Privacy policy

Underdosed is operated by FKNWIN LLC. We collect the little we need to run the app, we do not run ads or analytics, and we never sell or share your data for marketing.

Your account

Underdosed requires an account so your profile, stack and scans follow you to a new phone. You can sign in with Apple or with an email address and password. Accounts are handled by Supabase, our database and authentication provider.

• Email address, and name if you sign in with Apple and choose to share it. If you use Apple's Hide My Email we only ever see the relay address.
• An account identifier we generate, used to tie your profile and subscription to you.
• Your profile: sex, age, weight, goal and diet. This is health information. It adjusts your dose targets and the products we suggest, and it is stored with your account so it survives reinstalling the app.

What stays on your phone

• Your scan history, your stack, reminder times and daily check-ins.

These are not uploaded. Deleting the app removes them, and so does "Reset app" in the You tab.

What leaves your phone

• Label photos you scan. A reduced copy is sent to our server and forwarded to Anthropic's Claude API to read the text. We do not store the photo, and we do not keep it against your account. Anthropic processes it under its API terms and does not use API inputs to train models.
• Catalog searches. What you search or browse is sent to our database to return results. The request is authenticated so we know it came from a subscriber, but we do not store your searches against your account.
• Subscription status. Purchases are processed by Apple. RevenueCat tells us whether your subscription is active so the app can unlock, and whether you entered an influencer code so we can credit that creator. We never see your card details; Apple does not share them with us.
• Links to Amazon. Tapping a product link or the basket button opens Amazon. Links may carry an affiliate tag that pays us a commission. From that point Amazon's own privacy policy applies.

What we do not do

• No advertising, no analytics SDKs, no crash reporting, no tracking across apps or websites.
• No selling, renting or sharing of personal data for marketing.
• No marketing email. We only email you about your account, such as confirming an address or resetting a password.

Deleting your account

You can delete your account from the You tab, under "Delete account". It removes your account, profile and referral record from our servers and resets the app on your phone. An App Store subscription is separate: cancel it in your Apple account settings, since only Apple can do that.

Who processes data for us

Supabase (accounts and catalog), Anthropic (reading label photos), RevenueCat (subscription status), Vercel (hosting) and Cloudflare (domain and email forwarding). They process data on our instructions and do not use it for their own purposes.

Permissions

Camera and photo library access are used only to read a Supplement Facts panel you choose. Notifications are used only for the reminders you turn on.

Children

Underdosed is not directed at children under 13 and does not knowingly collect information from them.

Changes and contact

If this policy changes, the date above changes with it. Questions: hello@underdosed.app.