Your data, plainly.

Only what the product needs to work:

• Account details — your email address, and the authentication record that goes with it.
• Health data you add or sync — blood test results, vitals and metrics, medications, stacks, your schedule, and your dose history.
• Assistant conversations, if you use the assistant.
• Basic usage analytics to understand which features are used. This never includes your health values.

We don’t sell your data. We don’t use it for advertising. We don’t build a profile of you for anyone else.

If you connect Apple Health in the iOS app, Whatstack reads the metrics in its catalog — things like weight, sleep, heart rate, steps and workouts — and stores them in your Whatstack account so they sit alongside your bloodwork and your stack.

• Read-only. The app never writes anything back to Apple Health.
• Never sold. Health data is never sold, rented or shared with data brokers.
• Never used for advertising or data-mining. It is used solely to show you your own data and to power features you choose to use.
• You control it.You can stop syncing at any time in the app, or revoke access entirely in Apple’s Health app. Stopping the sync leaves what’s already in your account — deleting is a separate, explicit action.

When you send a message to the assistant, that message and relevant context from your account — which may include health data you have added, such as your stack, schedule or recent lab values — are sent to our AI provider, Anthropic, solely to generate your answer.

It is not used to advertise to you, and it is not sold. If you never use the assistant, nothing is sent.

The assistant proposes changes rather than making them: any action that would write to your account is shown to you first and only happens when you confirm it.

Your data lives in a Postgres database hosted by Supabase, protected by row-level security so an account can only ever read and write its own rows. Access is over encrypted connections.

No system is perfectly secure, and we won’t pretend otherwise. What we can say is that we hold as little as the product needs, and we give you a one-tap way to remove all of it.

You can delete your account at any time — in the iOS app under Settings → Delete account & all data.

Deleting removes your account and everything attached to it: labs, vitals, stacks, schedule, dose history, medications, goals and assistant conversations. It is immediate and cannot be undone. There is no “email us to delete” step.

The website uses a small number of cookies to keep you signed in, and privacy-respecting product analytics to count feature usage. We don’t run advertising trackers.

Whatstack is not intended for anyone under 18, and we don’t knowingly collect data from children.

If this policy changes in a way that materially affects you, we’ll update the date at the top and, where the change is significant, tell you in the app.

Questions about privacy, or a request about your data: wellness@whatstack.com.

See also the Terms of Use. Whatstack is an educational reference and a personal tracking tool — not medical advice.