Privacy Policy

OptimalTracker is designed to process health and biomarker information. By using the service, you knowingly upload sensitive health data so that we can produce the insights you request.

• Account and profile information — email address, password (stored as a salted hash by our authentication provider), display name, date of birth, biological sex where you provide it, and preferences such as language.
• Uploaded blood-test reports and PDFs — files you upload for analysis, together with the original filename and upload timestamp.
• Extracted biomarkers and laboratory values — values, units, reference ranges, collection dates and laboratory metadata parsed from your reports.
• Generated health reports, insights and personalised plans — summaries, explanations, longitudinal trends, priorities and recommendations produced from your data.
• Authentication and technical data — session tokens, IP address, device and browser type, timestamps, and error logs required to keep the service secure and reliable.
• Communications — messages you send us (for example beta feedback or support requests) and any attachments.

• To provide biomarker extraction, health reports and personalised plans.
• To track your results over time and highlight meaningful changes.
• To operate, secure and improve the service and diagnose problems.
• To communicate with you about your account, security or important updates.
• To comply with applicable legal obligations.

Data is encrypted in transit (TLS) and at rest. Uploaded files and extracted biomarker values are stored on managed, access-controlled infrastructure with role-based permissions. Access to production data is limited to a small number of authorised operators for the purposes of running and supporting the service.

We rely on trusted infrastructure providers, including:

• Managed database, authentication and object storage providers.
• AI providers used to extract biomarkers from uploaded PDFs and to generate explanations.
• Email delivery providers for transactional messages.
• Cloud hosting providers for the web application and background jobs.

Each provider processes data only under written instructions and appropriate safeguards. A current list of sub-processors is available on request from the contact channel used for your beta invitation.

We do not sell your personal data. We do not share your health information for advertising purposes.

We keep your data while your account is active. If you cancel or stop using the service, your data remains available so you can return to it. When you request permanent account deletion, we delete your account and associated data, including uploads, extracted biomarkers, generated reports and derived artefacts, subject to short technical retention windows for backups and any limited retention required by law.

• Cancellation — you stop using the service but your account and data remain in place until you decide to return or delete them.
• Permanent deletion — a destructive action that removes your account, authentication record, uploaded files, extracted biomarkers, reports, and derived artefacts. This action cannot be undone.

Subject to applicable law you have the right to access your data, to correct inaccurate data, to request a copy of your data in a portable format, to request deletion, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.

You can manage your profile from within the application. To request access, a data export, correction, or permanent deletion of your account and data, email the contact channel used for your beta invitation from the address linked to your account. We will respond within a reasonable period.

OptimalTracker is an educational preventive-health tool. It does not diagnose, treat or prevent disease and is not a substitute for professional medical advice, diagnosis or treatment. Always consult a qualified healthcare professional about medical questions or before acting on any information provided by the service. In an emergency, contact your local emergency service.

We may update this policy from time to time. Material changes will be communicated in the application or by email to your registered address.

Questions or requests about this policy can be sent to the contact channel used for your beta invitation.

Official contact details will be added before the public launch. During the closed beta, invited testers may contact the project administrator through the channel used for their invitation.

OptimalTracker is currently operated as a private closed-beta project.