MenoSupp Privacy Policy and Consumer Health Data Notice

1. About MenoSupp and this notice

This policy and consumer health data notice explains how Decent4 LLC (“MenoSupp,” “we,” “us,” or “our”) handles information when you use the paid MenoSupp iOS/iPadOS app, its AI-assisted supplement research guide, its subscription purchase/restore flow, and our public support/privacy pages.

MenoSupp is educational decision-support software. It does not diagnose menopause or any condition, recommend that you take a supplement, prescribe treatment, provide a personal dose or start plan, direct medication or supplement changes, confirm that a product is safe, or replace a clinician or pharmacist. Do not use MenoSupp instead of emergency services or professional medical care.

2. Information kept on your device

MenoSupp is local-first and does not require an account. After onboarding, an active monthly or yearly subscription entitlement is required for functional app access. Restore Purchases and links to Terms, Privacy, and Support remain reachable without an entitlement. The following information is stored in the app on your device:

• menopause stage/context and age range;
• research goal, selected symptoms, impact scores, duration, frequency, and priorities;
• medicine, supplement, hormone-use, health-condition, bleeding, urgent-symptom, and confirmation answers;
• brief symptom check-ins and their timestamps;
• AI-sharing permission and app settings;
• the latest guide, locally saved guide candidates, withheld-record explanations, citations, and provenance returned by the service;
• local reminder preferences.

We cannot access information that remains only on your device. You can export a JSON copy through the iOS share sheet or erase local app data from Profile > Privacy & Data. Device backups are controlled by your Apple/device settings.

3. Optional AI guide processing

Completing onboarding or purchasing a subscription does not send your structured health profile to MenoSupp or an AI provider. Before any guide request, the app presents a separate optional disclosure and permission control. If you have an active entitlement, you may decline AI processing and continue using paid local features. This is not a free-access tier.

If you turn on AI guide processing and tap Generate, the app sends the current structured profile over HTTPS to the MenoSupp server. The request includes consent metadata, menopause stage/context and age range, research goal, selected symptom identifiers and impact/duration/frequency/priorities, only whether you currently use medicines, supplements, or hormone therapy, selected fixed-choice health considerations, bleeding and urgent-symptom answers, a random request identifier, app language, and the account-free, pseudonymous RevenueCat App User ID used solely to verify paid entitlement.

The official client does not include medication categories, medication names, or supplement names in the public guide request. It also does not include check-in history, email, a MenoSupp account identifier, advertising identifier, contacts, photos, audio, or precise location.

The MenoSupp server sends only the pseudonymous RevenueCat App User ID—not the structured health profile, symptoms, check-ins, guide content, or AI consent state—to RevenueCat solely to verify active entitlement. Deterministic safety and catalog rules then run. When a model call is permitted, the intended production route uses Vercel AI Gateway with OpenAI as primary and Anthropic as a possible one-time fallback. Of the user’s health-profile fields, the model prompt receives only menopause stage, symptom IDs/impact, and priorities, plus reviewed eligible candidates and anonymous withheld counts/reason codes.

We do not permit the structured profile or guide request to be used for advertising, data-broker activity, unrelated profiling, or general-model training. You can turn off AI guide processing in Profile to stop future requests.

4. Purchases and other network activity

Payment is processed by Apple. MenoSupp does not receive your full payment-card details. Apple and RevenueCat may process product, transaction/receipt, a reusable account-free RevenueCat App User ID, entitlement, and restore information. That User ID and associated purchase history are conservatively treated as linked to the app user or device for Apple privacy disclosures. With separate marketing permission and Apple ATT authorization, RevenueCat also sends its pseudonymous App User ID and subscription lifecycle details to AppsFlyer for advertising attribution.

Optional app analytics and masked onboarding recordings. MenoSupp asks for optional analytics permission separately from AI guide processing and advertising. With the current disclosure accepted, MenoSupp may store allowlisted app actions under a separate installation identifier and forward a filtered copy to PostHog. Expo Observe may receive app actions, sanitized caught-error categories and startup, readiness and update performance. When enabled for the release, PostHog may record onboarding and the membership screen with the entire app view, text, inputs, images and system views masked. Recording stops outside those screens and on background. Health answers and personal content are excluded.

Separate advertising measurement. AppsFlyer starts only after separate marketing opt-in and Apple's ATT grant on iOS. Android advertising is disabled. AppsFlyer may process its installation identifier, authorized advertising identifiers and standard installation/device information. The app sends only generic app-open, paywall and checkout outcomes, never health events. With this permission, RevenueCat receives the AppsFlyer-generated identifier for its subscription lifecycle integration; RevenueCat is the sole source of paid-revenue events and sends its pseudonymous App User ID, product identifier, revenue and renewal details to AppsFlyer. Configured partners may include Meta and TikTok. No raw MenoSupp account ID is set as an AppsFlyer customer ID.

Sanitized operational diagnostics. A configured production Sentry integration receives sanitized JavaScript and iOS native crash/error reports independently of optional analytics. User information, requests, breadcrumbs, raw messages and extra content are removed; useful code positions and release details remain. iOS native crash reports use a separate allowlist; Android native transport, tracing, profiling, Sentry replay and screenshots are disabled. Optional Expo reporting uses safe native methods without its raw JavaScript exception handler.

Health profiles, symptoms, check-ins, medicine and supplement names, guides, AI prompts/results, email addresses, passwords and personal free text are excluded from these tracking payloads. Product events are pseudonymous, not anonymous. Requests expose normal network metadata such as IP addresses to the receiving provider. Disable analytics or marketing in Profile to stop future collection; these choices do not affect paid access or AI-sharing permission. Previously accepted server work may finish processing.

Erasure. Erase all data also requests deletion of this installation's first-party analytics and queues PostHog event/recording erasure. Offline requests retain a separate erasure credential for retry on a later launch or foreground. Provider erasure is asynchronous; it does not delete required store/subscription records or imply erasure from every provider. Uninstalling before an offline request reaches the server can prevent that request from completing. Contact support for help with legacy provider data.

App updates. Expo EAS Update checks for and downloads compatible updates independently of optional analytics, using the technical request and compatibility information required to deliver those files. It does not include health-profile answers or guides. Optional Observe dispatch remains consent-dependent.

MenoSupp does not sell health information or use it for advertising. Local reminders stay on device. Public pages receive normal web-request information. Any tracking on the separate Decent4 website has its own controls.

5. Why we process information

• provide the AI-assisted guide you expressly request;
• present, process, restore, and validate the subscription entitlement required to unlock the app;
• run deterministic safety, abstention, and catalog-eligibility checks;
• return source-linked evidence, uncertainty, cautions, withheld-record reasons, and questions for a professional;
• prevent abuse, protect service availability, and diagnose operational failures without intentionally logging health request bodies;
• provide support and respond to privacy requests;
• comply with law and protect users, rights, safety, and the service.

6. When and with whom we disclose information

When you request a guide, MenoSupp’s hosted endpoint receives the structured consumer health data described in Section 3. Intended recipients:

• MenoSupp hosting on Vercel — receive the request, verify entitlement, run policy, return the guide, protect availability
• Vercel AI Gateway — route a permitted model request using the minimized prompt
• OpenAI — primary constrained guide generation
• Anthropic — one-time fallback only after primary failure or invalid output
• Apple App Store / StoreKit — subscriptions, purchases, renewals, cancellations, refunds, restores
• RevenueCat — account-free App User ID, purchase/restore state, and entitlement checks; never the health profile or guide content
• Decent4 LLC support inbox (info@decent4.com) — only the contact/message you send

We do not disclose consumer health information to advertisers, data brokers, supplement sellers, or affiliate-ranking partners, and we do not sell consumer health information. Exact processor retention periods follow each provider’s published practices plus legal obligations. Contact info@decent4.com for a request involving data Decent4 LLC controls.

7. Retention and deletion

Local information remains until you erase it in the app, reset/delete the app, or it is affected by a device backup you control. The guide endpoint has no account database and is designed not to persist a profile or guide in MenoSupp history or cache. Operational systems and processors may nevertheless retain network metadata, logs, prompts, or outputs. Apple and RevenueCat separately retain purchase records according to their terms and legal obligations.

Because the release has no account, there is no MenoSupp server account to delete. Use Profile > Privacy & Data > Delete On-Device Data. This does not cancel an Apple subscription. Details: account deletion page.

8. Your choices and rights

You can use paid local features without AI sharing; purchase, restore, and cancel through Apple; turn AI processing on or off; decide whether to tap Generate; export or erase local information; disable reminders; and request access, correction, or deletion where applicable. Contact info@decent4.com. You do not need to create an account. We respond on business days. To appeal a privacy-request decision, reply to our response and ask for a second review by Decent4 LLC.

9. U.S. consumer health data notice

MenoSupp handles consumer health data you provide directly: menopause/reproductive context; age range; symptoms and impact; duration/frequency/priorities; medicine, supplement, and hormone-use information; pregnancy/trying/breastfeeding context; selected conditions; bleeding and urgent-symptom answers; and guide inferences/results based on those fields. Exact medication names and supplement names remain on-device. We do not buy this information from data brokers.

We use it only for the user-requested guide, deterministic safety/eligibility, source-linked explanation, service security, and support/privacy requests. The app asks for a clear, optional opt-in before a guide can send the structured profile. You also initiate each transmission by tapping Generate. We do not sell consumer health data and do not use it for advertising or unrelated profiling.

10. Security

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including HTTPS in transit, data minimization, schema validation, bounded requests/responses, deterministic safety checks, access controls, environment/secret separation, abuse controls, and fail-closed provider handling. No system is perfectly secure. Contact info@decent4.com if you believe information is at risk.

11. Children

MenoSupp is intended for adults and is not directed to children. We do not knowingly collect personal information from children.

12. Changes and contact

We will update the effective date and provide notice appropriate to a material change. Questions, requests, or complaints: info@decent4.com. Legal entity: Decent4 LLC. Terms of Use: Apple Standard EULA.