Privacy Policy

This policy covers Stackhaus Academy, operating at stackhauslife.com, including the peptide library, protocol stacks, and Stackhaus Compass. Stackhaus Academy is operated as a sole proprietorship — no separate corporate entity has been formed for Stackhaus Life. Business address: 7244 SW 42nd Terrace, Miami, FL 33155. Governing law/jurisdiction: State of Florida.

Compass: the name, email, date of birth, ZIP code, and biological sex you enter, plus the lab file you upload. The complete uploaded file and your derived age and biological sex are sent for AI processing; we do not intentionally add your name or email to that request, but the file itself may contain identifying information.

Account access: Stackhaus Compass requires a verified account. You may sign in with an email one-time link, an email and password, or a Google account. If you set a password, it is stored by Supabase (our authentication provider) using industry-standard hashing — we never see or store your password in plain text. If you use Google sign-in, we receive only the account information Google shares for authentication (name and email).

Automatically: standard hosting/request metadata (IP address, device, page, and performance data) via our hosting provider.

We use external service providers and subprocessors to operate Stackhaus Academy. We do not claim your information is never shared with anyone — here is exactly who receives what, and why:

• Vercel — hosting and request execution. Receives Compass form fields and your uploaded file while your request is processed, plus standard device/request metadata.
• OpenRouter, and its selected AI model provider (currently Google Gemini) — AI processing. Receives your complete uploaded lab file, derived age, biological sex, and the resulting analysis. Requests are sent with zero-data-retention and model-training-opt-out settings enabled.
• Supabase — database and authentication, on a project dedicated to Stackhaus Academy. Stores your name, email, generated dashboard, and authentication data.
• Omnisend — email marketing, only if you separately check the optional marketing consent box on Compass. Receives your email, first name, last name, and consent source. We do not send lab data, dashboard content, or health information to Omnisend.

We do not sell your personal or health information, and we do not use Compass health data for targeted advertising.

Your uploaded lab file is retained briefly after analysis (currently up to 36 hours) so a failed or incomplete analysis can be reprocessed without asking you to re-upload, then deleted automatically. Generated dashboards are retained so you can access your history; you can request deletion at any time via Contact. Formal deletion-response SLA: [pending].

Compass works whether or not you opt into marketing email, and that choice never affects your ability to generate or access your dashboard. You can request access to, export of, or deletion of your data via Contact.

Minimum age to use Stackhaus Academy: 18. Stackhaus Academy is not directed at, and does not knowingly collect information from, anyone under 18.

Questions about this policy or your data: Contact us.