Privacy

Privacy Policy

Last updated: May 2026

1. Overview

This policy explains how tinctr handles personal information when you visit the website, join the waitlist, contact us, create an account, or use the app.

tinctr helps organise supplement routines, cabinet inventory, pillbox refills, restock timing, and provider links. tinctr is not a medical provider and does not process retailer checkout, payment, or delivery details.

2. Who is responsible for your information

tinctr is responsible for the personal information it collects and uses through the website and app. For privacy requests, use the contact form and choose Privacy and data.

3. Information you provide

We collect information you give us directly, including name, email address, waitlist details, account details, preferences, support messages, contact form messages, consent choices, and anything else you choose to submit.

If you use tinctr, we may collect supplement routine and inventory information such as products, brands, doses, schedules, pillbox setup, stock counts, refill history, restock plans, notes, saved providers, and routine preferences.

4. Optional health-adjacent context

Some tinctr features may invite you to add optional health-adjacent context, such as medications, conditions, pregnancy or breastfeeding status, allergies, goals, diet notes, clinician notes, or other context you choose to share.

This information can be sensitive. For UK or EU users, some of it may be special category data. Where required, we rely on explicit consent for optional health context, and you can withdraw that consent or delete the information.

Raw medical record uploads are not part of the v1 product.

5. Information collected automatically

We may collect device, browser, IP address, approximate location, pages viewed, actions taken, error logs, security logs, cookie identifiers, and similar usage information. This helps us run, secure, debug, and improve tinctr.

If analytics, error monitoring, or cookie-based tools are used, we will use them for product improvement, security, and reliability, and provide choices where required by law.

6. How we use information

We use information to run the waitlist, create and secure accounts, send account and service emails, provide cabinet, refill, inventory, and restock features, respond to messages, prevent misuse, monitor performance, improve tinctr, and meet legal obligations.

If you opt in to marketing emails, we may send launch notices, product updates, and occasional tinctr news. You can unsubscribe from marketing emails at any time. Necessary account, security, waitlist, and service messages may still be sent.

7. Legal bases for UK and EU users

Where UK or EU data protection law applies, we usually process account and service data to perform a contract or take steps before entering one, marketing and optional health-adjacent context with consent, security and basic product improvement under legitimate interests, and legally required information under legal obligation.

You may object to legitimate-interest processing or withdraw consent where the law gives you that right.

8. AI and automated suggestions

tinctr may use AI systems to suggest timing, spacing, restock, cost, product fit, and routine simplification ideas. These suggestions are informational only and require your review before you make changes.

To generate those suggestions, relevant routine, inventory, preference, and optional health-adjacent data may be sent to AI processors. We aim to send only what is needed for the requested feature and to configure business/API processors so customer inputs and outputs are not used to train general models where that control is available.

9. Affiliate redirects and provider links

Provider links in tinctr may route through internal redirect links such as /r/[id]. When you click one, we may record the redirect identifier, destination provider, timestamp, approximate region, device or browser information, and referral attribution needed to operate the link and understand whether tinctr may earn commission.

Retailers and affiliate networks may receive referral parameters and may process your visit under their own privacy policies.

10. Processors and partners

We use service providers to host, secure, send, analyse, and operate tinctr. These may include hosting and database providers, authentication providers, email providers such as Resend, AI providers such as OpenAI and Anthropic, analytics or error-monitoring tools, affiliate networks, and retailers you choose to visit.

We do not sell personal information for money. Some affiliate, analytics, or advertising arrangements may be treated as sharing under certain privacy laws. Where those laws apply, we will provide required notices and choices.

11. International transfers

tinctr may be operated from, and processed in, countries other than where you live. Data protection laws may differ by location. Where required, we use appropriate safeguards for international transfers.

12. Retention

We keep personal information for as long as needed to provide tinctr, maintain records, resolve disputes, enforce terms, prevent misuse, and meet legal obligations. Waitlist and marketing data is kept until you unsubscribe, ask us to delete it, or we no longer need it.

Account and routine data is kept while your account is active, then deleted or anonymised after account deletion unless limited records must be kept for security, legal, backup, or fraud-prevention reasons. Optional health-adjacent context should use shorter retention and deletion controls when introduced.

13. Security

We use reasonable technical and organisational safeguards designed to protect personal information, including access controls and encrypted connections where appropriate. No online service can guarantee absolute security.

14. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your information. You may also withdraw consent where processing depends on consent.

To make a privacy request, use the contact form. We may need to verify your request before acting on it.

15. California and other US state privacy notes

If US state privacy laws apply, you may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain uses or disclosures of personal information. We will honour applicable state privacy rights and provide required choices where those laws apply.

16. Children

tinctr is for adults and is not directed to children under 18. Do not use tinctr or submit personal information if you are under 18.

17. Changes

We may update this policy as tinctr develops. If changes are material, we will take reasonable steps to notify users through the service, email, or an updated date on this page.