Privacy Policy
Last updated: September 15, 2026
This policy describes the data SuppMatch handles, its purposes, and the controls available to you. Health analysis and photo recognition have separate consent steps, and you may choose not to enable them.
1. Data Collection
We process the email and authentication details used for your account, and the product lists, intake plans, check-in records, and reports you choose to save. Your health profile may include age range, health goals, allergies, and medications that you enter. Photo recognition processes only images you select and consent to send. Reviewed text is saved only after you confirm adding it. Technical records are also used to maintain sessions, prevent abuse, and diagnose errors.
2. Data Usage
Data supports product search and comparison, personal lists, calculations of planned and recorded supplement amounts, and reports you request. Results are not diagnoses or personal dosage prescriptions. Reminders are scheduled only when enabled with device notification permission. Photo recognition and health analysis follow their respective consent status; withdrawal stops subsequent processing for that feature.
3. Data Storage
Account-linked lists, intake records, health profiles, and saved reports are stored in the Supabase backend. Intake records are not stored only in your browser. The native app uses secure device storage for sessions, while the website uses browser storage for sessions and preferences. Exports create temporary JSON files for you to save or share. Copies you save or send are managed by you and the receiving service; deleting your account does not recall these copies. Account deletion removes attributable personal data and saved reports. Payment records retain only minimum reconciliation fields, with direct account identifiers, health content, and raw payment callbacks removed. The transaction retention period must be confirmed for the actual accounting arrangement.
4. Third-Party Sharing
We do not sell your personal data. Supabase provides backend data services, and Cloudflare provides website hosting. Health analysis and photo recognition use Google Gemini. Required content is sent only after consent and when you initiate the corresponding feature. Photo recognition does not save images in SuppMatch database tables or a cloud photo album; device caches and provider handling depend on their settings and policies. We do not claim that every provider offers zero data retention. When you export or share, the app or service you select receives the file. External payment services process transactions under their own procedures. Deleting SuppMatch does not cancel an external subscription.
5. Cookies and Local Storage
The website uses cookies or browser storage for sessions and preferences. The native app also stores session details, reminder settings, and retry identifiers for deletion or report requests. Browser or device settings let you manage local data, which may affect sessions and recovery of interrupted requests.
6. Your Rights
You can view and edit health information, product lists, and intake plans in the app. The Account Data page exports data attributable to your account. Exporting is optional and is not required before deletion. Account deletion requires password verification and confirmation, and also removes purchased reports. If the feature is not enabled, an error occurs, or you need help with legacy data not linked to an account, use the contact below. Withdrawing health or photo consent is not full account deletion and cannot recall data already delivered to third parties.
Contact Us
If you have any questions or suggestions regarding this Privacy Policy, feel free to contact us at: support@suppmatch.com