Privacy Policy

This policy explains what personal data OptimalNourish collects, why, and your rights. It is written to align with India's Digital Personal Data Protection Act, 2023, the EU and UK GDPR for visitors in those regions, and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

1. Who we are

OptimalNourish, California, USA, operates this site. For any privacy question or request, contact our Privacy Officer at privacy@optimalnourish.com.

2. What we collect

• Email address, when you ask us to send your schedule or guides.
• Your consent record (what you agreed to, with date and time).
• The schedule you build: the supplements you select and timing preferences, and your routine answers (for example shift work, fasting, training). This is behavioural preference data, not health data.
• Payment information: when you buy the PDF, Stripe processes your payment. We receive a confirmation and limited details (for example email, amount, status). We do NOT receive or store your full card number.
• Technical and usage data: basic analytics and, if enabled, coarse location (country) and device type. See the Cookie Policy.

3. What we do NOT collect

We do not ask for or store health conditions, diagnoses, medications, pregnancy status, or symptoms. Please do not send us such information.

4. Why we use it and our legal basis

• To deliver the schedule and PDF you request (performance of a service).
• To send educational guides, only with your consent (which you can withdraw).
• To process payments and meet tax and accounting obligations (legal obligation).
• To maintain, secure, and improve the Service (legitimate interest), using privacy-friendly analytics.

5. Cookies

We use cookies and similar technologies as described in the Cookie Policy. Non-essential cookies are used only with your consent.

6. Sharing

We share data only with service providers acting on our behalf: the payment provider (Stripe), the email delivery provider (Resend), and hosting and database providers (for example Vercel and Supabase), and analytics. We do not sell your personal data. We may disclose data if required by law.

7. International transfers

Our providers may process data outside your country, including in the EU or US. Where required, we rely on appropriate safeguards for such transfers.

8. Retention

We keep your email and schedule for as long as you remain subscribed or until you ask us to delete them, and payment records for as long as the law requires. We then delete or anonymise the data.

9. Your rights

Subject to applicable law, you can: access the data we hold about you; correct it; delete it; withdraw consent at any time; and complain to us or to your data protection authority. In India you also have the right to grievance redressal and to nominate another person to exercise your rights. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information; we do not sell or share personal information for cross-context behavioural advertising. To exercise any right, email privacy@optimalnourish.com; we will respond within the timeframe the law requires.

10. Children

The Service is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures to protect your data. No method is completely secure, but we restrict access to authorised personnel only.

12. Changes

We will post changes here with a new "Last updated" date.

13. Contact and grievances

Privacy Officer, privacy@optimalnourish.com.