Privacy Policy

1. Who We Are

JADCO LLC is a Wyoming limited liability company. For purposes of applicable data protection law, JADCO LLC is the data controller for personal data collected through Symptune.

You can reach us via our contact page.

2. What We Collect

Account Data

When you create an account, we collect your name and email address. Authentication credentials are managed by Better Auth. Passwords are hashed and never stored in plain text.

If you sign in using Google, Microsoft, Facebook, Discord, or GitHub, we receive your name and email address from that provider. We do not receive your password from any third-party sign-in provider, and we do not receive access to your Google, Microsoft, Facebook, Discord, or GitHub account data beyond what is needed to identify you and create your Symptune account.

Health-Adjacent Behavioral Data

When you use Symptune, we store data you voluntarily enter, including daily check-in scores (energy, mood, libido, focus, recovery, stress), protocol inputs (dose timing, supplements, medications, lifestyle variables), event logs (workouts, sleep events, alcohol, illness, travel), and lab markers or lab reports you choose to enter.

This data is health-adjacent. It is not a medical record. Symptune is not a HIPAA-covered entity, and this data is not protected under HIPAA.

Payment Data

Payments are processed by Stripe, Inc. We do not receive or store your credit card number, billing address, or other payment credentials. Stripe's privacy policy governs their handling of payment data.

Analytics Data

We use Umami Analytics, a privacy-first tool that does not use cookies, does not collect personal identifiers, and does not track you across sites. We receive only aggregate page view and traffic source data.

Session Cookies

We use a single session cookie to keep you signed in. This cookie is essential for the service to function. It does not track you across other websites and is deleted when your session ends or you sign out.

3. Why We Collect It

We use your data for the following purposes:

• To create and operate your Symptune account (contract performance)
• To provide protocol tracking, pattern analysis, and related features (contract performance)
• To send transactional emails such as account verification, password resets, and weekly digests via Maileroo (contract performance and legitimate interest)
• To improve the product using aggregate, non-identifiable usage patterns (legitimate interest)

We do not use your data for advertising. We do not sell your data. We do not share your health-adjacent behavioral data with third parties except as described below.

4. Third-Party Services

We use the following third-party processors. Each is bound by its own privacy policy and applicable data protection law.

No third party receives your health-adjacent behavioral data except as necessary to operate the service (for example, database hosting).

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will purge your personal data within 30 days, except where retention is required by applicable law or legitimate business records obligations (such as payment history required by Stripe).

You can export all of your tracking data at any time from your account Settings before deletion.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Receive a copy of your data in a portable format (data export is available in Settings)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, submit a request via our contact page. We will respond within 30 days.

7. GDPR (European Economic Area Users)

If you are located in the European Economic Area, the following lawful bases apply to our processing of your personal data:

• Contract performance: processing your account data and tracking data to deliver the service you signed up for
• Legitimate interests: transactional emails, aggregate analytics, and product improvement, where these do not override your rights
• Consent: where explicitly requested, such as optional marketing communications

You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.