Supplement Cabinet Privacy Policy

Supplement Cabinet is local-first. The app does not require an account and does not currently provide cloud synchronization of your cabinet. Cabinet data, routines, intake history, reflections, preferences, reminders, and saved AI reports are primarily stored in app-managed storage on your device.

When you scan or identify a product, the app may temporarily process label images on the device. A barcode, brand, or product name may be sent to the NIH Dietary Supplement Label Database or Open Food Facts for a lookup you request.

The optional Understand my supplements review requires an explicit confirmation. It sends structured supplement and routine fields through a Cloudflare-hosted gateway to OpenAI; it does not send source label photos, medication lists, symptoms, or diagnoses.

You may enter or create supplement and label details, ingredient and serving information, routine schedules, inventory, reminders, intake history, check-ins, reflections, preferences, travel settings, review items, and saved reports. These are primarily stored locally.

When you choose to scan or identify a product, the app may use the camera, barcode, and label information. Source label images are temporary on-device processing artifacts; they are not part of the durable cabinet record or sent to the cloud in the normal identification flow.

For a lookup you request, the app may use a barcode, brand, or product name. It uses the NIH Dietary Supplement Label Database as its label-data source and may use Open Food Facts as a supplemental barcode or product-identity lookup when the NIH service does not provide an exact match.

Apple and RevenueCat handle subscription transactions, entitlement information, and restoration. Fabtekk Co does not receive your payment-card number. If you contact us, we may receive the email address and message contents you choose to provide.

If you choose Understand my supplements, the app asks you to confirm before sharing information. After confirmation, the app sends the structured information needed for the requested review through a Cloudflare-hosted gateway to OpenAI. This may include confirmed product and ingredient fields, label serving information, routine schedules, preferences, and other structured review context from your cabinet.

When subscription verification is enabled, an opaque RevenueCat App User ID may accompany the request. It is not your name, email address, or payment-card number.

Ingredient names may be used to retrieve public educational information from sources such as NIH, FDA, MedlinePlus, or NCCIH. After the app validates the result, the report is saved on your device. The current review flow does not make the report or your cabinet a server-side account or permanent cloud record.

We use information to provide and improve the app's cabinet, routine, inventory, reminder, calculation, product-lookup, backup/export, subscription, and optional review features; to secure and operate the service; to prevent abuse; to troubleshoot requests; to respond to support or deletion requests; and to meet legal obligations.

Supplement Cabinet does not sell your information, use it for targeted advertising, or use it for cross-app tracking. Supplement and routine information is not used for marketing.

Routine and supply reminders are scheduled locally through iOS. If you enable detailed notification content, a notification may include supplement names, quantities, and routine context that could be visible on your lock screen. You can turn off notification permission in iOS Settings or disable detailed notification content in the app.

You can manage camera permission in iOS Settings, choose not to start an optional review, export or delete app-managed data through the app's available controls, and manage or cancel subscriptions through Apple's subscription settings.

We share information only as needed to provide a feature you request or to operate and protect the service.

• Apple

  Apple provides the App Store, StoreKit purchase processing, and subscription-management services. Apple may retain purchase and subscription records under its own policies and legal requirements.

• RevenueCat

  RevenueCat processes subscription and entitlement information for purchase access, restoration, and billing-state management. RevenueCat receives an app-specific customer identifier rather than your payment-card number.

• NIH Dietary Supplement Label Database

  The NIH Dietary Supplement Label Database may receive barcode or product-identity lookup information when you request a lookup.

• Open Food Facts

  Open Food Facts may receive barcode or product-identity lookup information when it is used as a supplemental lookup.

• Cloudflare

  Cloudflare provides the secure gateway and related infrastructure for the optional review service.

• OpenAI

  OpenAI provides the model and related processing used for the optional review after you confirm sharing.

These providers may process information under their own privacy policies, terms, contracts, and configured retention settings. Their retention practices may differ from Fabtekk Co's practices. Fabtekk Co does not control records that providers are required or permitted to retain under their applicable policies or law.

Your cabinet, routines, intake history, reflections, preferences, reminders, and saved reports are primarily stored on your device in app-managed storage. The app also maintains an app-managed recovery copy while saving local data. Source label images are temporary capture artifacts and are not stored in the durable cabinet record.

When you request an optional review, the service may retain limited information for security, delivery, troubleshooting, abuse prevention, billing, dispute resolution, and legal compliance. Current service-side behavior includes:

• Validated response replay data may be retained for approximately 10 minutes so a request can be safely retried. Separate report-delivery reservation metadata may remain pending for up to 15 minutes while the app validates and saves a report.
• Ingredient research and public-source evidence may be stored in a shared cache for up to 45 days. This cache is keyed for reuse across requests and does not contain your cabinet, schedule, identity, or finished report.
• Limited pseudonymous request, security, usage, billing, allowance, and abuse-prevention metadata may be retained as reasonably necessary. The metadata store is not intended to contain raw cabinet data, images, prompts, or report text.

Model and infrastructure providers may have additional logging or retention under their own settings and policies. A request configured not to store a model response does not override provider-level logging or retention controls.

You can use the app's export and delete controls to create a backup or remove app-managed cabinet data, history, reflections, rewards, and saved reports. Deleting app-managed data also removes the app-managed recovery copy. Exported backup files remain wherever you saved or shared them and are not removed by the app.

You may email contact@fabtekk.co to request deletion of information held by Fabtekk Co. We may need to verify the request. We may retain limited information when required by law or reasonably necessary for security, billing, fraud prevention, support, or dispute resolution. A shared public-research cache entry is not linked to your cabinet or account, so a deletion request may not identify a particular cache entry; it does not contain your finished report or routine.

Deleting the app or its local data does not delete Apple or RevenueCat purchase, subscription, entitlement, or billing records, and it does not cancel a subscription. Those records and controls are managed through Apple and the applicable provider.

Declining or not starting a future optional review prevents a new review from being submitted. It does not by itself delete information already submitted for an earlier review; contact contact@fabtekk.co for a deletion request concerning information held by Fabtekk Co.

For privacy questions or deletion requests, contact contact@fabtekk.co.

App operator

Fabtekk Co

Product

Supplement Cabinet

Privacy email

contact@fabtekk.co

Effective date

September 13, 2026

We may update this Policy when the app's privacy practices change. The effective date above shows when this Policy was last updated.