Privacy Policy

Who we are

Compound is an app that helps you see what your supplements do for you, by comparing what you take with how you feel and with readings from devices you choose to connect. It is operated by COMPOUND DYNAMICS LLC, a limited liability company formed in Wyoming, United States (filing ID 2026-002093770), whose address is 30 N Gould St Ste N, Sheridan, WY 82801, USA. COMPOUND DYNAMICS LLC is the controller of your personal data.

In this policy, “Compound,” “we,” “us” and “our” refer to COMPOUND DYNAMICS LLC. Questions about this policy go to j.pastor1408@gmail.com.

The short version

• Supplement logs, check-ins and readings from Apple Health, Oura and WHOOP are health data. We only process them with your explicit consent, and only to give you your results.
• Your Apple Health data is never used for advertising, never sold, never given to data brokers and never sent to our analytics or crash-reporting tools.
• Product analytics are optional. If you say yes, they are linked to your account (never your email). If you say no, we only collect anonymous usage counts.
• Everything is stored in the European Union and encrypted. Sensitive fields get a second layer of encryption.
• You can export your data, withdraw consent, disconnect a device or delete your account from inside the app at any time.

What data we collect

Account data

If you save your account: your email address, and your name if Sign in with Apple or Google shares it with us (Apple only shares it the first time you sign in, and lets you change it first; signing up with email asks for no name). We keep the name with your account so the Compound team can recognise it when you contact support and in our internal admin tools, and it is deleted with your account. You can use Compound before saving an account; until then it is linked to a random identifier, not to you. Every account also keeps the time zone you set (your phone’s, unless you change it), which we use to send reminders at the right local time, to understand which regions use Compound, and to show the Compound team the country your account is in, in the same internal tools.

Your profile

The goals you choose (Energy, Focus, Performance, Recovery, Skin & Hair, Weight, Digestion) and, if you choose to give them, your age range, sex, height and weight. We use these to interpret your readings and to compare you with similar people in aggregate.

Check-ins and supplements

Your daily check-in answers, any context you add (for example caffeine, alcohol, training, sleep, stress, illness or travel), the products in your stack, when you take them and how much. We treat all of this as health data.

Apple Health

Only if you allow it, and only the types you allow. Compound reads: steps, active energy, resting heart rate, heart rate variability, breathing rate, sleep (including sleep stages), workouts, walking heart rate, VO₂ max, blood oxygen and sleeping wrist temperature. Compound never writes to Apple Health. Readings are copied to our servers and reduced to one value per day for analysis. You can turn access off in Settings › Privacy & Security › Health › Compound.

Oura and WHOOP

Only if you connect them. From Oura: sleep (length, stages and score), readiness, heart rate, heart rate variability, temperature deviation, blood oxygen, activity, workouts, and your profile basics (age, sex, height, weight). From WHOOP: recovery, heart rate variability, resting heart rate, blood oxygen, sleep (length, stages, performance, breathing rate), strain, workouts and body measurements. When you connect, we read the previous 30 days; after that we receive new readings as the provider sends them and check once a night.

Questions you ask the AI chat

The questions you type, the answers, and the sources cited.

Usage and device data

Which screens and features you use, app version, device model, operating system, language, time zone, approximate country, and crash and performance diagnostics. See “Analytics and crash reports” below for what depends on your consent.

Purchases

Apple handles payment. We receive your subscription status, plan, renewal dates, trial status, refunds and the price you paid, never your card details. If you open the app from an Apple Search Ads campaign, Apple tells us which campaign (no tracking identifier is used).

How we use it

• To give you your results: compare the days you take each supplement with your check-ins and device readings, and show you patterns, reports and the evidence behind each product. We need at least 21 days of data before saying anything, and a pattern is a finding in your own data, not proof that a supplement caused it.
• To run your account: reminders you ask for, weekly and monthly reports, rewards, support.
• To answer chat questions you ask.
• To improve Compound and decide what to build, using analytics (with your consent) and anonymous counts (without it), including testing different versions of a screen.
• To keep the service secure and working: diagnosing crashes and errors, preventing abuse.

We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you that have legal or similarly significant effects.

Legal bases

• Explicit consent for health data: check-ins, supplements, Apple Health, Oura and WHOOP readings, and health findings used in the chat. You give it in the app and can withdraw it at any time in You › Privacy.
• Consent for product analytics and session replay.
• Contract for your account, subscription and the features you use.
• Legitimate interests for security, crash diagnostics and anonymous usage counts, which we keep to the minimum needed.
• Legal obligation for records we must keep, such as purchase records.

Analytics and crash reports

If you allow analytics

We use Mixpanel (data stored in the EU) to understand how Compound is used. Events are linked to your account identifier, never your email, and can include the names of the products you add or log. Mixpanel also works out an approximate location (city and country) from the IP address the app’s requests come from; the IP address itself is not stored.

If you don’t

We only collect anonymous counts: no account identifier, product names replaced by their category, no whole-session replays, and no location beyond the country your device’s region setting gives.

Crash and performance reports

We use Sentry (data stored in the EU) to find and fix crashes and slow screens. Reports include the device, app version and what led to the error. When an error happens we may keep a replay of the moments before it and, if you allow analytics, we also record one session in ten as a replay to see where the app is confusing. In every replay all text and images are masked on your device before anything is sent, and health screens are excluded. Web addresses are stripped of search terms and health values are removed before sending.

Apple Health data is never sent to Mixpanel, Sentry or any other analytics or advertising service.

AI chat

When you ask a question, the text is processed by our AI providers (OpenAI, Groq and OpenRouter) to write an answer from the research we hold. If you allow it, the chat may also send OpenAI a summary of a pattern in your data (the supplement, the measure, the direction and size of the change, and how many days it rests on), never your raw readings, dates or name.

Who we share it with

Only service providers that process data on our instructions, under contracts that protect it:

• Google Cloud (EU, Belgium): hosting, databases, data analysis, encryption keys, and Firebase for push notifications.
• Mixpanel (EU): product analytics, with your consent; anonymous counts otherwise.
• Sentry (EU): crash and performance reports.
• OpenAI, Groq and OpenRouter (United States): AI chat, as described above.
• Resend: sending emails such as sign-in links and your data export.
• Apple and Google: sign-in, and Apple for purchases.
• Oura and WHOOP: only when you connect them, to receive your readings.
• Vercel: hosting this website.

Partner brands that offer rewards in Compound receive nothing about you: you only see a discount code. We may disclose data if the law requires it.

International transfers

Your data is stored in the EU. Where a provider processes it outside the UK or EU (the AI chat providers), we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, with additional safeguards.

Data security

Data is encrypted in transit and at rest. Wearable sign-in tokens, health readings, check-in notes and chat history are additionally encrypted with keys held in Google Cloud Key Management. Access is limited to the systems and people who need it, every administrative access to a person’s data is logged, and staging and production systems are kept separate.

How long we keep it

• Detailed readings within a day (such as heart rate through the day): 90 days, then reduced to daily values.
• Daily values, check-ins, supplement logs, reports and findings: while your account exists.
• Analytics (anonymous or linked to your account): up to 2 years. Crash reports and replays: up to 90 days.
• When you delete your account, everything is deleted from our systems and our providers' within 30 days, except records the law requires us to keep, such as purchase records.
• Disconnecting a device stops new readings. You can also choose to delete the readings it already sent.

Your rights

Under UK and EU data protection law you can:

• Get a copy of your data: You › Privacy › Download my data.
• Correct it, or ask us to.
• Delete your account and all its data: You › Privacy › Delete account.
• Withdraw any consent at any time, without affecting what was done before: You › Privacy.
• Object to or restrict some processing, and take your data elsewhere.

For anything else, contact j.pastor1408@gmail.com. We answer within one month.

You can also complain to the Information Commissioner’s Office (ico.org.uk) in the UK or the CNIL (cnil.fr) in France, or the authority where you live.

Children

Compound is not intended for anyone under 18. We do not knowingly collect data from children.

Not medical advice

Compound shows patterns in your own data and summarises published research. It does not diagnose, treat or prevent any condition. Talk to a healthcare professional before changing what you take.

Changes to this policy

If we change how we use your data, we will tell you in the app before the change applies and, where the change needs your consent, ask for it again.

Contact

Questions about this policy or your data: j.pastor1408@gmail.com.

COMPOUND DYNAMICS LLC
30 N Gould St Ste N, Sheridan, WY 82801, USA