Privacy Notice
Stak helps you evaluate supplement stacks. To do that, the product holds the supplement intake information you give it. Account creation is optional; vaulted history is account-scoped.
01Operator and scope
Operator. The product is operated by Lumpixel LLC, a Wyoming limited liability company (United States), registered with DUNS 144951637. Legal contact: legal@lumpixel.cc.
Effective date. 2026-05-09. We will revise this document as the product evolves; the effective date at the top of the page reflects the version you are reading.
This notice covers the Stak iOS app, the Stak-Vault server-side store, and the Stak-Site marketing surface served behind Caddy.
02What we collect
Account (optional): an email address if you create an account, used for sign-in and service notifications.
Intake data: the supplements you record (name, dose, schedule), optional goals, and any notes you attach. You decide what to put in.
Service metadata: minimal device and request metadata required to keep Stak-Vault working.
We do not collect health-care records, prescriptions, or laboratory results unless you choose to type that information in as a note.
03How data is used
To run the evaluation against your stack, to keep your stack history available across sessions and devices, and to deliver service notifications.
04Stak-Vault
Stak-Vault is the server-side store for the user's stack history. It is account-scoped; nobody else can read your vault. We do not sell vault contents and we do not share them for advertising.
05Stak-Site at the Caddy edge
Stak-Site is the public marketing surface. It is served by a Caddy reverse proxy that terminates TLS and applies edge caching. The marketing site itself does not require an account and does not access your vault.
06Retention
Active accounts: vault entries are retained until you clear them or close the account. Closed accounts: vault entries are purged within 30 days of closure, except where retention is required by law.
07Your rights
You can export, correct, or delete your data by writing to legal@lumpixel.cc, or, where supported, through the in-app settings.
08Sharing
We share personal data only where required by valid legal process, or with operational sub-processors strictly necessary to run the service. We do not sell data and we do not share it for cross-context behavioural advertising.
09Security
TLS in transit, encryption at rest for vault contents, and authentication tokens scoped to the device. No security control is perfect; material breaches will be communicated to affected users in the timeframe required by applicable law.
10Not medical data infrastructure
Stak is not a medical record system. Do not use it to store regulated clinical data.
11Children
The product is not directed to children under 13.
12Changes
Material changes will update the effective date at the top of this page.