Consumer Health Data Privacy Notice

Last updated: March 17, 2026

This Consumer Health Data Privacy Notice is provided pursuant to the Washington My Health My Data Act (MHMDA) and similar state laws. It describes the categories of consumer health data we collect, how we use it, and your rights regarding that data.

Scope

This notice applies to “consumer health data” — information that identifies you and is linked to your health status, healthcare, or health-related activities. StackTrack collects such data when you use our application to track medications, supplements, protocols, and related information.

Categories of Consumer Health Data We Collect

We may collect the following categories of consumer health data:

Medication and supplement information: Names of medications, supplements, and peptides you take; dosages; forms (tablet, capsule, injectable, etc.); and schedules.
Dosing and compliance data: Records of when you took (or skipped) doses; notes you add to dose logs; injection sites.
Protocol and program data: Treatment or wellness programs you create; phases (e.g., ramp-up, maintenance, taper); duration and frequency of use.
Body measurements and symptoms: If you use these features, we store body measurements (e.g., weight) and symptom logs you enter.
Person-related health data: If you track for others (e.g., family members), we store names, dates of birth, and the health-related data you enter for them.

Purposes for Collecting and Using Consumer Health Data

We collect and use consumer health data solely to:

Provide the StackTrack application and its features (schedules, dose tracking, inventory, calendar export, AI assistance)
Maintain and improve the Service
Comply with legal obligations
Protect against fraud and abuse

We do not use consumer health data for advertising or marketing. We do not sell consumer health data.

Sources of Consumer Health Data

Consumer health data is provided directly by you when you use the application. We do not collect consumer health data from third parties except where you authorize it (e.g., signing in with a third-party provider, which does not provide health data).

We share consumer health data only with:

Service providers (e.g., Supabase, Vercel) who host and operate the Service under contracts that require them to protect your data and use it only to provide the Service.
Legal and regulatory authorities when required by law.

We do not sell or share consumer health data for cross-context behavioral advertising.

Your Rights

Depending on your location, you may have the right to:

Know: Request information about the consumer health data we have collected about you.
Access: Request a copy of your consumer health data.
Delete: Request deletion of your consumer health data.
Withdraw consent: Where we rely on your consent to collect or use consumer health data, you may withdraw that consent at any time.
Non-discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law. You may also export or delete your data through the application’s Settings.

Authentication

To protect your privacy, we will take steps to verify your identity before fulfilling requests to access, correct, or delete consumer health data.

Changes to This Notice

We may update this notice from time to time. We will post the updated notice on the Service and update the “Last updated” date. Your continued use of the Service after such changes constitutes acceptance of the updated notice.

Contact

If you have questions about this notice or your consumer health data, contact us at [email protected].