Suppligo — Consumer Health Data Privacy Policy

Suppli is a supplement-intake tracking bot operated by a small independent team. This policy describes how we handle your consumer health data, as defined under Washington's My Health My Data Act.

Categories of consumer health data we collect

• Supplements you track – their purpose and dose
• Your intake and adherence history
• Menstrual cycle data – only if you enable cycle tracking

Sources of this data

Directly from you – what you enter in the bot or in the Suppli web app inside Telegram, and files you choose to upload in the bot.

How we use it

To send you reminders, track your progress, and provide optional AI-generated tips. On the paid plan those tips are switched on for you when it starts, so they run without you asking; each can be turned off in /settings.

Categories of health data we share

We share your supplement names, purposes, doses, and adherence with our AI text-processing provider to power import and AI features. We do NOT share your cycle-tracking entries (the dates and cycle day you log) with anyone. If you import a plan file that mentions cycle phases, that text is processed by our AI provider as part of the file.

Categories of third parties and affiliates we share with

• AI text-processing provider (OpenAI, USA) – receives supplement names, purposes, doses, and adherence; does not receive cycle data, your name, or your Telegram ID
• Weather provider (OpenWeatherMap, USA) – receives only your city name, when morning greetings with a forecast are on; no identifier, no supplements, no health data
• Cloud hosting provider (Railway)
• Messaging platform (Telegram) – delivers messages

We have no corporate affiliates. We do NOT sell consumer health data and we do NOT share it for advertising.

How we obtain your consent

We collect your consumer health data only after you give consent through a clear affirmative act. On your first /start, before any health data is collected, the bot shows a consent screen with a prominent link to our Privacy Policy; you must tap 'I agree to processing my health data' to proceed. We do not bundle this consent into any general terms of use. The same consent is required before you add a supplement, import a plan, or see or change anything in the Suppli web app – in the web app the check runs on our server, on every request.

Menstrual cycle data has its own separate consent: turning on cycle tracking, in the chat or in the Suppli web app, shows a dedicated consent screen, and we process cycle data only after you tap 'I consent to processing my cycle data.' We record each consent together with the policy version and the date you granted it, the same way in the chat and in the web app, and you can withdraw it at any time (see Your rights). When you turn cycle tracking on in the web app, the bot also sends you a message in the chat saying so.

Your rights

You can access and export your data with /mydata at any time, directly in the bot. Because we process your consumer health data only with your consent, withdrawing it means we stop processing and delete that data – so withdrawing consent and deleting your data are the same action here, done with /deletedata. You can withdraw consent for cycle tracking on its own, without deleting anything else, by turning cycle tracking off, in the chat or in the Suppli web app – on any plan, paid or free. When you do, we erase your cycle data: the date your cycle started, the phase ranges set on your supplements, the notes on those supplements, and the day-by-day record of which doses were expected. Before anything is deleted, Suppli lists what will go, in the chat or in the web app. You may request the list of third parties we have shared your data with via /feedback. We will not discriminate against you for exercising these rights.

Three limits, stated plainly. /deletedata erases your data from our database, but three things stay behind it. Payment records – we have to be able to account for payments, and each record carries the reference of that purchase, which contains your Telegram ID. A minimal stub of your account – its internal number, your Telegram ID, your language, and the date you first started the bot; your name, username, city, time zone, and everything you tracked are erased. Neither holds consumer health data. Technical logs. Separately from your account, our hosting platform keeps short-term technical logs of the service running – errors, restarts, internal account numbers, and, for the Suppli web app, requests recorded without your IP address, without the contents of the request and without the parameters in its web address. They hold no consumer health data, are kept for a limited period (7 days) and then deleted, are stored outside your account record, and are never used to build a profile of you.

Appeals

Your rights to access, export, and delete your data and to withdraw consent work instantly in the bot (/mydata, /deletedata). If you believe we have not fulfilled your request, you can appeal by messaging us via /feedback; we will review the appeal and respond in writing within 45 days. If we deny your appeal, we explain why and give you a way to submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.

Data security

We use reasonable measures to protect your consumer health data and to limit access to it. The Suppli web app – the page that opens inside Telegram – runs on the same server as the bot and adds no new recipient of your data. Traffic to it travels over TLS (HTTPS). Every request it makes is authenticated with the signed sign-in data Telegram issues for your session: our server verifies its HMAC signature with the bot's own key and refuses anything that fails to verify or is more than 24 hours old. When a request from the web app changes something, the server checks that every supplement or intake time it names belongs to the account the request was signed for, and refuses it otherwise. In the web app, your current cycle day appears only on the cycle screen. The page loads no third-party scripts – no analytics, no advertising, no error tracking, no third-party web fonts – and a Content Security Policy sent with every response limits it to code from our own server and Telegram's own platform SDK.

Age

This service is for adults 18+ and is not intended for anyone under 18.

Contact

For any privacy request, email supplitrack.info@gmail.com or use the /feedback command in the bot. Suppli is run by a small independent team of two founders (joint controllers) from Serbia.

Last updated: 29 September 2026.