Privacy policy
Last updated October 29, 2026
Your health info stays private. It’s stored securely, never sold or used for ads, and you can delete it anytime. This policy explains what the Supplemented iPhone app collects, why, who processes it for us, and the choices you have. In this policy, “Supplemented”, “we” and “us” mean Yurii Ostapchuk, who publishes the app.
The short version
- We collect what the app needs to build your supplement protocol and show you how it’s going: your sign-in details, your answers about your goals and health, and what you log.
- We never sell your data, never use it for advertising, and never track you across other companies’ apps or websites.
- Usage analytics never include your health answers, scores, Goals, supplement names or anything you type. You can turn them off in the app at any time.
- Delete account in the app’s Profile permanently deletes your account and everything in it.
What we collect
Your account
You sign in with Apple or Google. We receive and store the account identifier, and the name, email address and profile photo that Apple or Google share. If you choose Hide My Email with Apple, we only receive the relay address Apple creates.
Your answers and Health Profile
To build a protocol around you, the app asks for and stores your Goals, birth date, sex, diet, training, sleep, how many supplements you want, the supplements you already take, and the times of your day (waking, meals, workout and bedtime). It also asks whether you are pregnant or breastfeeding, take prescription medication, or have a diagnosed condition, so recommendations can account for them. You can also tell us how you heard about Supplemented and what has been hardest about supplements for you; these two answers are only used to understand our audience.
Your onboarding answers stay on your iPhone until you sign in, then are saved to your account.
Your protocol and what you log
We store the protocols generated for you, the doses you mark as taken or skipped, your daily check-in scores, and anything you write when asking for a change to your protocol, such as a side effect or a supplement you want to try.
Your subscription
Purchases are made and processed by Apple; we never see your payment details. We store your subscription’s plan, status and renewal dates so the app knows what you have access to.
Feedback you send
When you send feedback from the app, we store your message, the email address you give for a reply (if any), and the app version, iOS version and iPhone model it was sent from.
Usage and diagnostics
The app records which screens you visit, how long steps take, and crash and error reports, so we can find where the app is confusing or broken. These events never include your health answers, scores, Goals, supplement names or anything you type. Your IP address is discarded and is not stored with them. Session recording is off.
Share usage data
The Share usage data switch, in Profile under Privacy & about, decides whether usage events are linked to you.
- On: events carry an identifier that stays on your iPhone and, once you sign in, is linked to your account, so we can follow one person’s path through the app. App startup timings are also measured.
- Off: events carry a temporary identifier that is discarded each time the app closes, are never linked to your account, and build no profile of you. App startup timings are not sent. Crash and error reports are still sent, so we can fix problems.
If your iPhone’s region is in the European Economic Area, the United Kingdom or Switzerland, or isn’t set, Share usage data starts off and the app asks you once on first launch. Elsewhere it starts on. You can change it at any time.
How we use it
- To build and adjust your supplement protocol.
- To show your progress, how each supplement is going, and your monthly report.
- To schedule your reminders on your iPhone.
- To provide your subscription and restore your purchases.
- To answer your feedback and support requests.
- To find and fix bugs and improve the app.
Reminders are notifications scheduled on your iPhone itself; we don’t send them from our servers.
How your protocol is generated
Protocols, and changes to them, are written by an AI model. To do that, our servers send the model your Goals, Health Profile, safety answers, current supplements, schedule and, when you ask for a change, what you wrote about it. Your name, email address and account details are never sent. Requests go through OpenRouter, which passes them to the company that runs the model. The answers it gives are stored as your protocol.
Who processes your data
We use these service providers to run the app. Each processes data only to provide its service to us.
- Convex: hosts our database and servers, where your account, answers, protocols and logs are stored.
- OpenRouter, and the AI model provider it routes to: generate your protocol from the details described above.
- PostHog, on its European Union hosting: usage analytics and crash and error reports.
- Superwall: shows the subscription screen and reports your subscription status to us. It receives your account identifier, device details and purchase events, never your health data.
- Apple: Sign in with Apple, in-app purchases and subscriptions.
- Google: Sign in with Google.
- Expo: measures how long the app takes to start, only while Share usage data is on.
Some of these providers are in the United States, so your data may be processed outside your country. Where the law requires it, these transfers are covered by safeguards such as the European Commission’s Standard Contractual Clauses.
We may also disclose data if the law requires it, or to a company that takes over the app, which would remain bound by this policy.
We don’t sell or share personal information for cross-context behavioral advertising, as those terms are defined under California law.
Legal basis
If you are in the European Economic Area, the United Kingdom or Switzerland: we process your account, protocol and subscription data to provide the app you signed up for (performance of a contract). We process your health answers only with your explicit consent, which you give by entering them, and which you can withdraw by deleting your account. We process usage data with your consent (Share usage data on), or, when it’s off, crash reports and anonymous statistics on our legitimate interest in keeping the app working.
How long we keep it
We keep your data while you have an account. When you delete your account, your account, Health Profile, protocols, logs, check-ins, subscription record and feedback are deleted at once, and your usage history in PostHog is deleted shortly after. Backups that contain it expire on their own schedule.
Deleting your account
In the app, go to Profile and tap Delete account. Deleting your account does not cancel your subscription: Apple keeps billing it until you cancel it in your iPhone’s Settings, under your name, then Subscriptions. If you can’t use the app, email us at support@thecreators.tech from the address on your account and we’ll delete it for you.
Security
Data is encrypted in transit and stored with providers that encrypt it at rest. Only you can read your data in the app; our team accesses it only to provide support or fix a problem.
Children
Supplemented is for adults only. We don’t knowingly collect data from anyone under 18. If you believe someone under 18 has given us their data, email us and we will delete it.
Not medical advice
Supplemented is not medical advice. It’s an assistant to help you navigate the world of supplements. Always consult a healthcare professional before starting any new supplement, especially if you have existing health conditions or take medications.
Changes to this policy
If we change this policy, we will update the date at the top, and let you know in advance of any significant change.
Contact
Questions or requests about your data: support@thecreators.tech. We will reply within 30 days.