Privacy Policy

SuppLab — Supplement Tracker

1. Who We Are

SuppLab is developed by Umay, an independent developer. You can reach us at https://umay.dev. SuppLab is an educational supplement app; it is not a medical device and does not provide medical advice.

2. Information We Collect

The developer does not collect or receive any personal information from you. The app requires no account, name, email address, or login. The following information is created and stored locally on your device only and is never sent to us:

• App data you enter — your supplement stack, experiments, daily check-ins, intake logs, reminder settings, and optional cost figures, stored on-device using Apple’s on-device database.
• Apple Health (HealthKit) data — if you grant permission (see Section 4).
• Camera input — only while you actively use the label scanner (see Section 5).

Because we never receive your data, we cannot sell it, share it, or expose it in a breach.

3. Data You Create Locally

Information you enter into SuppLab is stored locally using secure iOS storage. This data:

• Never leaves your device through the app.
• May be included in an iCloud backup if you have iCloud Backup enabled for this app in your device settings. That backup is governed by Apple’s Privacy Policy, not ours.
• Can be deleted at any time from Settings → Delete All Data in the app, or by uninstalling the app.

4. Apple Health (HealthKit)

If you grant permission, SuppLab reads the following read-only metrics from Apple Health to build your personal baseline and measure supplement effects during experiments:

• Sleep analysis
• Heart rate variability (HRV / SDNN)
• Resting heart rate
• Step count

This is entirely optional. If you decline, or your device has no Health data, the app continues in a manual mode using a 10-second daily check-in. Regarding HealthKit data, we commit that SuppLab:

• Processes it on your device only and never uploads it (there is no server to upload to).
• Never uses it for advertising or marketing, and never sells or discloses it to any third party.
• Does not write any data back to Apple Health — access is read-only.

You can revoke the app’s Health access at any time in iOS Settings → Privacy & Security → Health.

5. Camera (Label Scanning)

If you use the label scanner, the camera image is analyzed on your device (using Apple’s Vision framework) to recognize supplement ingredient names and match them to the in-app library. Images are processed transiently in memory and are never stored, saved, or uploaded. SuppLab does not identify products or brands. You can decline camera access and use manual search instead.

6. Third-Party Services

SuppLab does not integrate any third-party analytics, advertising SDKs, crash-reporting services, or social media SDKs, and does not share any data with third parties. The only third party involved is Apple: the app is distributed through the App Store, uses StoreKit for purchases, and uses HealthKit for optional local health data. Apple’s handling of your information is governed by Apple’s Privacy Policy.

7. Purchases & Payments

SuppLab offers optional subscriptions (an annual plan and a weekly plan). All payment processing is handled entirely by Apple through the App Store. We never see or store your payment information. Apple’s handling of payment data is governed by Apple’s Privacy Policy.

8. Children’s Privacy

SuppLab is intended for generally healthy adults and is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. Because the app collects no data, no special risk exists; however, if you are a parent or guardian with concerns, please contact us at https://umay.dev.

9. Your Rights

Because SuppLab does not collect or process personal data on our end, there is nothing for us to access, correct, or delete on your behalf. Your data lives on your device and is entirely under your control — viewable in the app and deletable at any time. If you are located in the European Economic Area, United Kingdom, California, or another jurisdiction with specific privacy rights, you may contact us with any questions; we will respond even if the only answer is that we hold no data about you.

10. Data Security

All locally stored data benefits from the security mechanisms provided by iOS — an encrypted file system and sandboxed app storage. Because the app does not transmit data over a network, there is no transmission-based risk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy, please contact us:

• Website: https://umay.dev
• Developer: Umay