Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

Our Commitment to Your Privacy

At Optimitz, we believe that your health data is among your most personal and sensitive information. This Privacy Policy explains how we collect, use, protect, and share your information when you use our health and wellness platform.

1. Information We Collect

1.1 Health and Wellness Data

We collect health information you provide directly to us, including:

• Biometric data (height, weight, body measurements)
• Fitness and activity information
• Nutrition and dietary preferences
• Sleep patterns and quality data
• Mental wellness and stress assessments
• Health goals and preferences

1.2 Account Information

When you create an account, we collect:

• Name and email address
• Profile information you choose to provide
• Account preferences and settings

1.3 Device and Usage Data

We automatically collect certain technical information:

• Device information (type, operating system, unique identifiers)
• Usage patterns and feature interactions
• Log data and error reports
• IP address and general location data

1.4 Third-Party Integrations

With your consent, we may collect data from:

• Fitness trackers and wearable devices
• Health apps and platforms
• Nutrition tracking services
• Sleep monitoring devices

2. How We Use Your Information

2.1 Core Services

We use your information to:

• Provide personalized health insights and recommendations
• Generate AI-powered wellness coaching
• Track your progress toward health goals
• Deliver our health assessment calculators
• Sync data across your devices

2.2 Platform Improvement

We use aggregated, anonymized data to:

• Improve our AI algorithms and recommendations
• Enhance user experience and app functionality
• Develop new features and services
• Conduct research and analytics

2.3 Communication

We may contact you for:

• Important updates about our services
• Health tips and educational content
• Customer support and technical assistance
• Marketing communications (with your consent)

3. How We Protect Your Information

3.1 Data Encryption

• All data is encrypted in transit using TLS 1.3
• Health data is encrypted at rest using AES-256
• Encryption keys are managed separately from data

3.2 Access Controls

• Multi-factor authentication for all team access
• Role-based permissions with minimal access principles
• Regular access reviews and deprovisioning

3.3 Infrastructure Security

• SOC 2 Type II certified cloud infrastructure
• Regular security audits and penetration testing
• Automated security monitoring and incident response

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We never sell, rent, or trade your personal health information to third parties for marketing or commercial purposes.

4.2 Limited Sharing

We may share your information only in these specific circumstances:

• With your consent: When you explicitly authorize sharing
• Service providers: Trusted partners who help operate our services
• Legal requirements: When required by law or to protect rights
• Business transfers: In case of merger or acquisition

4.3 Anonymized Data

We may share aggregated, anonymized data that cannot identify you for:

• Public health research and insights
• Industry trends and analytics
• Academic research partnerships

5. Your Privacy Rights

5.1 Access and Control

You have the right to:

• Access: View all data we have about you
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and data
• Export: Download your data in a portable format
• Restrict: Limit how we process your information

5.2 Communication Preferences

You can:

• Opt out of marketing communications anytime
• Choose which notifications you receive
• Manage email preferences in your account settings

5.3 Third-Party Integrations

You can:

• Connect or disconnect third-party services
• Control which data is shared from integrations
• Review and manage connected applications

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Active accounts: Data retained while account is active
• Inactive accounts: Data may be retained for up to 3 years
• Health data: Retained for 7 years or as required by law
• Account deletion: Most data deleted within 30 days of request

7. International Data Transfers

We may transfer your information to countries other than your own. When we do:

• We ensure adequate protection through appropriate safeguards
• We comply with applicable data protection laws
• We use standard contractual clauses for international transfers

8. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will notify you of material changes
• The updated policy will be posted on our website
• Your continued use constitutes acceptance of changes

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• Email: privacy@optimitz.com
• Website: www.optimitz.com