provide personalized content
• Improve our services and user experience

You can control cookie settings through your browser preferences.

7. Your Rights

Your data is yours. You have the right to:

• Access and review your personal information
• Request correction of inaccurate data
• Request deletion of your personal information
• Opt-out of marketing communications
• File a complaint with regulatory authorities

To exercise any of these, email privacy@canistackthis.com and we'll take care of it.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date — and we won't weaken the genetic-data promises above without telling you clearly first.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: