Privacy Policy

Last Updated: October 12, 2025

Effective Date: October 12, 2025

1. Introduction

At FuelStack, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use the FuelStack mobile application (iOS) and website (thefuelstack.com).

By using FuelStack, you agree to the collection and use of information in accordance with this policy. If you have any questions about this Privacy Policy, please contact us at privacy@thefuelstack.com.

2. Information We Collect

2.1 Account Information

  • Email address (for authentication)
  • Name (optional)
  • Authentication provider data (if you sign in with Google or Apple)

2.2 Profile Information

  • Age
  • Gender
  • Height and weight
  • Fitness goals (e.g., muscle gain, weight loss, endurance)
  • Preferred units (metric/imperial)

2.3 Supplement Data

  • Supplements added to your stack
  • Dosage and timing preferences
  • Daily check-off logs (timestamps)
  • Streak data and history

2.4 Usage Data

  • App interaction data (features used, screens viewed)
  • Device information (iOS version, device model)
  • Crash reports and error logs

2.5 Notification Preferences

  • Reminder times and frequencies
  • Notification opt-in/opt-out status

2.6 Data We DO NOT Collect

  • Payment information (Apple handles all transactions)
  • Precise location data
  • Health data from Apple Health
  • Contacts or photos
  • We do NOT sell or share your data with third parties for advertising

3. How We Use Your Information

We use the information we collect to:

  • Provide core app functionality (reminders, tracking, recommendations)
  • Personalize supplement recommendations based on your fitness goals
  • Send notifications at your scheduled times
  • Sync your data across devices (if logged in)
  • Improve app performance and fix bugs
  • Communicate important updates or changes
  • Respond to support requests

4. Data Storage and Security

4.1 Storage Provider

All data is stored securely using Supabase (hosted on AWS). Our database uses industry-standard encryption:

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Row Level Security (RLS) policies ensure users can only access their own data

4.2 Security Measures

  • Secure authentication via OAuth 2.0
  • Regular security audits and updates
  • Automated backups and disaster recovery

4.3 Data Retention

  • Account data retained as long as your account is active
  • You can request data deletion at any time (see Section 7)
  • Deleted data is permanently removed within 30 days

5. Third-Party Services

5.1 Authentication

  • Google OAuth (Google Sign-In)
  • Apple Sign-In

5.2 Backend & Database

5.3 No Advertising

FuelStack does not use advertising networks or share data with advertisers.

6. Data Sharing and Disclosure

We do NOT sell your personal information to anyone.

We do NOT share your data with third parties for marketing purposes.

Limited disclosure only occurs in these cases:

  • With your explicit consent
  • To comply with legal obligations (court orders, subpoenas)
  • To protect our rights or safety (fraud prevention)
  • In event of business transfer (merger, acquisition) - users will be notified

7. Your Privacy Rights

7.1 Access Your Data

7.2 Update Your Data

  • Edit profile information anytime in the app
  • Change supplement stack and preferences

7.3 Delete Your Data

  • Delete your account in app settings (Profile → Delete Account)
  • Request deletion via email: support@thefuelstack.com
  • All data permanently deleted within 30 days

7.4 GDPR Rights (EU Users)

  • Right to access, rectification, erasure, restriction, portability
  • Right to object to processing
  • Right to withdraw consent
  • Contact: privacy@thefuelstack.com

7.5 CCPA Rights (California Users)

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of data sale (note: we do not sell data)
  • Non-discrimination for exercising rights

8. Children's Privacy

FuelStack is intended for users 13 years and older. We do not knowingly collect data from children under 13. If we discover data from a child under 13, we will delete it immediately.

Parents can contact us to request deletion: privacy@thefuelstack.com

9. Changes to This Policy

We may update this policy periodically. Users will be notified of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

The last updated date is always displayed at the top of this policy.

10. Contact Us

For privacy questions or requests:

Response time: We aim to respond within 5 business days.