Privacy Policy

Information we collect

We collect information you give us directly: your account details, contact information, subscription details, support messages, and the content you add to Stacca. That content may include medication and supplement lists, care notes, reminders, voice notes, photos, and related health information.

We also collect limited technical information needed to run the service: browser and device data, app activity, and a small number of cookies and local storage values used to remember your display preferences (such as your currency region) and to complete checkout.

How we use information

We use information to provide and improve Stacca, authenticate accounts, send reminders and alerts, process subscriptions and payments, respond to support requests, keep the service secure, and comply with applicable law.

Some information you enter — medication lists, care notes, health observations — may be health-related. We treat this as sensitive and process it solely to provide the service and related support to you. We do not use it for advertising, profiling, or sale.

Legal bases for processing

Where data protection law requires a legal basis, we rely on: the contract we have with you (our Terms of Service) for operating your account and delivering the service; your explicit consent for processing any health-related information you choose to enter; our legitimate interests in keeping the service secure and improving it; and legal obligations where applicable.

Automated processing and AI

Three features in Stacca send information to Anthropic, an AI provider that processes it on our behalf and returns a result to the app:

• Interaction checks — the names and doses of the medications and supplements in your list, and any notes you have added to them, are sent so that potential interactions can be identified.
• Label scanning — when you photograph a medication label, the image is sent so the medication name, dose and form can be read from it.
• Voice logging — your speech is converted to text on your deviceby your phone’s built-in speech recognition. We never receive or store the raw audio. Only the resulting text is sent, so it can be matched to a medication in your list.

This information is not used to train AI models. Interaction checks are informational only and are not medical advice — always confirm with a pharmacist or doctor. If you would rather your medication information was not sent to an AI provider, you can simply not use the label-scan, voice-logging and interaction-check features; the rest of Stacca works without them.

How we share information

We share information only with service providers that help us operate Stacca:

• Supabase — database hosting and authentication, which stores your account and health information.
• Anthropic — AI processing for the features described above (medication names and doses, item notes, label photos, and voice transcripts).
• Expo — delivery of push notifications, which includes the device token and the notification text.
• Zoho Mail — delivery of missed-dose alert emails and other transactional email.
• Lemon Squeezy — merchant of record, handling checkout, payment processing and tax collection where subscriptions apply.

Missed-dose alerts necessarily name the medication that was missed, so that name may appear in a caregiver’s email inbox or on a phone’s lock screen.

We may also share information when required to comply with law, enforce our terms, protect our users or our systems, or in connection with a business transfer such as a merger or acquisition.

International transfers

Stacca serves users globally. Your information may be transferred to and processed in countries outside your own, including countries where data protection rules may differ. When we transfer information from the UK or European Economic Area, we rely on appropriate safeguards such as standard contractual clauses.

Cookies

We use only the cookies necessary to keep the service working and remember your settings — for example, to store your currency region so the correct pricing is shown, and to support the checkout flow. We do not use advertising cookies or third-party tracking pixels.

Retention

We keep information for as long as needed to provide the service, maintain your account, meet legal and accounting obligations, resolve disputes, and enforce our agreements. If you delete your account, we delete or de-identify your information unless we are required by law to keep it.

You can delete your account at any time from Profile → Advanced → Delete Account in the app. Deletion runs immediately and removes your account along with your medications, adherence history, notes, emergency contacts and caregiver links. It cannot be undone. Residual copies may remain in encrypted backups for a short period before they are overwritten in the normal backup cycle.

Security

We use reasonable technical and organisational safeguards to protect your information. No online service can guarantee complete security; if you have concerns, contact us at privacy@stacca.io.

Children

Stacca is not intended for people under 16. We do not knowingly collect information from anyone under 16. If you believe we have done so by mistake, please contact us and we will delete it promptly.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or limit certain processing, and to withdraw consent you have given. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@stacca.io.

Changes

We may update this policy from time to time. Material changes will be reflected by an updated date above. Where required by law, we will take additional steps to notify you.

Contact

Privacy questions can be sent to privacy@stacca.io.

Incharge — LOT RBIEB N° 891, Es-Semara