Privacy Policy
Last updated: June 29, 2026
StackPeak ("StackPeak," "we," "us," or "our") provides software that helps nutrition and supplement practitioners ("Practitioners," "you") review supplement stacks for their clients. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
StackPeak is a business-to-business tool. Our direct customers are Practitioners. Client information that Practitioners enter into StackPeak is entered and controlled by the Practitioner, who is responsible for having appropriate consent from their own clients to use that information in StackPeak.
1. Information We Collect
1.1 Account information
When you create a StackPeak account, we collect your name, email address, and clinic/practice name (if provided). If you sign up using Google, we receive your name and email address from Google in line with the permissions you grant during sign-in.
1.2 Client and stack information
Practitioners may enter information about their own clients, including a client's name, age, gender, stated goals, practitioner notes, and the list of supplements in a client's stack. This information is entered by the Practitioner and is used to generate stack analyses and PDF reports for that Practitioner's own use.
1.3 Payment information
If you subscribe to a paid plan, billing is handled by our payment processor (Stripe). StackPeak does not store your card number or other payment credentials — these are collected and processed directly by Stripe.
1.4 Technical information
We automatically collect limited technical information needed to operate the service, such as login timestamps and basic request logs, for security and troubleshooting purposes.
StackPeak does not use third-party advertising trackers or analytics cookies. We do not sell personal information.
2. How We Use Information
- To provide the core service: saving clients and stacks, running interaction analysis, and generating PDF reports
- To authenticate your account and keep your data secure
- To operate billing and your subscription, where applicable
- To respond to support requests
- To maintain, secure, and improve the platform
3. AI-Generated Insights
StackPeak offers an optional AI-generated insight summary for a given stack. When this feature is used, the list of supplements in the stack and the rule-engine results (conflicts, cautions, synergies, and domain totals) are sent to our AI provider, Groq, to generate a short written summary.
Client names, ages, genders, goals, and practitioner notes are not sent to Groq. Only the supplement list and the rule-engine output are included in this request.
4. How We Store and Protect Information
StackPeak data is stored using Supabase (PostgreSQL database and authentication infrastructure). Access to client and stack data is restricted at the database level so that each Practitioner can only access their own clients, stacks, and reports — this is enforced through database-level row-level security, not just application logic.
We apply standard security practices including encrypted connections (HTTPS), access controls, rate limiting, and input validation. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Data Sharing
We do not sell personal information. We share information only in the following circumstances:
| Recipient | Purpose |
|---|---|
| Supabase | Database hosting, authentication |
| Railway | Application hosting |
| Stripe | Payment processing (paid plans only) |
| Groq | AI-generated stack insights (supplement list and rule-engine results only, see Section 3) |
We may also disclose information if required by law, or to protect the rights, property, or safety of StackPeak, our users, or others.
6. Data Retention
We retain account, client, and stack data for as long as your account is active. If you delete a client record, it is removed from active use; associated data may persist briefly in backups before being purged. If you close your StackPeak account, you may request deletion of your account data by contacting us (see Section 9).
7. Your Choices and Rights
- You can view, edit, or delete client records directly within StackPeak at any time.
- You can request a copy of, correction to, or deletion of your account data by contacting us.
- If you are located in a jurisdiction with statutory privacy rights (such as the GDPR or similar laws), you may have additional rights regarding your personal information; contact us to make a request.
8. Children's Privacy
StackPeak is intended for use by licensed or practicing nutrition and supplement professionals, not by children. We do not knowingly collect information directly from children.
9. Contact Us
Questions about this Privacy Policy or your data can be sent to: info@stackpeak.net
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and where appropriate, we will provide additional notice.