Consumer Health Data Privacy Policy

What we collect, and why

When you ask Substrate a question, we answer it and forget it. The question is processed in memory and never written to disk. We don't have a record of what you asked.

We count questions in aggregate — that "magnesium + sleep" was asked 1,400 times last month — so we know which evidence to review next. Those counts contain no identifier of any kind, and our database physically refuses to store any question asked by fewer than 25 people, because a rare enough question is a person. This is a schema constraint, not a policy promise — see independence for the technical detail.

If you save supplements to a stack or a watchlist, that's data about you and we store it — what, exactly, is described in the product itself at the point you save it. That is the only consumer health data we hold about a named person.

Sources of this data

Directly from you: the supplements/outcomes you choose to save to a stack or watchlist. Nothing is purchased, inferred from third-party data brokers, or derived from tracking.

Categories shared, and with whom

We share consumer health data with no one. There is no third party. We run no advertising pixels, no session replay, and no ad-tech tags on any page where you're asking about your health.

Your rights

You can confirm, access, withdraw consent for, and delete your consumer health data.

• Confirm and access what's stored: from your account, or by contacting us.
• Withdraw consent or delete: one click in your stack/watchlist settings, or by request.
• Response SLA: within 45 days of any request, as MHMDA requires.