Privacy Policy
Last updated: July 2026
Section 1 - Information We Collect
We collect information you provide when creating an account, including your name, email address, practice information, and professional license details if you choose to enter them. We also collect information about how you use the platform, including analyses run and reports generated. If you use Supplement Intelligence as an individual rather than through a practice, we also collect the health information you enter along with your name and email address.
Section 2 - How We Use Your Information
We use your information to provide and improve Supplement Intelligence, process payments, send account-related emails, and respond to support requests. We do not sell your personal information to third parties.
Section 3 - Patient Data
Health information entered into the analyzer, including medications, conditions, and symptoms, is used to generate a supplement protocol and the report that accompanies it. Where a name and email address are provided, we store them and we encrypt them. The encryption keys are held separately from the database, so health details in our records cannot be connected to a named person by anyone who obtains the database alone. Records created through a practice account are associated with that practice.
Section 4 - Data Security
All traffic runs over encrypted connections (HTTPS). Names and email addresses are encrypted at rest using AES-256-GCM, with the encryption keys stored separately from the database. Access to your account is protected by authentication. No system is completely secure, and we cannot guarantee absolute security.
Section 5 - Cookies
We use essential cookies required for authentication and session management. We also set a small number of first-party cookies that remember where a visitor came from, so referrals to a practice or partner are credited correctly, and that remember whether a visitor has already identified themselves at a practice intake page. We do not use advertising cookies, and we do not load advertising or analytics trackers on our pages.
Section 6 - Third-Party Services
We use the following third-party services: Supabase for database and authentication, Stripe for payment processing, Resend for email delivery, Anthropic for AI-powered analysis, ElevenLabs to generate audio summaries, Shopify for store orders, Fullscript where a practice has connected their dispensary, and Vercel and Cloudflare for hosting and delivery. When an order is completed through our store, we send a confirmation of that purchase to Meta with the email address in an irreversible hashed form. Each service has its own privacy policy.
Section 7 - Information Shared With a Practice
If you complete an intake through a link or QR code provided by a practice, that practice can see your name, the date you submitted, whether you placed an order, and the nutrients recommended to you. They do not see payment details. This is how the practice follows up with the people it cares for.
Section 8 - Contact
For privacy-related questions, contact us at hello@supplement-intel.com