Suppligo — Privacy Policy

Suppligo

This Privacy Policy explains how Suppli (@SuppliTrackBot), a supplement-intake tracking bot operated by a small independent team, handles your data.

Who we are

Suppli is operated by a small independent team of two founders, who act as joint data controllers and run the service from Serbia. You can exercise your rights against either of them, and the essence of their joint-controller arrangement is available on request. Contact: supplitrack.info@gmail.com, or use the /feedback command in the bot.

What we collect

Your Telegram ID, name, and username
A referral/source code, if you opened the bot via a referral link
Supplements you add — their purpose, dose, and schedule
Your intake history
Menstrual cycle data — only if you enable cycle tracking
Your city — only if you set it; used to determine your local time zone
Payment records (Telegram Stars)
Your language and time zone
Messages you send us through /feedback or /paysupport
The supplement plan we extract from a file you import — the file's raw text is deleted, the extracted plan is kept as part of your account
Internal product-usage records — which features you opened or were asked to upgrade for, tied to your account number
Technical data from the Suppli web app — the requests your browser makes to our server when you open it. We do not log your IP address, the contents of your requests, or the parameters carried in their web address

Why we use it

To send reminders, track your progress, determine your local time zone, and provide optional AI-generated tips. On the paid plan those tips are switched on for you when it starts, so they run without you asking; you can turn each of them off in /settings at any time.

The Suppli web app

Besides the chat, Suppli has a web interface — a page that opens inside Telegram (a Telegram Mini App) and shows the same data your account already holds. It is part of the same service: the same account, the same database, the same server as the bot. It is provided by us, not by Telegram. Telegram only opens the page inside its app; what the page does with your data is our responsibility, and this Privacy Policy covers it.

The page loads one file from telegram.org — the platform's own SDK, which is what allows a page to run inside Telegram. That is the only external source it loads anything from. There is no analytics, no advertising, no error-tracking service, no web fonts, and no third-party content delivery network. Opening the web app requires the same consent to processing your health data as the chat, and that requirement is checked on our server, not in the page.

Who processes your data

These are service providers, not buyers of your data. OpenAI (USA) — to power import and AI features, it receives the full text of any file you import (which may include other details the file contains, such as your practitioner's contact information), your supplement names, purposes, and doses, your adherence (which reminders you complete), and your city (to determine your time zone). OpenAI does not receive your cycle-tracking entries (the dates and cycle day you log), your name, or your Telegram ID. If you import a plan that mentions cycle phases, that text is processed as part of the imported file. OpenWeatherMap (USA) receives the name of your city, and nothing else, when morning greetings with a forecast are switched on. It receives no identifier, no supplements, and no health data. Telegram delivers all messages. Railway provides hosting. We do NOT sell your data or share it for advertising, and we have no corporate affiliates. The Suppli web app adds no one to this list. It runs on the same server, in the same process as the bot, so opening it sends your data to no additional company: no content delivery network, no analytics provider, no error-tracking service.

Data security

We use reasonable technical and organizational measures to protect your data and to limit who can access it. Traffic between your device and the Suppli web app travels over TLS (HTTPS). Every request the web app makes to our server is authenticated with the signed sign-in data Telegram issues for your session: our server verifies its HMAC signature with the bot's own key and refuses anything that fails to verify or is more than 24 hours old. The page loads no third-party scripts, and a Content Security Policy sent with every response limits it to code from our own server and the Telegram SDK described above.

Data retention

We keep your data while your account is active. When you import a file, its raw text is deleted once the import is completed or cancelled. Detailed daily intake history older than 18 months is deleted automatically, as are the internal product-usage records. You can delete your account data at any time with /deletedata.

Three things /deletedata does not remove, and we would rather name them than let you find them. Payment records stay, because we have to be able to account for payments; each one carries the reference of that purchase, which contains your Telegram ID. A minimal stub of your account stays — its internal number, your Telegram ID, your language, and the date you first started the bot; your name, username, city, time zone, and everything you tracked are erased. The hosting technical logs described below sit outside your account record.

Separately from your account, our hosting platform keeps short-term technical logs of the service running. They record how the software behaved — errors, restarts, internal account numbers — not the supplements you track or your intake history, and requests to the Suppli web app are recorded without your IP address, without the contents of the request and without the parameters in its web address. These logs are kept for a limited period (7 days) and then deleted. They are stored outside your account record, so /deletedata does not reach them; they are never used to build a profile of you or to make decisions about you.

Before we collect any health data, the bot shows you a consent screen — on your first /start, with a prominent link to this Privacy Policy. We begin collecting and processing your health data only after you tap 'I agree to processing my health data.' Two things are recorded before that, because they arrive with your very first message: the account details Telegram passes to us (your Telegram ID, name, and username), and the referral code if you opened the bot through a link. Nothing about your health is collected until you agree. This is a separate, clear affirmative act; we do not bundle this consent into any general terms of use. The same consent is required before you add a supplement, import a plan, or see anything in the Suppli web app — in the web app the check runs on our server, on every request.

Cycle tracking requires its own separate consent: when you turn it on, the bot shows a dedicated consent screen, and cycle data is processed only after you tap 'I consent to processing my cycle data.' We record each consent together with the policy version and the date you granted it. You can withdraw consent at any time — see Your rights below.

Your rights

Export your data with /mydata. Because we process your supplement and cycle data only with your consent, withdrawing it means we must stop processing and erase that data — so withdrawing consent and deleting your data are the same action here, done with /deletedata. You can withdraw consent for cycle tracking on its own, without deleting anything else, by turning cycle tracking off — on any plan, paid or free. When you do, we erase your cycle data: the date your cycle started, the phase ranges set on your supplements, the notes on those supplements, and the day-by-day record of which doses were expected. The bot lists what will go before it deletes anything. We will not discriminate against you for exercising your rights. All of this works directly in the bot.

If you are in the EEA, the UK, or Serbia

Legal basis. We process the supplements you add (including the purpose you enter) and, if you turn it on, your cycle data on the basis of your explicit consent — Article 9(2)(a) of the EU/UK GDPR and the equivalent provision of Serbia's Law on Personal Data Protection. You can withdraw consent at any time, which stops further processing (see Your rights).

International transfers. Your data is hosted on servers in the EU (Amsterdam). The Suppli web app is served from those same servers, so opening it adds no transfer and no new recipient. When import or AI features run, the relevant text is sent to OpenAI in the USA under the EU Standard Contractual Clauses in our data processing agreement with OpenAI. Your cycle entries are never sent to OpenAI.

Storage in your browser. The Suppli web app stores nothing in your browser. No cookies, no local or session storage, no tracking or advertising identifiers, and no health data. Everything it shows is fetched from our server for that screen and kept only in memory while the app is open.

Telegram. Telegram is an independent data controller of the messaging channel — it has its own privacy policy and EU representative — not our processor. We are the controller only for the data you keep inside the bot.

Your rights in the EEA/UK/Serbia. On top of the controls above, you have the right to rectify your data (use /edit), to restrict or object to processing, and to data portability. You can lodge a complaint with your local data protection authority (see the list at edpb.europa.eu); in Serbia, with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

Appeals

Your rights to access, export, and delete your data and to withdraw consent work instantly in the bot (/mydata, /deletedata). If you believe we have not fulfilled your request, you can appeal by messaging us via /feedback; we will review the appeal and respond in writing within 45 days. If we deny your appeal, we explain why and give you a way to submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.

Age

This service is for adults 18+ and is not intended for anyone under 18.

Last updated: 3 September 2026.