Privacy Policy

Welcome to Opti Weight Tracker. We are committed to protecting your privacy and safeguarding your personal information. This Policy (“Privacy Policy”) explains how we collect, use, disclose, and protect the information you provide when using our application. By accessing or using the Application, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please refrain from using the App.

We are committed to complying with all applicable privacy and data protection laws, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“EU General Data Protection Regulation” or “EU GDPR”), the United Kingdom General Data Protection Regulation (“UK GDPR”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA/CPRA”), and, where applicable, the Health Insurance Portability and Accountability Act of 1996, including its implementing regulations (“HIPAA”) (collectively, the “Data Protection Laws”). Accordingly, we collect personal data only to the extent necessary to provide and improve our services.

We adhere to all applicable Apple App Store privacy and data handling requirements, including the App Store Review Guidelines, App Tracking Transparency Framework (“ATT Framework”), and Privacy Nutrition Label disclosures. Our data collection and usage practices are transparent and align with Apple’s standards for user privacy

Data We Collect and Process

Opti Weight Tracker collects and processes personal data ("Personal Data") that you, as a user of the Application, voluntarily provide, that is automatically collected during your use of the Application, and that may be obtained from third-party sources. We process such data in accordance with applicable Data Protection Laws.

We may collect and process the following categories of Personal Data:

a) Personal Identifiers

Full name
Email address
Birth Year
Gender
Profile picture (if voluntarily uploaded)

These identifiers support user account creation, authentication, personalization, and communication related to App services.

b) Health and Fitness Information

Current and target weight
Height
Body Mass Index (BMI)
Historical weight logs
Fitness goals (e.g., weight loss, maintenance, gain)
Motivational inputs and wellness preferences

This data supports the App's core functionality, including personalized insights, goal tracking, and performance analytics. Where required by Data Protection Laws we will request your explicit consent before collecting or processing health-related data. This data is treated as sensitive and processed with additional safeguards.

HealthKit Integration (if applicable): If our App integrates with Apple HealthKit or similar frameworks, we will separately inform you and obtain specific consent. We do not use health data for advertising purposes.

c) Usage, Device, and Tracking Data

Features accessed and user interactions
Session timestamps, frequency, and duration
Navigation patterns within the App
Language preferences and display settings
Crash reports and technical diagnostics
Device type and model
Operating system name and version
IP address (where applicable)
Unique device identifiers (e.g., IDFA, UUID)
Cookies and SDKs for analytics and performance
Unique identifiers (e.g., IDFA)
Behavioral analytics and engagement metrics

This data is used to operate, secure, and improve the App by enhancing functionality, diagnosing issues, personalizing features, understanding user behavior, monitoring app integrity, and ensuring security, fraud prevention, compatibility, and performance

For any use of device identifiers for cross-app tracking or advertising, we will request opt-in consent in line with ATT framework and applicable Data Protection Laws. You may manage or withdraw this consent at any time via in-app settings or your device controls.

How We Collect Personal Data and Legal Basis

We collect personal data through:

User Input: Information you directly provide during account creation, profile completion, fitness logging, or when contacting support.
Automated Tools: Data automatically collected using cookies, Software Development Kits (“SDKs”), analytics, and logging tools.
Third-Party Services: We may receive Personal Data from third-party tools or services (e.g., cloud storage, analytics platforms). Such Personal Data is collected in line with the applicable Data Protection Laws.

Legal Bases for Processing

Your explicit consent.
Fulfillment of a contract with you (e.g., account setup.)
Compliance with legal obligations.
Our legitimate interest in maintaining and improving App functionality (where allowed by law).

Purposes of Processing

We process your personal data for the following purposes:

To provide and operate the App and its core features
To personalize content and track fitness progress
To communicate essential service messages and promotional content (with your consent where required).
To analyze and improve App functionality and user satisfaction.
To detect and prevent misuse, fraud, or technical issues.
To meet our legal and contractual obligations.
To comply with ATT Framework for cross-app tracking (with opt-in consent).

Data Shared with Other Users

Certain personal data (e.g., weight logs, fitness goals) may be visible to a defined group of users only if you actively choose to share it.

You maintain full control over sharing settings.
You may update or revoke access anytime through account controls.
We do not enable sharing of personal data by default.
Any user-to-user sharing complies with applicable laws and Apple privacy requirements, including opt-in consent where needed.

No Collection of Certain Sensitive Data

We do not collect the following unless explicitly provided by you for a defined purpose:

Contact lists
Biometric identifiers (beyond voluntary health data input)
Financial account information

If such data is collected for support or feedback purposes, it is processed with the strictest safeguards and only in accordance with the relevant legal requirements and applicable Data Protection Laws.

Marketing Communications

With your explicit consent, we may send you marketing emails or push notifications containing information related to fitness, health, and wellness. We will require you to verify your email address before sending any marketing communications

Sharing Your Data

We value your privacy and only share your personal data when necessary and lawful. This includes:

Sharing data with trusted third-party service providers who assist in operating,maintaining, and improving our app. These may include:

Cloud hosting and storage providers.
Analytics and performance monitoring services.
Customer support and helpdesk platforms.
Payment processors (if applicable).
Communication and email delivery services.
IT security and fraud prevention partners.

Legal Obligations: Complying with laws, regulations, or valid legal processes.
Safety and Rights: Protecting the rights, safety, and property of our users, our company, or others
Your Consent: Sharing information with third parties when you have given explicit permission

We do not sell your personal data. Additionally, we do not share sensitive health information with advertisers or similar entities.

If we receive legal requests for your data, we will notify you, when possible, unless prohibited by law or if it's an emergency. We may challenge requests that are overly broad or lack proper authority.

How Long We Store Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including providing you with access to the App and related services

If you are a registered user, we retain your data for the duration of your account’s active status. After account deactivation, deletion, or inactivity, we may continue to store certain data only if and for as long as:

It is required by applicable law (e.g., for tax, accounting, or legal compliance purposes).
It is needed to resolve disputes or enforce our agreements.
It is subject to mandatory retention periods.
You have provided consent for longer retention (e.g., for research or support purposes).

When Personal Data is no longer required for any legitimate business or legal purpose, we will securely delete or anonymize it in accordance with applicable Data Protection Laws.

Security Measures

We implement appropriate technical and organizational measures to safeguard your Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures are designed to provide a level of security appropriate to the risk, taking into account the nature of the data we process, the potential impact of any breach, and current industry standards.

Our security practices include, but are not limited to:

Encryption of data in transit and at rest;
Access controls and role-based permissions to limit access to Personal Data;
Regular security audits, vulnerability assessments, and monitoring of our systems;
Secure development practices and regular updates to address security vulnerabilities;
Incident response procedures to manage and mitigate data breaches promptly.

For data subject to the EU GDPR and the UK GDPR, we comply with Article 32 obligations by ensuring confidentiality, integrity, availability, and resilience of processing systems and services.

For California residents, we uphold our obligations under the CCPA/CPRA by maintaining reasonable security procedures and practices appropriate to the nature of the Personal Information.

With respect to Protected Health Information (PHI) governed by HIPAA, we adhere to the HIPAA Security Rule and ensure that PHI is protected through administrative, physical, and technical safeguards. Business Associate Agreements are executed with all relevant service providers handling PHI on our behalf.

While we strive to protect your Personal Data using industry-standard security practices, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. If you believe your interaction with us is no longer secure, please contact us immediately.

Cross-Border Data Transfers

We may transfer and process your Personal Data in countries outside the United Kingdom (UK), the European Economic Area (EEA), and your country of residence, including the United States. These transfers may be necessary for the provision of our services, for data hosting, or to fulfill our contractual obligations.

Where Personal Data is transferred outside the UK or EEA:

We ensure that such transfers comply with applicable data protection laws, including the UK GDPR and EU GDPR.
Transfers are made to countries deemed to provide an adequate level of data protection by the UK Government or the European Commission; or
We implement appropriate safeguards, such as the International Data Transfer Agreement (IDTA), the Addendum to the EU Standard Contractual Clauses (SCCs), or other legally approved mechanisms.

For Personal Data subject to the CCPA/CPRA, we ensure that cross-border transfers are conducted in accordance with the CCPA/CPRA and any applicable regulations. We do not sell your personal information as defined under the CCPA/CPRA.

For data protected under the HIPAA, any transfer or sharing of Protected Health Information complies with HIPAA's Privacy and Security Rules, and Business Associate Agreements are executed where required.

Your Rights

We respect your rights over your personal data and are committed to complying with all applicable Data Protection Laws.

Depending on your jurisdiction and the nature of the data we process, you may have the following rights:

Right of Access: You have the right to request access to the personal data we hold about you and to obtain a copy of such data.
Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): In certain circumstances, you may request that we delete your personal data, subject to legal or contractual obligations.
Right to Restrict Processing: You may request us to restrict the processing of your personal data in specific situations.
Right to Data Portability: Where legally applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
Right to Object: You have the right to object to the processing of your data for direct marketing, profiling, or where we are relying on legitimate interests as a legal basis.
Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications or tracking for personalized experiences), you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to Opt-Out of Sale or Sharing (for California residents): You may request that we do not “sell” or “share” your personal information as defined under the CCPA/CPRA.
Right to Limit Use of Sensitive Personal Information (California residents): Where applicable, you may request us to limit our use of your sensitive personal information to that necessary for providing the services.
HIPAA Privacy Rights (if applicable): If we process protected health information, you have specific rights under HIPAA, including the right to receive a Notice of Privacy Practices, request amendments to your health records, and obtain an accounting of disclosures.
ATT Framework Rights: Where tracking is involved (e.g., use of device identifiers across apps), we will seek your opt-in consent in accordance with ATT Framework. You can manage or revoke this consent via your device settings.

To exercise any of your rights, please contact us at support@optimalbyte.net. We may require you to verify your identity before processing certain requests. We will respond in accordance with the timelines and procedures required by applicable laws.

Children’s Privacy

We do not knowingly collect, use, or process personal data from children under the age of 13 (or the minimum age required by applicable law). Our app is not directed to children, and we do not offer services to or for use by children.

Given the nature of our services which involve the collection and processing of health-related information such as weight and BMI data, use of the app is strictly limited to individuals who are of legal age to consent to the processing of their personal data under applicable laws, including the Data Protection Laws.

If we become aware that personal data has been inadvertently collected from a child, we will promptly delete such data from our systems. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action.

Complaints and Contact Us

If you have any questions, concerns, or complaints about how we handle your personal data or this Privacy Policy, please contact us using the details below:

Contact Information: support@optimalbyte.net
We take your privacy seriously and will respond to your inquiry promptly and in accordance with applicable Data Protection Laws.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you also have the right to lodge a complaint with your local data protection authority:

EEA: Contact your national supervisory authority via the EDPB website.
UK: Information Commissioner’s Office (ICO) – www.ico.org.uk.
California: California Privacy Protection Agency – www.cppa.ca.gov.
HIPAA: File complaints with the U.S. Department of Health and Human Services at www.hhs.gov/ocr.

We encourage you to reach out to us first, and we will do our best to resolve your concern in a timely and fair manner.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. When we make material changes to this Policy, we will notify you by prominently posting an updated version within the app, updating the “Last Updated” date at the top of this page, and, where required by applicable law, obtaining your consent.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the app after any changes signifies your acceptance of the revised Privacy Policy.

If the changes materially affect the processing of Personal Data subject to the EU GDPR, the UK GDPR, CCPA/CPRA, or HIPAA, we will take additional steps as required under the relevant laws, including but not limited to providing advance notice and obtaining explicit consent where applicable.

Oopti Weight Tracker

Company

Legal

Contact