How optimal protects your data

For more detail about how we collect, use, and handle personal information, please see our Privacy Policy.

optimal stores personal health and account information so the product can help you track progress, set goals, build plans, and understand your health habits. Because that data is personal, we treat access, storage, export, and deletion as core parts of the product — not as afterthoughts.

We have audited optimal’s account, access-control, export, and deletion flows. This page reflects how the product is currently designed to protect user data.

Our basic approach

We only collect information to support the features you choose to use. Your private data is tied to your account, and you can export or delete it at any time.

What we collect

Depending on how you use optimal, we may store:

• account details, including your name, email address, membership level, and securely hashed password
• profile information, such as date of birth, height, smoking status, and timezone
• health and activity data you choose to enter, including measurements, exercise logs, notes, and other health-related records
• goals, habits, plans, badges, and progress data
• coach-generated suggestions and explanation text based on your use of health and Lifestyle Improvement features
• feedback, forum posts, and other free-text content you choose to submit
• technical, operational, and security-related records, including login activity, session information, and abuse-protection records

We use this information to provide the product’s features, personalise your experience, support your account, and protect the service from misuse.

How we protect account access

We use practical safeguards to help protect accounts and reduce misuse, including:

• password hashing, so we store a protected version of your password rather than the password itself
• secure session handling, including session renewal when account access changes
• signup and login protections against automated abuse
• throttling and backoff after repeated failed login attempts
• secure web encryption (HTTPS) for data sent between your browser and optimal

How we protect private user data

Your private data is tied to your account. Product pages and data actions are designed so that signed-in users can only access their own private data.

This includes account/profile data, health metrics, activity logs, goals, habits, plans, badges, and similar user-owned records.

Admin-only areas require administrator access. Admin access is used for specific support, moderation, and product-management tasks.

Your data controls

You can download a copy of your account and product data from your My Account page. The download contains CSV files that can be opened in common spreadsheet tools.

You can also permanently delete your account from within optimal.

When you delete your account:

• your account details can no longer be used to sign in
• your active access is terminated
• your private account, profile, health, activity, goal, habit, plan, badge, and similar user-owned product data is removed
• some operational or security records may be retained where needed for security, abuse protection, or system integrity
• forum content may remain where needed to preserve discussion threads, but it is no longer linked to your identity

Forum and community content

If you post in the forum or community areas and later delete your account, that content may remain visible where needed to preserve discussion threads and community context.

If you delete your account, any retained forum content is detached from your account so it is no longer linked to your identity.

Operational and security records

Some technical, operational, or security-related records may be handled differently from normal user-facing product data. For example, records used for login protection, abuse prevention, troubleshooting, or system integrity may need to be retained for a period of time even if ordinary account data is removed.

Questions or concerns

If you have questions about how your data is handled, please contact us.

↑ Back to top