Privacy Policy

OptiPhy handles some of the most personal data there is — your body, your health, your photos. This policy explains what we collect, why, and the control you keep over it. The short version: we collect only what the app needs to work, nothing is gathered without your consent, we do not sell or share your data for advertising, and delete means delete. OptiPhy is operated from Quebec, Canada.

1. What we collect

• Account data — email address and login credentials, used to create and secure your account.
• Profile data — age, sex, height, weight, training experience, and goals, used to compute calorie targets and personalize coaching.
• Training data — the workouts you build, the sessions you log, and your body measurements.
• Photos (optional, OptiPhy Exclusive) — physique or food photos you explicitly submit for analysis. Collected only with explicit, revocable consent.
• Health data (planned — not yet collected) — heart rate and active calories via Health Connect are a future OptiPhy Exclusive capability. The current app does not read Health Connect data; if and when this ships, it will be collected only after you explicitly grant permission in Health Connect itself.
• Purchase state — your subscription tier, synced from the app store to unlock the right features. We never see your full payment details; those stay with Google Play / the App Store.
• Crash & error diagnostics — if the app crashes or hits an error, a diagnostic report (the error, its stack trace, the app version, and your device model / OS version) is sent to our crash-reporting provider so we can find and fix it. It is not intended to contain personal data or a record of your activity.

2. What we use it for

• Running the app: saving your workouts, logs, plans, and progress.
• Computing your calorie target and analysis from your own data — we gather this to give you accurate results, not to profile you.
• Grounding coach responses in your profile and history, when you use coach features.
• Validating your subscription and enforcing plan limits.
• Diagnosing crashes and abuse. We do not sell your data or use it for third-party advertising.

3. Who we share it with

We do not sell your personal data, and we do not share it for advertising. The OptiPhy app contains no advertising or analytics SDKs and no behavioural or ad trackers — the only third-party SDKs in the app are Sentry crash & error reporting (below), which sends a report only when something goes wrong, and RevenueCat, which manages your subscription state so the app unlocks the right features. To run the Service, we rely on a small set of trusted providers that process data on our behalf, only as needed to make the app work:

• Render — hosts our application server, which processes your requests.
• Neon — hosts our database, where your account and training data are stored (encrypted in transit and at rest).
• Google Play (Google LLC) — distributes the app and processes your subscription payments; we receive only your subscription status, never your full payment details.
• RevenueCat — manages your subscription state so the app unlocks the right features.
• Fireworks AI (United States) — our AI provider. When you use the AI coach or photo analysis, we send it what it needs to generate your response: your coach messages, the relevant profile and health context (such as goals, height, weight and training history), and any photos you submit — including body/physique photos. This data is transmitted to and processed in the United States. It is used only to produce your response; photos are not stored on our servers, and we send a photo only when you have explicitly consented to photo analysis.
• Our email provider — delivers account emails such as verification and password reset, sent to the email address you provide.
• Sentry — our crash & error reporting provider. When the app or our server hits a crash or error, a diagnostic report is sent so we can find and fix it: the error and its stack trace, the app version, and basic device/OS information. Crash and error reports only — no analytics, no usage or session tracking, no activity trail, and no personal identifiers.

Two backend features also send non-identifying lookups to external services: USDA FoodData Central (to look up the calories and macros of an ingredient) and Serper.dev (to find recipe links). These receive only the food or recipe text involved — never your identity or personal data.

Our providers use their own providers. Each service above may in turn rely on its own downstream sub-processors — for example, the cloud infrastructure that hosts them — to deliver its service. We do not control those downstream providers, cannot individually list every one, and are not responsible for their independent practices; they operate under our providers' own privacy and security commitments. We choose providers we consider reputable and share with them only what the Service needs to function.

Each provider handles data under its own security and privacy terms and may process it in its own regions. We may also disclose data where required by law, or to protect the rights, safety, or security of our users or the Service. We do not otherwise share your personal data.

4. International data transfers

OptiPhy is operated from Canada, and some of the providers in Section 3 are located in the United States or other countries. Your data may therefore be processed outside your own country — including in Canada and the US. Where we transfer personal data internationally, we rely on the safeguards our providers offer (such as standard contractual clauses and their own data-processing agreements) to keep it protected. By using the Service you understand that your data may be transferred and processed as described here.

5. Legal bases for processing

Where the EU/UK GDPR, Quebec's Law 25, or a similar law applies, we process your personal data on these bases:

• To provide the Service — running the app, your account and your subscription (performance of our contract with you).
• Your consent — for optional and sensitive data such as photos and health metrics, which you can withdraw at any time.
• Our legitimate interests — keeping the Service secure and diagnosing crashes and abuse, balanced against your rights.
• Legal obligations — where the law requires us to process or retain certain data.

Because photos and health metrics are sensitive ("special category") data, we process them only with your explicit consent, which you can withdraw at any time.

6. Your consent

Body photos and other sensitive data are collected only after you explicitly opt in. You can withdraw your photo-analysis consent at any time from the app's settings — this immediately turns off photo analysis and clears the consent record on our servers. To remove other data you've provided, delete the relevant items in the app where that option exists, delete your account (Section 9), or email us at contact@optiphy.app and we will erase it.

7. Storage and security

Data is stored on managed infrastructure with encryption in transit (TLS) and at rest, and the app's on-device cache is encrypted with a key held in your device's secure keystore. Access is restricted to the systems that serve your requests. Analysis of your photos happens only when you request it, and photos are never used for anything other than the analysis you asked for.

8. How long we keep your data

We keep your account and training data for as long as your account is active. When you delete your account it is erased 30 days after the request (Section 9). Crash and error reports are retained by our reporting provider on its standard schedule (typically up to 90 days) and then deleted. We keep only what we need, for only as long as we need it to run the Service or to meet a legal obligation.

9. Deleting your data

You can delete your saved workouts and meal plans directly in the app. Your weight history, logged sessions, and coach chat history are removed when you delete your entire account (Account → Delete account) or on request to support — we do not yet offer per-item deletion for those. Account deletion is scheduled immediately and permanently erases your data 30 days after the request day; log in before then to cancel. Deletion is real: the data is removed from our systems, not merely hidden. You can also request deletion by emailing contact@optiphy.app. Full step-by-step instructions are on our account & data deletion page.

10. Your privacy rights

Wherever you live, you can export your data (Account → Export my data) and delete your account (Section 9). Depending on your region, you also have rights that we honour on request, including to:

• access the personal data we hold about you and receive a copy;
• correct or update data that is inaccurate or incomplete;
• delete your data (erasure);
• receive your data in a portable format, or have it ported;
• withdraw consent for optional or sensitive processing;
• object to, or ask us to restrict, certain processing;
• (California) confirm what we collect and that we do not sell or "share" your personal data, and not be treated differently for exercising your rights;
• (Quebec, Law 25) access, correct, and port your data, and be informed if a decision about you is made by automated means.

To exercise any right, email us below; we respond within the period your law requires (generally within 30 days). You also have the right to complain to your privacy regulator — for example the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your EU/UK data-protection authority.

11. Age

OptiPhy is intended for adults and older teenagers. You must be at least 16 (or older, where your region requires) to create an account. It is not directed at children, and we do not knowingly collect data from anyone under that age; if we learn that we have, we delete it.

12. Not medical advice

OptiPhy provides fitness and nutrition guidance, not medical care. The coach will not diagnose conditions and is designed to refuse dangerous advice. Consult a professional for medical questions.

13. Data breaches

If a security incident affects your personal data in a way that is likely to create a risk to you, we will notify you and the appropriate authority (such as the Commission d'accès à l'information du Québec or your data-protection regulator) as and when the law requires.

14. Changes & contact

OptiPhy is operated from Quebec, Canada by Timothee Vilme Bouchard. If this policy changes materially, we'll notify you in the app before the changes take effect. For any privacy question, request, or concern: contact@optiphy.app

Privacy officer (Quebec Law 25). Our Privacy Officer, responsible for the protection of personal information, is Timothee Vilme Bouchard, reachable at contact@optiphy.app.