Privacy

The short version#

Supli keeps everything you log on your phone. There is no account, and your supplements and doses never reach us. The only things that leave the app are error reports when something breaks, which you can turn off in Settings, and an anonymous usage count: how often the app is opened and a dose is marked, with nothing of yours in it. The website counts visits without cookies and without knowing who you are, and only uses a technical cookie to remember the language you choose. There are no ads.

The only things we handle are those error reports, the app usage count, what you send us if you write to support, the technical logs of the website's hosting, the anonymous visit count and, once Supli has paid features, the purchase details the store passes to us.

Who is responsible#

Magnetic Multi SL, tax ID B21996293, registered at Plza Romualdo Alvargonzalez Lanquine s/n, 33202 Gijón. For anything about privacy, write to info@getsupli.app.

The app#

What it stores. The supplements you add, your schedule, the doses you mark, the settings you choose, whether you finished the welcome screens and the day you first opened the app. All of it lives in a database on your phone.

What leaves the phone. Your supplements, schedule and doses, never. Reminders are scheduled by the phone itself, not by a server. The only things that leave are error reports and the usage count, explained below.

Why it matters. What you take can say something about your health. That is why it never leaves the phone: we do not see it, we do not store it and we cannot share it with anyone, because we never have it.

Error reports. If the app fails or crashes, it sends a report so we can fix it. It contains the type of error and where in the code it happened, the Supli version, your phone model and Android or iOS version, and a random installation identifier that does not identify you. It does not contain your name, your email, your supplements or your doses, and we do not store your IP address. Reports go to Sentry (Functional Software, Inc.), which processes them on our behalf and stores them in the European Union, in Germany. Sentry is a US company; if it ever accesses them from there, that relies on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. The legal basis is our legitimate interest in the app working. Reports are deleted after 90 days at most. They are on by default and can be turned off in Settings › Error reports; when off, the app sends nothing.

Usage count. To know whether Supli is useful and whether people come back, the app reports a few things when they happen: that it is opened, that the welcome screens are finished, that a supplement is added (only its format: pill, powder, sachet or liquid), that a dose is marked (and how), that a bottle is restocked and that a backup is saved or restored. Each report carries, in ranges, how many days have passed since you first opened the app and how many supplements you have, and whether the phone allows notifications. Also the Supli version, the phone model, the Android or iOS version and the language. It carries no phone or installation identifier, no name, no supplement names, no times or amounts, and your IP address is not stored: we cannot tell whose each report is or link the reports of one person. It goes to Aptabase, which processes it on our behalf and stores it in the European Union. The legal basis is our legitimate interest in knowing whether the app is used and improving it. It is always on.

Backups. When you export a backup from Settings, the app creates a file and hands it to your phone's share sheet. Where that file goes is up to you. We never receive it.

Permissions. Notifications, to remind you at dose time. On Android, also the exact alarm permission, so a reminder arrives on time and not late. Nothing else.

Deleting your data. Uninstall the app and it goes with it. There is more detail in Your data.

Google Play and the App Store#

You download Supli from Google Play and, once it reaches iPhone, from the App Store. When you use them, Google and Apple handle your data as controllers, under their own privacy policies.

The stores show us install statistics and, if you have it turned on in your phone, crash reports with the device model and system version. They do not include your name or email, and we use them only to fix the app.

This website#

Hosting. The website is served by Vercel Inc. Like any host, it logs technical details of each visit: IP address, date, page requested and browser. They are used to deliver the site and protect it from abuse, which is our legitimate interest, and they are deleted after a limited time. Vercel is based in the United States. The transfer relies on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

Cookies. Just one, first-party and technical: NEXT_LOCALE, which remembers whether you prefer the site in English or Spanish. It is deleted when you close the browser. Because it is needed for the service you ask for, it does not require consent (art. 22.2 of Spain's LSSI), which is why there is no banner.

Visit count. We use Umami, a cookie-free analytics tool that we run on our own server in Lisbon: the data does not leave the European Union and nobody else handles it. It records the page visited, the referring page, the language, the type of device and browser, the country and a few clicks (the Google Play button, template downloads and use of the calculator), with nothing of yours. It sets no cookies and stores nothing in your browser, and it does not store your IP address: it uses it in passing to work out the country and to compute a session identifier that cannot be reversed and changes every month. There is no cross-site tracking and no way to know who you are. We only see totals. The basis is our legitimate interest in knowing what works on the site.

Nothing else. No ads, no social media pixels, no third-party cookies. Fonts are served from our own domain. The site has no forms.

If you write to support#

We keep your email address and what you tell us, so we can answer. The basis is handling your request. We keep the conversation while it lasts and for up to twelve months after, in case you come back with the same issue. Our email provider handles it on our behalf and cannot use it for anything else.

Purchases#

Supli is free today. If Supli offers paid features, the purchase is handled by Google Play or the App Store. We never see your card or payment details. The store passes us what we need to give you access, such as the order ID and the subscription status. We keep it for as long as tax law requires.

Your rights#

You can ask us for access to your data, to correct it, delete it, object to its use, restrict it or take it with you. Write to info@getsupli.app and we will answer within a month at most. Keep in mind that we hold nothing of what you log in the app: only you have that data.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency or to the authority where you live.

Children#

Supli is not meant for children under 14. We do not knowingly collect data from anyone under that age. If you are a parent or guardian and think your child has written to us, tell us and we will delete the conversation.

Changes#

If Supli adds anything else that sends data off the phone, this page changes first. The date at the top says when it was last reviewed.