Legal

Privacy at Urstak

Last updated: January 2026

The short version: We collect only what's needed to give you accurate supplement recommendations. We don't sell your data. We don't share it with advertisers. Your quiz responses live in a secure database accessible only to you and our team.

What we collect

Account data

When you sign in with Google, we receive your email address, full name, and profile picture. We use this to create your account and personalize your experience.

Quiz responses

The answers you provide in our quiz, including symptoms, lifestyle, medications, and health conditions, are stored in your account so you can see your stack and re-take the quiz over time. This is sensitive health information, and we treat it accordingly.

Generated data

Your personalized stack, schedule, and any patterns we detect are computed from your quiz answers and stored under your account.

Technical data

We collect basic technical information when you use the site: browser type, IP address, and pages visited. This helps us fix bugs and improve the experience.

What we don't do

We don't sell your data. Ever. Not to advertisers, not to insurers, not to data brokers.
We don't share quiz responses with third parties for marketing or analytics.
We don't profile you for advertising. Urstak doesn't run ads.
We don't keep your data after you delete your account. Deletion requests are processed within 30 days.

How your data is stored

All account data is stored in Supabase, a SOC 2 Type II certified database provider. Data is encrypted in transit and at rest. Access is restricted to authenticated users (you, for your own data) and our admin team for support purposes.

Cookies and tracking

We use only essential cookies needed to keep you signed in. We don't use third-party tracking, advertising pixels, or analytics that follow you across the web.

Your rights

Access: Request a copy of all data we have about you.
Correction: Update any inaccurate information.
Deletion: Delete your account and all associated data.
Portability: Export your data in a machine-readable format.

To exercise any of these rights, email us at contact@urstak.com.

Children's privacy

Urstak is built for adults (18+). We don't knowingly collect data from children under 18. If you believe we have collected such data, please contact us and we'll delete it immediately.

Changes to this policy

If we make material changes to this policy, we'll notify you via email and post a prominent notice on the site. Continued use after changes constitutes acceptance.

Contact us

Questions about privacy? Email contact@urstak.com.