Privacy Policy

Optim by Gloss Digital LLC — Last updated: May 11, 2026

Summary: Optim has no account system and stores your protocols, dose logs, outcome scores, and progress photos exclusively on your device. The only data that leaves your phone is what you explicitly send to the AI Coach or the bottle-scanner — and we don't store those calls or use them to train AI models. We don't sell data. We don't have analytics or ad SDKs. We don't have your data to sell or share even if we wanted to.

1. Information We Collect

Information You Provide

Profile information: First name, experience level, peptide-related goals, and optional body composition fields (weight, height, gender, birth year) entered during onboarding. All stored locally on your device.
Health & wellness logs: Peptide dosing records, protocols, vial inventory, side effect journals, outcome scores, and notes. Stored exclusively on your device.
Progress photos: Photos you optionally take or import. Stored on your device only — never uploaded to our servers.
Bottle scanner photos: When you scan a peptide vial, the image is sent to OpenRouter, the AI provider we use, and processed by Anthropic's Claude vision model to identify the compound. We do not retain the image.
AI conversations: Messages you send to the AI Coach, along with your active protocol context.

Information Collected Automatically

Device identifiers: Anonymous device identifiers used solely for subscription/purchase management via RevenueCat. We don't link these to your name or contact info.
IP address: Temporarily processed by our API server (Vercel and Railway) for rate limiting and bot mitigation. Not stored long-term, not logged in association with your usage.

What we do NOT collect: No email address. No password. No location. No contact list. No browser history. No device fingerprint. No analytics events. No advertising IDs. No third-party tracking pixels.

2. How Your Data Is Stored

Local-first design: Your protocols, dose logs, vial inventory, outcome scores, progress photos, side effect journals, and notes live exclusively on your device in app-private storage. There is no server-side database containing your health information.

We do not maintain user accounts. If you uninstall the app, your data is gone. We recommend exporting any data you want to keep before uninstalling (use the built-in data export in Profile › Data & privacy).

3. Information Shared with Third Parties

AI Services (OpenRouter, running Anthropic's Claude)

When you use the AI Coach or the bottle scanner, the relevant context (your active protocol, recent doses, outcome scores, or a vial photo) is sent through our backend server to OpenRouter — the AI provider we contract with — which routes it to Anthropic's Claude models for processing. We do not store that data and we do not use it to train models. What OpenRouter and the model providers it routes to retain is governed by their own policies, which we do not control:

RevenueCat (Purchase Management)

If you purchase an Optim Pro subscription (annual or monthly), RevenueCat processes the transaction. We receive confirmation of your purchase status but never see your payment details (those are handled by the platform processor). See the RevenueCat Privacy Policy.

4. Permissions

Camera: Used for taking progress photos and scanning peptide vial labels. Progress photos stay on your device. Bottle-scanner photos are sent to our AI provider for identification (per Section 3) and are not retained by us.
Photo Library: Used to import existing photos for progress tracking or to upload an existing photo of a vial for scanning. Same handling as camera input.
Notifications: Used to deliver dose reminders, low-stock vial alerts, streak achievements, and tier advances. You can disable each notification category in the app settings or all notifications in your device settings.

5. Data Security

Communications between the app and our backend (Vercel and Railway) are encrypted using HTTPS/TLS. Your locally stored data is protected by your device's built-in security — passcode, biometric lock, and full-disk encryption provided by iOS or Android. We do not apply additional application-layer encryption on top of that; we rely on the platform's security model.

6. Children's Privacy

Optim is intended for adults age 18 and older. Peptides are research compounds and not approved for use in minors. We do not knowingly collect information from anyone under 18.

7. Your Rights & Choices

Delete your data: Clear app data or uninstall the app — your local data is gone. Because we don't have a server-side copy, there is no separate request needed.
Decline AI features: The AI Coach and bottle scanner are optional. Decline to use them and your data stays entirely on-device.
Manage notifications: Toggle each category on/off in the app's notification settings, or all of them in your device settings.
Refund a purchase: Subscriptions are billed through Google Play or the App Store — request a refund through the store's refund process, or email matt@optim.bio and we'll help.

8. Changes to This Policy

We may update this privacy policy as the app evolves. Material changes will be flagged in an in-app notice on next launch after the change. Continued use after the change constitutes acceptance.

9. Contact Us

Questions or concerns about this policy, your data, or anything else:

Gloss Digital LLC
Email: matt@optim.bio
1000 W 8th St APT 3101
Los Angeles, California 90017
United States