Privacy

Who is responsible

The terms of service sit on their own page: Terms.

CompoundArc is operated by Matheo Dodi, with a mailing address at 2 Cherry Blossom Pl, Spring, TX 77381, USA. For anything on this page, write to [email protected].

What is collected

What you enter

Compounds, doses, routes, cycles and phases; workouts, sets, reps and loads; bloodwork values you import or type; symptoms, notes and daily check-ins. This is the record, and it exists because you created it.

What is read from Apple Health

Read-only, and only the categories you grant. CompoundArc requests recovery and vitals, sleep, body composition and activity types. You choose each one at the Apple consent sheet, you can change your mind in the Health app at any time, and CompoundArc never writes back to Health.

Account and billing

An email address, or an Apple or Google identifier if you sign in that way, plus the year of your birth and your sex where you supply them, because reference bands for biomarkers are age and sex adjusted. A full date of birth is deliberately not stored. Payment card details are handled by Apple and never reach CompoundArc; what is stored is your subscription status. RevenueCat verifies purchases and subscription periods using the App Store and your account identifier. Health records are not sent to RevenueCat.

Crash reports

When crash reporting is configured, Sentry receives technical error context to help fix failures. The app removes account identifiers and does not attach your health record, session recordings or performance traces. Crash reporting is currently disabled in the beta.

Optional product analytics

Product analytics is off until you allow it during onboarding or enable it in Settings, Privacy & data. Either choice is optional. If enabled, PostHog in the United States receives a small set of app and onboarding actions using a temporary random session identifier. Account identifiers, emails, health readings, health-source results and anything you type are excluded. We do not record screens or automatically collect taps. You can turn analytics off on this device at any time.

Feedback

Send feedback opens our public Sleekplan board in your browser. The app does not send your account or health record to the board. Posts and comments you submit there can be public; leave out personal health details. Sleekplan handles its own sign-in information and anything you choose to submit under its privacy policy. For private support, email [email protected].

Where it lives and who can reach it

Records are stored in a managed Postgres database operated by Supabase, hosted in Ohio, United States, encrypted in transit and at rest. Isolation between accounts is enforced by row-level security policies in the database itself rather than by application code. Your authenticated requests can read your own private records; shared reference material is available to all accounts.

Operators do not browse user health records. Access for support happens only with your explicit request, and the small number of server functions that can act across accounts are restricted to their specific purposes, including account deletion, loading public references and reconciling verified subscription status. Subscription reconciliation does not read health records.

The assistant, and what leaves the system

The assistant and generated insights send relevant health observations to Fireworks AI, which also processes image extraction requests. Account identifiers are removed and common identifier patterns are redacted. Names or addresses you put in free text may still be included, so avoid adding information that is unnecessary for the feature. Provider credentials stay on the server.

Importing a lab report or workout image, or scanning a vial label, sends the supplied image or document content to an outside AI service for extraction. Documents can contain identifying information that is visible in the image. Generated insights can use model services even when you do not open the assistant.

When the assistant searches the web, Brave Search receives the search query. When technical monitoring is enabled, Langfuse receives metadata such as response time, token usage, model and error status. Questions, answers, health context and persistent account or conversation identifiers are excluded. These services process data to provide their respective features.

What is never done

• Health data is never sold, rented or brokered.
• Health data is never used to target advertising, in this app or anywhere else.
• Your record is never shared with an insurer, employer, or data aggregator.
• Your record is never used to train a general-purpose model.

CompoundArc is funded by subscriptions. That is the whole business model, and it is what makes the four statements above sustainable rather than aspirational.

Your control

• Export. Take a machine-readable copy of everything at any time.
• Delete. Account deletion removes your account-linked database rows by cascade and removes your stored uploads. This is not reversible through the app.
• Disconnect. Revoke a health source, in the app or in Apple Health, without losing what you have already logged.
• Correct. Every logged row stays editable, including in a lapsed subscription.

None of these are gated by a subscription, in any state. If you stop paying, you keep every one of them.

Retention

Your record is kept while your account exists, because it is the thing the product is for: a ninety-day comparison needs ninety days. Account deletion removes the live record. The current Supabase plan provides access to the last seven days of daily database backups; deleted records can remain in an existing backup until it expires. Uploaded files are separate from those database backups. Third-party troubleshooting and processing retention depends on each service's configured terms.

Your rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict processing of your data, and to complain to a supervisory authority. The export and delete controls in the app satisfy most of these directly. For anything else, write to [email protected] and you will get an answer within 30 days.

CompoundArc is a consumer wellness product. It is not a covered entity or a business associate under HIPAA, and it makes no HIPAA claim.

Children

CompoundArc is not for anyone under 18 and accounts are not knowingly created for them.

Changes

If this policy changes in a way that affects what is collected or who can reach it, you will be told in the app before the change takes effect, not after.