Privacy Policy

Overview

This Privacy Policy describes how the COMPOUND app ("the app", "we", "us", "our") collects, uses, and protects your information. By using the app, you agree to the practices described below.

We are committed to protecting your privacy. Your protocol data is yours. We do not sell personal information to third parties.

Information We Collect

Information you provide

• Profile data: gender, age, weight, height, activity level, and health goals entered during onboarding.
• Protocol data: compounds, dosages, routes of administration, frequency, and timing you log in the app.
• Side effect and symptom reports: any symptoms or side effects you choose to record.
• Bloodwork data: lab results you optionally enter for tracking purposes.

Information collected automatically

• Device information: device model, operating system version, app version, and unique device identifiers.
• Usage data: screens viewed, features used, session duration, and interaction patterns.
• Crash and performance data: error logs and performance metrics to improve app stability.

How We Use Your Information

• Provide the service: store and display your protocol data, generate AI-powered insights, and personalize your experience.
• Improve the app: analyze aggregated, anonymized usage patterns to prioritize features and fix issues.
• Send notifications: deliver dose reminders, protocol insights, and service updates you have opted into.
• Process subscriptions: manage your subscription status and entitlements.

AI features & data transmission

When you use the AI chat feature, the daily brief, weekly correlation insights, or bloodwork OCR, the text or image you submit, along with summarized protocol metadata, is transmitted to Google's Vertex AI service to generate responses. Do not include information you are not comfortable sharing with a third-party AI provider.

Third-Party Services

The app uses the following third-party services, each governed by their own privacy policies:

• Firebase (Google): authentication, cloud database, cloud messaging, and AI features. Data is stored on Google Cloud infrastructure.
  Firebase Privacy Policy
• Google Cloud Vertex AI (Gemini): powers the app's AI insights, chat, bloodwork OCR, and protocol analysis. User-entered data, including protocol details, symptoms, chat prompts, and bloodwork values, is transmitted to Vertex AI for processing. Google's data processing terms apply: Google Cloud DPA.
• RevenueCat: subscription management and in-app purchase processing.
  RevenueCat Privacy Policy

Data Storage and Security

Your data is stored using Firebase Cloud Firestore with encryption at rest and in transit. Access is controlled through Firebase Authentication and Firestore Security Rules that restrict data access to authenticated account owners.

While we implement industry-standard security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

Your data is retained as long as your account is active. Anonymized, aggregated data may be retained for analytical purposes.

When you tap "Delete all data" in Settings, your profile, protocols, dose logs, symptom logs, bloodwork values, cycle records, and AI chat context are immediately and permanently removed from our active Firestore database and Cloud Storage. Backup snapshots retained by our infrastructure provider for disaster recovery may persist up to 30 days before being overwritten.

If you want to exercise your right to deletion without access to the app (e.g., you've uninstalled), contact privacy@usecompound.app with your account email or Firebase user ID and we will process the request within 30 days (GDPR) or 45 days (CCPA).

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Withdraw consent for data processing

To exercise any of these rights, contact support@usecompound.app.

Children's Privacy

The app is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a user under 18, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact

Questions about this Privacy Policy? Contact us at support@usecompound.app.