Last updated: March 2025 · GDPR compliant
The data controller for personal data collected through the site is OptiMealHealth. Contact: privacy@optimealhealth.com
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Email address | Account creation, communication | Contract performance | Account duration + 3 years |
| Password (hashed) | Secure authentication | Contract performance | Account duration |
| Profile data (BMI, allergies, goals) | Personalised coaching | Consent | Account duration |
| AI conversation history | Coaching continuity | Legitimate interest | 12 months |
| Payment data (Stripe) | Subscription management | Contract performance | Managed by Stripe |
| Connection logs | Security, fraud prevention | Legitimate interest | 6 months |
Your data is never sold to third parties. It may be shared with:
The site uses a strictly necessary session cookie (optimeal_token) for authentication. No advertising or third-party tracking cookies are used.
Under GDPR, you have the right to: access, rectify, erase, port your data, object to processing, and request restriction of processing.
To exercise these rights: privacy@optimealhealth.com. Response within 30 days.
We implement appropriate technical measures: bcrypt password hashing, HTTPS connections, JWT authentication, restricted database access.
Groq Inc. and Stripe Inc. are US companies. Transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.