WhatSupp
Your guide to smarter supplements
Reports
Education
Methodology
About
My regimen
Sign in
Legal / Privacy
Privacy Policy
Effective July 14, 2026 · Version 1.0
In short: we collect what's needed to run the service — your account, the products you look up, your regimen if you build one, and basic usage data. We never sell your personal data, and we never share it with supplement brands. Regimen data is health data with extra protections, covered in detail by our Consumer Health Data Privacy Policy. You can export or delete everything from Account.
1. Scope
2. Information we collect
3. How we use information
4. AI processing
5. How we share information
6. Cookies and analytics
7. Retention
8. Security
9. Your rights and choices
10. State-specific disclosures
11. Consumer health data
12. Children
13. Visitors outside the United States
14. Changes to this policy
15. Contact
01 Scope
This Privacy Policy describes how WhatSupp, Inc. ("WhatSupp," "we") collects, uses, and shares personal data when you use our website, mobile applications, and related services (the "Service"). Where you provide consumer health data — chiefly your supplement regimen — the Consumer Health Data Privacy Policy also applies and controls for that data.
02 Information we collect
You provide: account information (email, display name, password); the product links you paste and searches you run; your regimen (products, doses, schedules) if you use interaction checks; saved reports; preferences such as theme and notification settings; and any messages you send us.
Collected automatically: device and browser type, IP address, pages viewed, referring page, and interaction events (e.g., which report sections you expand), collected via cookieless analytics described in Section 6.
We do not collect: precise geolocation, biometric data, or data from data brokers. We do not use advertising trackers.
03 How we use information
We use personal data to: provide the Service (generate the reports you request, run the interaction checks you enable, sync your account across devices); maintain safety and security (fraud and abuse prevention, debugging); understand aggregate usage to improve the Service; send service communications (and, only with your opt-in, product news); and comply with legal obligations.
We do not use your personal data for targeted advertising, and we do not sell it.
04 AI processing
Reports are generated by AI systems processing public product and research sources — not your personal data. When you run an interaction check, the products in your regimen are processed to produce the check; that processing happens under contracts that prohibit our AI infrastructure providers from using your data to train their models. We do not use your personal data to train AI models.
05 How we share information
We share personal data only with: service providers (hosting, AI infrastructure, email delivery, analytics, customer support) bound by contracts limiting use to our instructions; legal recipients when required by law or to protect rights, safety, or the Service; and a successor entity in a merger, acquisition, or asset sale, subject to this policy.
We never sell personal data, never share it for cross-context behavioral advertising, and never share it with supplement brands, retailers, or their agents.
06 Cookies and analytics
WhatSupp does not set cookies. Your signed-in session is kept in your browser's local storage, not a cookie, until you sign out or clear your browser data. Usage analytics come from Vercel Web Analytics, which is cookieless and reports aggregate page views only. We honor Global Privacy Control (GPC) signals where required by law.
07 Retention
Account and regimen data are retained while your account is active and deleted within 30 days of account deletion, except where a longer period is required by law (e.g., security logs, tax records). Server logs are retained for 12 months. Aggregate, de-identified usage statistics are retained indefinitely and are never re-identified.
08 Security
We protect personal data with encryption in transit and at rest, access controls limiting employee access to a need-to-know basis, and logging of access to health-related data. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.
09 Your rights and choices
Regardless of where you live, you can: access and export your data (Account › Export my data); correct account information; delete your regimen, saved reports, or entire account (Account settings); and opt out of non-essential email. You may also exercise any right by emailing support@whatsuppguide.com; we verify requests using your account email and respond within 45 days.
If we deny a request, you may appeal by replying to our decision; appeals are reviewed by someone other than the original decision-maker, with a written response within 45 days. We do not discriminate against you for exercising privacy rights.
10 State-specific disclosures
California (CCPA/CPRA). In the last 12 months we collected these categories: identifiers (email, IP), internet activity, preferences, and — if you build a regimen — information that may be considered sensitive personal information (health-related). We disclose them only to service providers as described in Section 5. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months. California residents may exercise the rights in Section 9, including through an authorized agent, and may limit use of sensitive personal information (ours is already limited to providing the Service).
Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and similar states. Residents have the access, correction, deletion, portability, and opt-out rights in Section 9. We do not process personal data for targeted advertising or profiling with legal effects, so there is nothing to opt out of on those grounds; deletion and access rights apply in full.
Washington and Nevada. Consumer health data is governed by our Consumer Health Data Privacy Policy, including the rights to withdraw consent and to delete under the Washington My Health My Data Act and Nevada SB 370.
11 Consumer health data
Your supplement regimen and interaction-check inputs are consumer health data. We collect them only with your consent (adding items to your regimen is the consent action), use them only to provide the features you asked for, and never sell them. Full details — categories, purposes, sharing, and your rights — are in the Consumer Health Data Privacy Policy.
12 Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact support@whatsuppguide.com and we will delete it.
13 Visitors outside the United States
The Service is operated from the United States and intended for U.S. users. If you use it from elsewhere, your data is processed in the U.S., where privacy laws may differ from those of your jurisdiction.
14 Changes to this policy
We may update this policy. Material changes will be announced by email or in-product notice at least 14 days before taking effect, and the version history is available on request. The "Effective" date above reflects the current version.
15 Contact
WhatSupp, Inc. · support@whatsuppguide.com
Informational only — not medical advice.
© 2026 WhatSupp
·
Legal
·
Health data
·
For adults 18+
Search
Regimen
Learn
Account