Privacy Policy

Stack Track · Last updated November 13, 2026

This policy explains what Stack Track collects, why, who receives it, how long we keep it, and the choices you have. Stack Track is provided by Wogi Inc. ("we", "us"), 305 Glenwood Drive, Briarcliff Manor, NY 10510, USA, which decides how your information is used and is responsible for it. Questions: info@wogi.io.

It covers the Stack Track mobile app, these web pages, and email you exchange with us. Stack Track is for adults. We are a company in the United States and your information is processed there, wherever you live. Sections 1 to 10 apply to everyone. Sections 11 to 16 add what applies where you live, and where the law of your country gives you more than this policy describes, you have that too.

1. What we collect

We do not collect your precise location, contacts, photo library or advertising identifier, and the app does not read data from Apple Health or Health Connect.

On your device. The app keeps a copy of your information on your device so that it opens quickly and works without a connection. Signing out or deleting your account removes that copy. Reminders are created on your device, not sent from our servers; they name the items that are due only if you turn on "Show names in reminders". A history export is a file created on your device, and it goes only where you send it.

2. How we use it

• To run the app: keep your stack, show what is due, schedule the reminders you turn on, and create your history and exports.
• To tailor general wellness information: your profile, the reasons you give and your health details are used to adjust suggested amounts and timing, and to tell you when you should speak to a doctor instead.
• To read labels you scan and match them to our supplement catalog.
• To manage subscriptions and restore purchases.
• To keep the service secure, prevent abuse, fix problems, answer your messages and understand, in aggregate, how the service is used.
• If you agree, to study in aggregate how supplement use relates to wellbeing, as described in section 4.
• To decide what to research next: if you are a Premium subscriber and add a supplement that is not in our catalog, the name you typed is added to our list of supplements to research. While your account exists we record that your account asked, so that each person is counted once. Items you mark as medication, peptide, hormone or other are never added to that list.
• To meet legal obligations and to establish or defend legal claims.

We do not sell your personal information. We do not use it for advertising, and the app shows no ads. We do not collect, use or sell personal information to train large language models or other artificial intelligence models.

Automated suggestions. The amounts and timing the app suggests are worked out automatically, by fixed rules, from our catalog and what you entered. They are general information that you are free to ignore. We make no decision about you by automated means that has a legal or similarly significant effect.

3. Health information

Health details, your profile measurements, the list of what you take, your reasons for taking it and your records are sensitive.

• Health details are optional. The app asks for your consent before you save them, and the app works without them.
• We use health information only to provide the features described in section 2, and, only if you separately agree, for the research described in section 4.
• We do not sell it, use it for advertising, or give it to data brokers, insurers or employers.
• You can change your answers at any time in Settings → Health details. "Remove my health details" there withdraws your consent and erases them. You can also ask us by email, and deleting your account erases everything.

If you live in the United States, our Consumer Health Data Privacy Policy sets this out in the form that Washington and Nevada law require.

4. Research with de-identified information

One person's experience with a supplement says very little. The same pattern across thousands of people can show something real. If you choose to take part, your information may be included, in de-identified form, in statistics about groups of people. No study has started yet. This section sets out the rules we commit to before any does.

• Only with your permission. The app asks you once, with a clear yes or no, and you can change your answer at any time in Settings → Research participation. Saying no changes nothing about how the app works for you.
• What is used. What you track and when, your records of what was taken, the reasons you gave, general profile details such as age range and sex, your health details, and any health measurements you later choose to connect to the app.
• How it is de-identified. Before any analysis we remove your name, email address, account and device identifiers and IP address; replace your date of birth with an age range and exact dates with general time periods; and leave out notes and other free text you typed. We study groups, not individuals, and we do not report results for groups small enough to point to one person.
• Our commitment. We will keep and use this information only in de-identified form, and we will not try to work out who anyone is. If we work with research partners, they receive only de-identified information and must agree in a contract to the same rules, including not trying to identify anyone and not passing it on without those rules.
• What this cannot promise. No method removes every risk that a person could be recognised from detailed records. We reduce that risk with the steps above, but we do not describe this information as anonymous.
• What we do with the results. We use them to improve the information in the app, and we may publish or share findings as statistics about groups.
• Oversight. Before a study begins we will obtain the independent ethics review that the law or the app stores' rules require for it, and we will update this section.
• If you change your mind. Turn it off in Settings and your information is left out of all later analyses. Results that were already produced cannot be undone, because they are statistics that no longer point to you.

Findings from this research are observations about groups. They are not medical advice and do not show what will happen for any one person. Questions about research: info@wogi.io.

5. Who receives information

We use service providers who process information for us. Each provider that handles personal information is bound by a contract that requires it to protect that information and to use it only to provide its service, with the same or equal protection as this policy describes. They are in the United States.

• Apple and Google — sign-in. Apple or Google Play also handles payment for subscriptions bought through its store.
• RevenueCat — subscription status. It receives an account identifier and the purchase record from the store. We do not send it your name or email address.
• Google Firebase (Crashlytics) — crash reports. It receives technical information about the error, your device and the app, and an identifier for the app installation. Reports carry no account identifier, and we do not send it what you enter in the app. We do not use Google Analytics or any other analytics or advertising service in the app.
• Anthropic — an artificial intelligence provider that reads the label photos you take, after you have given permission. We send only the photos, without your name, email address or account. We do not keep the photos. Anthropic states that it deletes them within 30 days and does not use them to train its models. Photograph only the product label.
• Public label databases (the US National Institutes of Health Dietary Supplement Label Database and Open Food Facts) — receive only the barcode number being looked up. The request comes from our servers and carries nothing that identifies you.
• Expo — delivers app updates. It receives technical information such as your IP address, app version and an installation identifier.
• Hosting and database providers — store the service's data on our behalf.

We do not share your information with advertisers or data brokers, and no other company collects information through the app to follow what you do across other apps or websites.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

6. How long we keep it, and deletion

• While you have an account we keep your information. Removing an item from your stack takes it off your schedule; its past records stay in your history until you delete your account or ask us to erase them.
• When you delete your account in the app (Settings → Delete account), your profile, health details, stack, records and consents are deleted from our live systems immediately. This cannot be undone. If you no longer have the app, see how to delete your account.
• Backups are overwritten within 30 days.
• Server logs, which contain your account identifier and IP address, are deleted within 30 days.
• Requested supplements. The name of a supplement you asked us to research stays on our list, with no link to you.
• Purchases. When you delete your account we ask our subscription provider to delete its record of you. Apple or Google keep purchase records under their own rules. Deleting your account does not cancel a subscription; cancel it in your Apple or Google Play account.
• Crash reports held by Google Firebase are not tied to your name or account and expire on Google's schedule, after about 90 days.
• What we may keep. Records we are legally required to keep, messages you sent us, and information that no longer identifies anyone, such as aggregated research results.

7. Your choices and rights

In the app you can:

• See and export: your stack and history are visible in the app, and you can export your history as a document.
• Correct: edit your profile, health details and items at any time.
• Withdraw a consent: remove your health details, switch off "Read label photos", or switch off research participation, in Settings. Withdrawing is as easy as agreeing, and it does not affect what was done before.
• Delete: remove items, or delete your whole account.
• Reminders: turn notifications on or off in the app or in your device settings.

Wherever you live, you can also ask us to:

• confirm whether we hold information about you, and give you a copy of it in a portable format;
• correct information that is wrong;
• delete some or all of your information;
• stop collecting or using information that depends on your consent;
• tell you which other companies have received your information.

How to ask. Email info@wogi.io from the email address on your account, or tell us that address, and say what you want. We may send a message to the account's address to confirm the request is yours. Someone you authorise may ask for you if we can confirm that with you. We answer as soon as we can, and always within the time the law where you live sets: for example one month in Europe, 30 days in Canada and 45 days in the United States. We do not charge for reasonable requests, and we will not treat you differently for using any of these rights.

8. Children

Stack Track is for adults. It is not intended for anyone under 18, or under the age of majority where you live if that is higher, and we do not knowingly collect information from them. If we learn that someone under 18 has an account we will delete it, and if you believe a child has given us information, contact us and we will delete it.

9. Security

We protect information with encryption in transit, access limited to the people and providers who need it, and other safeguards appropriate to its sensitivity. Protect your device with a passcode, because the app keeps a copy of your information on it. No service can promise perfect security. If we learn of a breach that affects your information, we will notify you, and the authorities where required, as the law that applies to you requires.

10. Where information is processed

We are based in the United States, and our servers and the providers in section 5 are there. When you use the app, your information goes directly from your device to us in the United States, wherever you live. Some providers may also process information in other countries where they operate.

The law in the United States is different from the law in your country and may give you fewer rights. Courts, law enforcement and national security authorities in the United States can, under US law, require companies there to hand over information. We protect your information as this policy describes wherever it is processed.

11. United States residents

This section applies if you live in the United States.

Health information. Our Consumer Health Data Privacy Policy describes separately how we handle consumer health data and the rights you have over it, as Washington and Nevada law require.

Timing and appeal. We answer a request under section 7 within 45 days; if a request is complex we may take up to 45 days more and will tell you why. If we refuse, reply to our answer and say you want to appeal. We will review the request again and tell you in writing, within 45 days, what we decided and why. If the appeal is refused, you can complain to your state's attorney general, for example in Washington, Nevada or Connecticut.

Sale, advertising and tracking. We do not sell personal information, use it for targeted advertising, or profile you in ways that produce legal or similarly significant effects, so there is nothing to opt out of. Because we do not track you across other apps or websites, nothing changes when a browser sends a Do Not Track or Global Privacy Control signal. These pages set no cookies.

Breaches. If your health information is involved in a breach, we will notify you and the authorities as the Federal Trade Commission's Health Breach Notification Rule and state law require.

12. European Economic Area, United Kingdom and Switzerland

Stack Track is not yet offered in the European Economic Area, the United Kingdom or Switzerland. This section sets out how we will handle your information from the day it is offered where you live.

Who is responsible. Wogi Inc., at the address in section 18, is the controller of your personal data. It is not established in the European Union or the United Kingdom. Contact for data protection questions: Privacy Officer, info@wogi.io.

Our representatives in the European Union and the United Kingdom: not yet appointed. We will name them here, with their addresses, before Stack Track is offered in those places.

Why we may use your information. The law lets us use personal data only where it gives us a basis. For information about your health it also requires your explicit consent.

Do you have to give us information? Your name, email address and sign-in identifier are needed to create an account; without them you cannot use the app. Everything else is your choice. The app can only track what you enter, and it works without health details, label photos and research.

Transfers to the United States. Your information goes directly from your device to us in the United States, and is kept there. The European Commission, the United Kingdom and Switzerland have not found that the United States as a whole protects personal data to their standard; they have recognised the Data Privacy Framework for US companies that are certified under it. When we pass your information to the providers in section 5, we do so under a contract that limits what they may do with it, and we rely on the provider's certification under that framework where it has one, and otherwise on the standard contractual clauses approved by the European Commission, with the additions the United Kingdom and Switzerland require. You can ask us for a copy of the safeguard that applies.

How long. Section 6 sets out how long we keep each kind of information.

Your rights. You have the right to:

• access your personal data and receive a copy;
• have it corrected;
• have it erased;
• have its use restricted;
• receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another service where that is technically possible;
• object to our use of it where we rely on legitimate interests;
• withdraw a consent at any time, in Settings or by email, without affecting what was done before;
• not be subject to a decision based only on automated processing that has a legal or similarly significant effect on you. We make no such decisions.

Use these rights as section 7 describes. We answer within one month; if a request is complex we may take up to two months more and will tell you why within the first month. Requests are free.

Complaints. You can complain to the data protection authority where you live or work, or where you think the law was broken: an authority in the European Economic Area, the Information Commissioner's Office in the United Kingdom, or the Federal Data Protection and Information Commissioner in Switzerland. We would like the chance to put things right first.

13. Canada

This section applies if you live in Canada.

• Who is accountable. Our Privacy Officer is accountable for how we handle your information and is the person in charge of the protection of personal information: Privacy Officer, Wogi Inc., 305 Glenwood Drive, Briarcliff Manor, NY 10510, USA, info@wogi.io. Send questions, requests and complaints there.
• Consent. We ask for your express consent before you save health details, before a label photo is sent to be read, and before your information is used in research. You can withdraw each of them in Settings.
• Outside Canada and Quebec. Your information is sent to and kept in the United States, as section 10 explains, and can be reached by courts and authorities there under US law.
• Tailored suggestions. The app uses what you choose to enter about yourself to work out suggestions. Under Quebec law this is a profiling function. It works only on details you enter, and you switch it off by removing them.
• Your rights. You can ask to see the information we hold about you, have it corrected, and withdraw consent. In Quebec you can also ask for the computerized information you gave us in a structured, commonly used technological format. We answer within 30 days.
• Complaints. If we do not resolve a complaint, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

14. Brazil

This section applies if you are in Brazil, where the Lei Geral de Proteção de Dados (LGPD) applies.

• Controller and contact. Wogi Inc. is the controller. Our contact for data protection matters (encarregado) is the Privacy Officer, info@wogi.io.
• Why we may use your information. Your specific consent, asked for separately in the app, for health details, label photos and research; the contract with you for your account and for the tracker you asked for; our legitimate interests for security, logs and crash reports; and legal obligations.
• Outside Brazil. Your information is collected directly by us in the United States and kept there, as section 10 explains.
• Your rights. You can ask us to confirm that we process your data; give you access; correct it; anonymise, block or delete data that is unnecessary or excessive; give you your data in a portable form; delete data processed with your consent; tell you with whom we shared it; and tell you what happens if you refuse consent. You can withdraw consent at any time.
• Complaints. You can complain to the Autoridade Nacional de Proteção de Dados or to a consumer protection body.

15. Australia

This section applies if you live in Australia.

• What we collect and hold, how and why is set out in sections 1 to 6. Health information is sensitive information; we collect it only from you, with your consent.
• Overseas. We are in the United States and your information is held there, by us and the providers in section 5.
• Access and correction. You can see and correct most of your information in the app, and ask us for the rest as section 7 describes.
• Complaints. Email info@wogi.io and say what went wrong. We will acknowledge your complaint, look into it and answer in writing within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner.

16. Other countries

If you live somewhere else, sections 1 to 10 describe what we do with your information. You can use the rights in section 7 wherever you live. Where your country's law gives you further rights, for example to object to a use of your information or to complain to a data protection authority, you have them, and we will honour a request made under that law. This policy is in English.

17. Changes

If we change this policy in a way that matters, the app will show you the new version and ask you to accept it before you continue. If we want to use health information for a new purpose, or collect a new kind of it, we will ask for your consent first. The date at the top shows when the policy was last updated.

18. Contact

Wogi Inc., 305 Glenwood Drive, Briarcliff Manor, NY 10510, USA · info@wogi.io