Privacy Policy

Effective Date: March 3, 2025

At Lifestack, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our mobile and web applications (the "Services"). By accessing or using our Services, you agree to the terms outlined in this Privacy Policy.

1. Contact Information

Lifestack Ltd.
78 York Street, London, England, W1H 1DP
Email: privacy@lifestack.health

2. Information We Collect

1. Personal Information: Name, email address, and any contact details you provide.
2. Health and Wellness Data: Health routines, preferred supplements, exercise details (e.g., speed, weight), and supplement intake (e.g., dosage, time).
3. Content Data: Posts, articles, reviews, or other content you create within the app or website.
4. Usage Data: Information on how you interact with the app or website, including logs, device information, and settings.

3. How We Use Your Data

1. Providing Services: To manage your account and enable app functionalities.
2. Personalization: To suggest relevant content based on your preferences.
3. Communications: To send personalized messages, updates, and notifications (opt-out available).
4. Service Improvement: To enhance our services and user experience.
5. Legal Compliance: To comply with legal and regulatory obligations.

4. Legal Basis for Processing

1. Consent: We process special category data (e.g., health data) only with explicit consent under Article 9(2)(a) of UK GDPR.
2. Contractual Necessity: When processing is required to provide our Services.
3. Legitimate Interests: When processing is necessary for our business operations, provided it does not override your rights.

5. Data Sharing

We do not sell or share your data with third parties for marketing purposes.
Your data is shared only as necessary with:
- Cloud Service Providers: For app hosting and data management.
- Consultant Developers: Access under strict data export agreements (compliant with UK GDPR and SCCs).

6. International Data Transfers

Lifestack may transfer your personal data outside of the UK when working with consultant developers or using cloud services.
We ensure appropriate safeguards, including:
- EU Standard Contractual Clauses (SCCs) and UK GDPR addendums.
- Data Export Agreements to ensure compliance.

7. Data Retention

We retain your personal data for up to six years.
You may request data erasure at any time.
Users can delete their account in-app, permanently removing all associated data.

8. Your Rights

Under UK GDPR, you have the following rights:
1. Access: Request a copy of your personal data.
2. Rectification: Correct inaccuracies in your personal data.
3. Erasure: Request deletion of your data.
4. Restriction: Limit processing of your data.
5. Objection: Object to processing for certain purposes.
6. Data Portability: Request transfer of your data to another organization.
7. Withdraw Consent: Withdraw your consent at any time.

9. Children's Data

Lifestack does not allow users under 18.
If we become aware of data collection from a minor, we will delete it immediately.

10. Data Security

1. Storage: User data is securely stored on cloud servers.
2. Security Measures: Data is encrypted at rest and in transit using HTTPS.
3. Access Control: Access to sensitive data is restricted to authorized personnel only.

11. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify you as required by UK GDPR.

12. Complaints

If you have concerns about our use of your data, you can contact us at privacy@lifestack.health.
If you are not satisfied with our response, you can file a complaint with the UK Information Commissioner’s Office (ICO):
ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons.
You will be notified of significant changes via email or in-app notifications.