Privacy policy
Last updated August 21, 2026. Effective August 21, 2026.
Using the app without an account
Since version 1.1.0 an account is optional. On a device with no account, your profile, your supplements, your daily entries and your reminder settings are stored in the app’s own storage on the iPhone.
- We do not receive that data, and we cannot read it.
- The catalogue of 26 supplements is bundled in the app, so it is not fetched from anywhere.
- Reminders are local notifications scheduled by iOS. There is no push server behind FuelStack.
- Deleting the app deletes that data with it.
What we collect if you create an account
An account exists so your data survives a reinstall and reaches a second device. Creating one is the moment data starts leaving the phone. What is stored then:
- Account. Email address, and the identifier Apple returns if you use Sign in with Apple.
- Profile. Age, gender, height, weight, athletic goals and your preferred units. Height and weight are used to work out doses that are expressed per kilogram.
- Supplements. The supplements in your stack, your doses, your timings and any notes, including ones you added yourself.
- Entries. Which supplement was ticked off, and when. Unticking removes the entry.
- Reminders. Which slots are on and at what times.
What we never collect
- Payment details. There is nothing to buy in the app, and Apple would handle it if there were.
- Location, in any form.
- Apple Health data, contacts, photos, or the microphone and camera.
- Advertising identifiers. There is no advertising in FuelStack and no advertising network in it.
- Analytics. There is no analytics or crash-reporting SDK in the app. Apple may pass us aggregated crash reports through App Store Connect if you allowed that in iOS Settings, and those contain no personal data.
We do not sell your data. We do not share it with anyone for advertising or marketing. There is no third party we hand it to for profiling.
Where account data is stored
Account data is held in a Supabase project hosted on Amazon Web Services in the European Union. It is encrypted at rest and in transit, and every table is protected by row level security, which means a query can only ever return rows belonging to the account that made it.
The only third parties involved are Supabase, as the database and authentication provider, and Apple, if you choose Sign in with Apple.
Your rights
- Take a copy. Profile, then Security & Privacy, then Export Your Data. It produces a JSON file, with or without an account, and it does not need our help.
- Correct it. Every field is editable in the app.
- Delete it. Same screen. With an account, Delete Account removes the account and its rows for good. Without one, Erase All My Data clears the device.
- In the EU and the UK, you have the right to access, rectification, erasure, restriction, portability and objection under the GDPR, and the right to withdraw consent at any time.
- In California, you have the right to know what is collected and to have it deleted. We do not sell personal information, so there is nothing to opt out of.
Anything you cannot do yourself, ask at privacy@thefuelstack.com. Deleted account data is removed within 30 days.
This website
thefuelstack.com sets no cookies, runs no analytics, and embeds nothing from a third party. There is no form on it and no newsletter. That is why you were not asked to accept anything on arrival.
Children
FuelStack is for people aged 13 and over. We do not knowingly collect data from children under 13. A parent or guardian who believes we have can write to privacy@thefuelstack.com and it will be deleted.
Changes, and how to reach us
If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top of this page is always the current one.
Privacy questions: privacy@thefuelstack.com. Anything else: support@thefuelstack.com or the support page. Replies within five working days.