Privacy Policy

1. Introduction

Welcome to OptiAI® ("the Service," "Application," or "App"), operated by Aspire Digital LLC ("Aspire Digital," "Company," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our application and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data: First name, last name, username or similar identifier
• Contact Data: Email address, phone number
• Authentication Identifiers: When you choose to sign in with Apple ("Sign in with Apple") or Google ("Google Sign-In"), we receive basic identity information from that provider — typically your name and email address — to create and secure your account. If you use Apple's "Hide My Email" feature, we receive only Apple's private relay address, not your real email. Your credentials (passwords, Apple ID, Google password) are never shared with us — authentication is handled entirely by the provider.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Analytics & Advertising Identifiers: On mobile, standard device and usage identifiers used to understand app usage and measure how people discover OptiAI. This may include a device advertising identifier (the Google Advertising ID on Android); on iOS we rely on Apple's privacy-preserving SKAdNetwork for install attribution. See Section 9 (Cookies and Tracking) for details and your controls.
• Usage Data: Information about how you use our application and services, including derived engagement metrics such as your Opti Score
• Financial Data: Manually entered account balances (with only the last 4 digits of an account number stored — never a full account number), transactions (merchant, amount, date, and an optional tag linking it to a pet, child, or trip), budget envelopes and spending limits, income sources, and investment data you choose to input. These records are not shared outside your household except through the household visibility described in Section 11b.
• Health Data: Medical records, lab reports, health goals, fitness activity, and medication schedules you choose to input
• Reproductive Health Data: Menstrual cycle logs, fertility and TTC information, pregnancy records (including conception method, ultrasound images, measurements, conditions, medications, and baby names), pregnancy loss or termination records, perimenopause and menopause data, and mood logs entered via the Cycle & Pregnancy module. This is a special category of sensitive data governed separately in Section 8a.
• Home Management Data: Inventory information, maintenance records, warranties, grocery lists, pantry contents, and meal plans you choose to input
• Childcare Data: Information about children you choose to enter as a parent or legal guardian (see Section 10)
• Family Nicknames: Nicknames you choose to record for people in your household or family (for example "Bobby" for Robert), up to 10 per person. They are stored with that person's profile, are visible to the same household members who can already see that person, and are used only so that Opti understands who you mean when you use a nickname in chat (they may be included in the context sent to our AI provider for that purpose, as described in Section 7). You can edit or remove them at any time in Settings → Family Members, Health → Family, or a child's profile.
• Pet Data: Pet profiles, vaccinations, health events, feeding and activity logs, and milestones that you choose to enter
• Community Activity Data: Optional records of volunteering, charitable giving, acts of kindness, and civic engagement that you choose to log. By default these entries are marked private to your account.
• Uploaded Files and Images: Photos, PDFs, and other files you upload for parsing or analysis by AI features. Depending on what you choose to submit, these may include receipts, lab reports, prescriptions, vaccination records, medical history and doctor-visit summaries, financial documents (bank, credit-card, loan, and investment statements), insurance policies, property and vehicle titles, warranties, inventory records, travel documents (boarding passes, hotel confirmations, itineraries), event flyers, and other chat attachments. These documents may contain sensitive financial, health, or identity information — see Section 8 for how that data is processed.
• Voice Input: When you use voice dictation in chat, your spoken audio is processed by your device's or browser's speech-recognition service. On iOS this may be Apple's on-device or Siri speech-recognition framework; on the web it uses the browser's Web Speech API. The resulting text transcript is what reaches our servers — we do not receive or store raw audio.
• Subscription & Payment Identifiers: Stripe customer/subscription IDs (for web subscriptions), Apple original-transaction IDs and product IDs (for iOS in-app purchases), or Google Play purchase tokens and product IDs (for Android in-app purchases). We do not receive or store full payment card numbers, Apple ID credentials, or Google account payment details.
• Referral Attribution: If you apply a referral code at signup or in the app, we record which code was applied and when, for the operation of our influencer/affiliate program (see Section 16).

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain our Service
• To notify you about changes to our Service
• To provide customer support
• To gather analysis or valuable information to improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with personalized AI assistance and recommendations

4. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure backup and recovery procedures
• Multi-factor authentication options
• Biometric authentication support, including an optional Face ID / fingerprint lock for the mobile app (see Section 11c)
• Password requirements: passwords must be at least 10 characters, and we check new passwords against lists of passwords known to have been exposed in public breaches (using a privacy-preserving check that does not send your password to anyone) and ask you to choose a different one if it appears on such a list

5. Data Retention and Deletion

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Financial records created in the wealth module — including accounts, transactions, budgets, and income sources — are covered by the same Account Deletion and Backup Systems rules described below; there is no special-cased retention period for financial data.

Log and Activity Records

We keep the following records only for a fixed period and then delete them automatically:

• Product usage events (for example, which screens you open and which features you use): up to 13 months. After that we keep only aggregated totals that do not identify you.
• Security events (for example, sign-in attempts and account lockouts): 1 year. A record that is the reason an account is currently locked is kept until the lock is lifted.
• Household change history (the record of who added, changed or deleted an item in a shared household): 2 years.
• Administrative access audit log (the record of administrative actions on your account): kept for the life of your account and deleted with it.

Account Deletion

You may delete your account at any time through your account settings or by contacting support@optiai.me. Upon account deletion:

• Your personal data, including profile information, health records, financial data, and other content, will be permanently deleted within 30 days
• Data that has been shared with household members may remain accessible to those members, but your identity will be disassociated from it
• Children's data entered solely by you will be deleted along with your account
• Anonymized or aggregated data that cannot identify you may be retained for analytics and service improvement
• Active subscriptions will be canceled and no refunds will be issued for the remaining billing period

Data Export

You may request a copy of your personal data by contacting support@optiai.me. We will provide your data in a commonly used, machine-readable format within 30 days of your request, in accordance with applicable data protection laws.

Inactive Accounts

Accounts that remain inactive for 24 consecutive months may be subject to termination. We will attempt to notify you via email at least 30 days before any action is taken on an inactive account. Upon termination of an inactive account, your data will be handled as described in the Account Deletion section above.

Legal Retention

Notwithstanding the above, we may retain certain data as required by applicable law, regulation, or legal process (e.g., tax records, fraud prevention, or dispute resolution). Such data will be retained only for as long as legally required and will be securely deleted thereafter.

Backup Systems

Deleted data may persist in encrypted backup systems for up to 90 days before being permanently purged. During this period, backup data is not actively used or accessible and will not be restored except in the event of a system-wide disaster recovery.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your personal data
• Right to restrict processing: You can request restriction of processing your data
• Right to data portability: You can request transfer of your data
• Right to object: You can object to processing of your data
• Right to withdraw consent: You can withdraw consent at any time

7. Third-Party Services

We employ third-party companies and services to operate and deliver the Service. These providers have access to your personal data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose. By using the Service, you acknowledge that your data may be processed by the following providers:

• Web Payment Processing: Stripe, Inc. handles all payment transactions originating from our web application. Your use of these payment features is subject to Stripe's Terms of Service and Privacy Policy.
• iOS In-App Payment Processing: Apple Inc. handles all subscription purchases initiated from the iOS app via StoreKit / In-App Purchase. We receive only an opaque transaction identifier and product identifier from Apple — your Apple ID, payment method, and billing address are not shared with us.
• Android In-App Payment Processing: Google LLC handles subscription and Points purchases initiated from the Android app through Google Play Billing. We receive only an opaque purchase token and product identifier from Google, together with renewal, cancellation and refund notifications about that purchase. We do not receive your payment card details or Google account payment information.
• Data Storage and Authentication: Supabase provides database hosting, user authentication, and file storage services.
• Social Sign-In Providers: If you choose social sign-in, Apple (Sign in with Apple) and/or Google (Google Sign-In) authenticate you and share basic profile information (name, email, or Apple private-relay address) with us to create and secure your account. Your sign-in credentials are never shared with us.
• Artificial Intelligence: Google (Gemini) provides AI-powered features including recommendations, advisory suggestions, image and document understanding, content generation, and — for questions that need current information — an optional live web search through Google that returns cited sources. See Section 8 for details on what data is sent.
• Error Monitoring: Sentry is used for error tracking and performance monitoring to improve service reliability.
• Email Delivery: Resend handles transactional email delivery including account notifications and alerts, and receives the emails you forward to your OptiAI inbox address (see Section 11c).
• Bank Linking: If you choose to connect a bank, card, or brokerage account, Plaid provides the connection and retrieves account and transaction data for the accounts you select. Bank linking is available only in the United States and Canada. Your bank login is entered directly with Plaid or your institution and is never seen or stored by OptiAI.
• Web Hosting: Vercel provides frontend hosting and content delivery.
• App Distribution & Push Notifications: Apple and Google provide app distribution and push notification services through their respective app stores. Apple additionally sends us App Store Server Notifications about subscription lifecycle events (renewal, refund, expiration) for accounts that have purchased via iOS IAP.
• Notification Delivery & Messaging (mobile apps): OneSignal manages push notifications and notification-related email for our iOS and Android apps. We provide OneSignal with your account identifier, your account email address, your device's push token, and a small set of non-identifying attributes used to decide which messages are relevant — your subscription type, roughly how long you have had an account, a broad activity band, and which parts of the app you use. We do not send OneSignal any health, medical, reproductive, financial, or children's information, nor the content of anything you write in the app. See Section 9a for how to stop receiving these messages.
• Mapping & Geocoding: Google Maps provides location-based features, address autocomplete, and place geocoding, and Google Places finds businesses for Opti Concierge suggestions (see Section 8d).
• Calendar Integration: If you choose to connect a calendar, Google (Google Calendar) and/or Microsoft (Outlook/Microsoft 365) authorize a one-way, read-only import of your calendar events into your OptiAI account. See Section 7a for exactly what is accessed, how it is used, and our Google API Limited Use commitment.
• Weather Forecasts: Open-Meteo provides destination weather forecasts when you create a travel trip. Only the destination text you enter and the trip date range are sent — no personal identifiers.
• Grocery Delivery: Instacart's Developer Platform builds a cart link when you choose to order groceries through the Service. We send a list of items (no personal identifiers) and Instacart returns a checkout URL.
• Branded Food Data: Open Food Facts (an open, community food database) provides nutrition information when you scan a product barcode or search for a branded food. We send only the barcode number or the search term you enter — no personal identifiers — and receive back product and nutrition details. See Section 8b for how barcode scanning uses your device camera.
• Web Analytics & Advertising Measurement (web only): Google Analytics 4, Meta Pixel and Meta Conversions API — see Section 9.

Your use of the Service may be subject to the terms and privacy policies of these third-party providers. We encourage you to review them. Aspire Digital LLC may change third-party service providers at any time without notice, provided the functionality of the Service is maintained.

7a. Connected Calendars (Google & Microsoft)

When you explicitly connect a calendar, OptiAI performs a one-way, read-only import of your calendar so your events appear alongside your tasks inside your own OptiAI account and so we can send you timely reminders (for example, ten minutes before a meeting) with a one-tap link to join. This integration is entirely optional and is only active for accounts you choose to connect.

• What we access: via Google's calendar.readonly scope and Microsoft Graph's Calendars.Read scope, we read your list of calendars (so you can choose which to import) and the events on the calendars you enable — including title, date, time, location, description, attendee email addresses, and any online-meeting join link. We never create, edit, or delete anything in your calendar.
• How we use it: solely to display your events in your OptiAI account and to generate your meeting reminders. We do not use this data for advertising, profiling, or any purpose unrelated to providing these features.
• How we store it: OAuth tokens are encrypted at rest; we store only the minimal event fields needed to display the event and fire its reminder. Imported events are kept only while your calendar remains connected.
• Sharing: your calendar data is never sold, and is never shared with third parties except the infrastructure providers (Section 7) that host and process it on our behalf. It is never transferred to or used to train any AI model.
• Your control: you can disconnect any calendar at any time from Settings → Connected Calendars, which stops syncing, deletes the stored tokens, and revokes our access. You may also revoke access from your Google or Microsoft account security settings.

Google API Services Limited Use disclosure. OptiAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. AI and Data Processing

OptiAI uses artificial intelligence to provide personalized recommendations and assistance. Your data is processed to:

• Provide intelligent insights and recommendations
• Automate routine tasks and reminders
• Improve the accuracy of predictions and suggestions
• Enhance the overall user experience

Third-Party AI Service

AI features in OptiAI are powered by Google Gemini, a generative AI service operated by Google LLC. When you use AI-powered features, relevant data is sent to Google's servers for processing. Data sent to Google Gemini is processed in accordance with Google's Privacy Policy.

Data Sent to AI

Depending on the AI feature you use, the following types of data may be sent to Google Gemini for processing:

• Your queries and prompts to AI features, including chat with Ask Opti
• Health metrics (e.g., fitness goals, workout history, health insights)
• Reproductive health data you explicitly send via AI features in the Cycle & Pregnancy module (e.g., cycle predictions, fertility insights, baby-name generation) — see Section 8a for the full privacy posture of this data
• Financial information (e.g., transaction summaries, budget data, goal progress)
• Home inventory and grocery data
• Meal preferences and dietary information
• Child development and education data (entered by parents/guardians)
• Pet care data (vaccinations, feeding logs, health events) when relevant to a tool the AI is using
• Travel plans and itinerary details
• Files and images you upload as chat attachments — for parsing, extraction, and follow-up actions. These may include photos and PDFs of receipts, lab reports, prescriptions, vaccination cards, recipe photos, and event flyers, as well as sensitive financial, health, and identity documents such as bank, credit-card, loan, and investment statements, insurance policies, property and vehicle titles (including identifiers like account numbers and vehicle identification numbers), medical history and doctor-visit summaries, warranties, and travel documents. When you choose to upload such a document, its contents — including any sensitive information it contains — are sent to Google Gemini for analysis. Attachments are stored in our secure storage and a signed reference is sent to Gemini at processing time; uploaded attachments are automatically purged from attachment storage within 7 days.
• The transcript text produced by voice dictation (we never receive raw audio — your device's speech-recognition service produces text, and only that text reaches our servers)

Google Gemini is configured for OptiAI in a mode that, per Google's published terms for paid API customers, does not use your inputs to train Google's models. See Google's Gemini API Terms for details.

Live Web Search

To answer questions that depend on current information (for example, business hours, prices, or upcoming events), the AI assistant ("Ask Opti") may perform a live web search through Google. When it does, a short search query derived from your message is sent to Google's search service, and the AI may summarize the results and cite the sources it used. Search results are provided by third parties and may be inaccurate or out of date. We do not use your strictly private health information — such as menstrual cycle, pregnancy, mood, or mindfulness data (Section 8a) — to form web-search queries. Google's handling of search queries is governed by Google's Privacy Policy.

Consent and Control

When you first access a module that uses AI-powered features, you will be presented with a domain-level disclaimer that explains how your data is processed. These disclaimers are shown once per domain (Health, Nutrition & Food, Childcare, and Financial) and must be acknowledged before proceeding. Each disclaimer informs you that data may be sent to Google Gemini for analysis and links to both our Privacy Policy and Google's Privacy Policy.

Your data is never used to train AI models without your explicit consent, and you maintain full control over what data is processed by AI features. You can reset your disclaimer acknowledgments at any time by clearing your app data or contacting support.

8a. Reproductive & Sensitive Health Data (Cycle & Pregnancy)

The Service may include a Cycle & Pregnancy module that lets you track menstrual cycles, fertility and trying-to-conceive (TTC) information, pregnancy details (including conception method, ultrasound images, measurements, pregnancy-related conditions, medications, and baby names), pregnancy loss or termination, perimenopause and menopause, and mood. This category of information is considered a special category of sensitive personal data under many data-protection frameworks and is handled with heightened care.

Storage and Access

Reproductive health data is stored in our database with row-level security. It is strictly private to the account owner by default. This data is not included in the household data-sharing matrix — it is never automatically visible to household members, partners, or other users simply because they belong to the same household. A parent or guardian may track a minor dependent's cycle data within a separate account; that data remains owner-only on that account.

Sharing Is Explicit Opt-In Only

If you choose to share a specific pregnancy or cycle journey with a partner or co-parent, you must explicitly grant access to that individual. You may revoke this access at any time. No sharing of reproductive health data occurs without your deliberate, affirmative action.

AI Processing

AI-powered features within the Cycle & Pregnancy module — such as cycle predictions, fertility insights, baby-name generation, and chat-based assistance — process your reproductive health data via Google Gemini to deliver the feature. This processing occurs under the same terms described in Section 8 (AI and Data Processing). Google, as a paid API customer, does not use your data to train its models. External AI access (for example, via Claude or ChatGPT through OptiAI's MCP integration) requires your explicit grant of the cycle scope and is not enabled by default.

Ultrasound Images and Other Uploaded Files

Ultrasound images and other files you upload in the Cycle & Pregnancy module are stored in a private, encrypted storage bucket. They are accessible only to you via signed URLs that expire after a short period. These images are not accessible to household members unless you explicitly share them.

Retention and Deletion

You can delete individual cycle entries, pregnancy records, or uploaded images at any time within the module. All reproductive health data associated with your account is permanently deleted when you delete your account (within 30 days, as described in Section 5).

Jurisdictional Note

Reproductive health data is subject to additional legal protections and restrictions in some jurisdictions. We are committed to handling this data responsibly and lawfully. If you have questions about how your reproductive health data is protected under the laws of your jurisdiction, please contact us at privacy@optiai.me.

8b. Connected Health Data (Apple Health & Health Connect)

On mobile, you may optionally connect OptiAI to your device's health platform — Apple Health (HealthKit) on iOS or Health Connect on Android — to import health and activity data instead of entering it by hand. This integration is entirely optional, off by default, and only active if you explicitly choose to connect and grant permission.

• What we read: with your permission, we perform a one-way, read-only import of the following data types over a date range you choose: body metrics (weight, height, body-fat percentage, resting heart rate, steps), workouts (type, duration, energy, distance), and sleep (duration and timing). We never write, modify, or delete anything in Apple Health or Health Connect.
• Reproductive data is never accessed: we never request or read reproductive or cycle-related health data (such as menstruation, ovulation, cervical mucus, sexual activity, or basal body temperature) from Apple Health or Health Connect. This exclusion is enforced in the app's permission requests themselves.
• On-device until you import: your health-platform data stays on your device and is not transmitted to us unless and until you initiate an import. Imported data is stored in your OptiAI account under the same protections as other health data you enter manually (Section 4).
• How it's used: imported data is used only to populate your Health features and your personal metrics within the Service. It is never sold, never used for advertising or marketing, and never used to train any AI model. It is not shared with third parties except the infrastructure providers (Section 7) that host it on our behalf.
• Your control: you can stop importing at any time, and you can revoke OptiAI's access from the Apple Health app (iOS) or the Health Connect app / Android settings at any time. Deleting your OptiAI account permanently deletes imported health data as described in Section 5.

Our access to and use of Apple Health data complies with Apple's HealthKit requirements, and our access to and use of Health Connect data complies with Google's Health Connect permissions policy. Health-platform data is treated as sensitive personal data and is never used for any purpose beyond delivering the features you have enabled.

8c. Assistant Personalization and Memory

In Settings → Assistant you can tailor how Opti talks to you and what it remembers. These controls are yours alone; nothing here is shared with other household members unless you share it yourself.

• Voice & tone preferences: your chosen tone, humour, emoji and reply-length settings are stored in your account and sent to the AI service only as a short style instruction when Opti writes a reply. They never include your health, cycle, pregnancy, mood or mindfulness data.
• Family interests and memory: short facts you tell Opti to remember (for example, "we love camping") are stored in your account and used only to make Opti's suggestions fit you better. Content in our strict-privacy categories (reproductive, pregnancy, mood and mindfulness information) is refused and never saved as a memory.
• Memory manager: you can view, edit and delete anything Opti has remembered, pause automatic remembering at any time (anything you explicitly ask Opti to remember is still saved), and use "Forget everything" to permanently delete all memories.
• Children: on a child's account, Opti uses a kid-safe style by default, does not automatically remember interests, and the style and memory settings are managed by a parent or household owner.
• No training: as described in Section 8, Google Gemini is used under paid-API terms that do not use your inputs to train Google's models, and we never use your preferences or memories to train any AI model.
• Companions: the Opti Companion pictures (Opti and the plush friends and their outfits) are fixed artwork shipped with the app. They contain no personal data and are never generated from your information. Which companion and outfit you chose, and which outfits you have unlocked, are stored in your account and deleted with it.
• Deletion: these preferences and memories are deleted when you delete your account (Section 5).

8d. Opti Concierge

If Opti Concierge is available to you and you ask it to plan something, we use information you already keep in OptiAI to make a good plan. We send the minimum needed to outside services, and Opti never pays on your behalf in this version.

• What we use: your family calendar (to find a time that suits everyone), your saved providers and contracts, your budgets (to keep options within reach), your taste preferences, favourites and not-again list, and allergy and diet notes already recorded on child or family-health records. Allergy and diet notes are used only to filter out unsuitable places; they are not copied anywhere else and are never sent to a business or to the search service.
• What we send to search for places: a short description of what you are looking for (for example "Italian restaurant") and an approximate location, or your device location if you choose to share it. If you tell Opti your address so it can find places near you, we convert it once into an approximate location (about 1 km) and keep only that approximate location, not the address; only that approximate location is sent with searches, and the address itself is never stored or sent. You can change or remove this approximate location any time in Settings › Account › Home location. Place search is provided by Google (Places API). We do not send your name, your family's details, your calendar or your health information.
• What we store: each plan (what, when, the options shown and why, which one you chose, a confirmation number if you add one, and a step-by-step history), any feedback you give about a place, and your taste settings. Place details we show (such as name, phone and website) are kept with the plan so you can see what you were offered.
• Who can see it: you, and household members you choose to share with in Settings → Data sharing (Activities → Concierge, and Tastes & favourites). Budget amounts and allergy details are never written into a plan that others can see.
• Optional learning: "how was it?" check-ins (at most one a day, never asked of children), a "something new" suggestion (off by default), and learning from merchant names at connected banks (off by default, never amounts). You can switch each of these off at any time.
• Suggestions: if Concierge suggestions are available to you, Opti looks at information you already keep in OptiAI (anniversaries and birthdays, appliance warranties and home services, the timing of past haircuts, grooming or cleaner visits on your calendar, your family calendar's free time, and your saved providers) to suggest things worth planning. This happens inside OptiAI; nothing is sent to an outside service until you choose Draft it. Suggestions are visible only to you, are never made for children, never use health information or items you marked private, and you can snooze or dismiss any of them. If you use WhatsApp or Telegram with Opti, a suggestion can appear in place of a tip in a reply and follows the same tip limits and "stop tips" setting.
• When you book: you book directly with the business on its own website, app or phone line. What you give the business is governed by that business's own privacy policy.
• Booking requests by email: if you ask Opti to email a business, the email goes from your household's Opti address on book.optiai.me, which is created automatically, and you are copied in. It contains what you saw before you tapped Send: your name, what you want to book, the times you offer, a callback number and anything you chose to add. Emails are sent and received through our email provider, Resend. When the business replies, we read the reply to find the outcome (a confirmed time, another time, a question or a no) and then discard the text: we keep the outcome, the times and a confirmation number, never the body of the email. Replies are accepted only from the business you wrote to. If a business replies STOP, we never email it again.
• Confirmation files: a QR code, barcode image, PDF ticket or wallet pass the business sends is stored privately with the booking, opened only through short-lived links, never shown in notifications, and deleted with your account. If you choose Add to Google Wallet, the booking's title, time and confirmation number are sent to Google to create the pass.
• Health appointment requests: where available (currently the United States and India), the email shares only your name, the times you offer and a callback number unless you add more yourself; each email needs your own confirmation; the request, its replies and any files are visible only to you and never appear in shared views or notification text.
• Deletion: your plans, feedback and taste settings are deleted when you delete your account (Section 5).

8e. Chat-App Channels (Telegram, WhatsApp, Messenger and Instagram)

If chat-app channels are available to you, you can connect your own Telegram or WhatsApp account to OptiAI from Settings and then send Opti messages, forwarded messages, photos and voice notes in that app to add items such as events and tasks.

• Telegram is a separate service: messages you send travel through Telegram, which processes them under its own terms and privacy policy. Telegram bot chats are not end-to-end encrypted. Do not send anything you would not want Telegram to process.
• WhatsApp is operated by Meta: if you use WhatsApp, Meta acts as a processor for delivering messages and processes them under its own terms and privacy policy. We keep your phone number (shown in international format) and display name so replies reach you, and, as with Telegram, we do not store the message content itself. Send STOP to opt out at any time. Business-initiated WhatsApp messages (such as a daily briefing) are sent only if you opt in.
• Messenger and Instagram are operated by Meta: if you connect Facebook Messenger or Instagram, Meta delivers and processes your messages under its own terms and privacy policy. We keep your page-scoped Messenger or Instagram identifier and display name so replies reach you, and we do not store the message content itself. Opti replies only within 24 hours of your message and never starts a conversation. Send STOP to opt out at any time.
• What we use: the content you send is read by AI (Google Gemini, Section 8) only to work out what to add. Photos and voice notes are handled in memory for that purpose only.
• What we keep: the items Opti creates (for example a title, date and time), your Telegram account identifier and display name so replies reach you, and minimal technical records (when a message arrived, a hashed message reference to avoid processing it twice, and the outcome). We do not keep the message text, photo or voice note itself. Technical records are deleted after a limited period.
• Linking: a chat account is connected only from inside the signed-in app using a one-time link, never from the chat alone. Only adults can connect. Replies go only to the account you connected.
• Sensitive topics: medical, reproductive-health and similar sensitive content is not written automatically from a chat; Opti asks you to open the app instead.
• Feedback and tips in the chat: if you react 👎 to one of Opti's replies, we send a report to the OptiAI team with your account and the first 600 characters of Opti's reply (never your message). To make that possible we keep, for 7 days, the chat app's reference to each of Opti's replies and the first 600 characters of that reply; it is then deleted, and it is deleted with your account. Other reactions are only counted. If you send a message starting with "bug:", "feedback:" or "suggestion:", the text you wrote is sent to the team the same way as Settings → Feedback. Opti may add a short tip to a reply to a message you sent (at most a few a day, hours apart, and never to start a conversation); reply "stop tips" to turn them off. We record when each tip was shown and which feature it described, and whether you turned tips off.
• Family group chats: if you add Opti to a group chat (or create a WhatsApp group with Opti from Settings), we store the chat app's identifier for the group, its name, which household it is linked to, who added Opti and when, and whether it is active. We still do not store any message. Group members can read Opti's replies in the group; replies about health, money, documents or private items are sent to the asker's private chat instead, and the group only sees a short note that a private answer was sent. Opti reads only messages addressed to it (in Telegram, mentions, replies and commands; in WhatsApp, messages that start with "Opti"), and only answers connected adult members of the linked household; anyone else receives a single generic message telling them how to connect. For a WhatsApp group, a join request is approved automatically only when the phone number belongs to a connected adult of that household. Unlinking a group, or removing Opti from it, stops Opti answering there.
• Optional messages from Opti: Opti messages you first (for example a daily briefing) only if you turn that on in Settings, and you can turn it off at any time.
• Stopping: send STOP in the chat, or press Disconnect in Settings. Either ends the connection and deletes the link; items already added are kept. Deleting your account removes the connection.

8f. Document Vault

If the Document Vault is available to you, you can store copies of documents such as identity papers, policies, warranties, receipts and school papers.

• What we store: the file you upload (PDF or image) and its details: title, category, who it belongs to, dates you enter, an optional amount, reminder settings and links to related items in OptiAI.
• Storage and security: files are kept in a private store and encrypted at rest. New files are also encrypted with their own key before they are stored, and that key is protected by a separate secret that is not kept with your files. They open only through links that expire within about a minute, and only after you unlock the vault (Face ID, passcode or your authenticator code).
• Who can see it: only you, until you share a document with a named adult in your household, who sees it read-only. Sharing through Data Sharing settings can also reach a whole category where you allow it. Children are never offered as a share target and do not see documents by default. A child aged 13 or over can see a document about themselves only if an adult turns that on.
• Access log: we record each view, share, unshare and deletion of a document so you can see who opened what and when.
• AI processing: Opti reads the contents of a document only when you explicitly ask, one document at a time, using our AI provider as described in Section 8. We never use vault documents to train AI, and never read health documents this way. Opti can find a document and show its title, category and dates without reading it. When you add a document you can tap "Let Opti suggest details" so Opti reads that file once to suggest its name, type, whose it is and its dates; nothing is saved until you confirm.
• Files you already have: if you ask, Opti adds a private vault copy of receipts, insurance papers and trip documents you already stored elsewhere in OptiAI. The originals stay where they are.
• Reminders: expiry reminders go to you and anyone you shared the document with. They name the type of document, never a document number or health detail.
• Chat apps: if you use Opti in a chat app, it receives a link to open the document in OptiAI, never the file or its contents.
• Retention and deletion: we keep a document until you delete it. Deleting it removes the file and its record. Your documents, shares and reminders are deleted when you delete your account (Section 5). Backups are overwritten on the normal cycle.

9. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Google Analytics 4

Our website uses Google Analytics 4 (GA4), a web analytics service operated by Google LLC. GA4 collects anonymized page view data, device and browser information, and approximate geographic location (country/region level) to help us understand how visitors interact with our website. This data is used solely for improving the Service and is not linked to your OptiAI account. GA4 uses cookies to track sessions across pages. Data collected by GA4 is processed in accordance with Google's Privacy Policy.

Meta Pixel

Our website uses the Meta Pixel (formerly Facebook Pixel), an analytics tool operated by Meta Platforms, Inc. The Meta Pixel collects page view and conversion event data to help us measure the effectiveness of our advertising campaigns and understand how users navigate to our site. Meta Pixel uses cookies to track sessions. Data collected by the Meta Pixel is processed in accordance with Meta's Privacy Policy.

Meta Conversions API and First-Touch Attribution (web)

First-touch attribution. When you arrive on our website, the web app records, in your browser, how you got here: any campaign (UTM) parameters on the link, advertising click identifiers (such as Google's gclid, gbraid and wbraid, Meta's fbclid and the Meta cookies _fbc and _fbp, or ttclid), the page you landed on, the origin of the referring site, and your browser's user-agent string. If you then create an account, we store this first touch against your account (the first touch is kept and not overwritten by later visits, except that a later paid-campaign visit replaces an earlier organic one) so we can measure which of our channels bring people to OptiAI. We attribute only accounts created within a few days of that visit. On the native apps we do not use this web capture.

Meta Conversions API (server-side measurement). When you create an account, or make your first paid subscription payment, after arriving from one of our advertisements, our servers may send Meta Platforms, Inc. a limited conversion event ("CompleteRegistration" for the account, or "Purchase" for the first subscription payment, with the payment value and currency). The event may include the Meta cookies or click identifier, your IP address and browser user-agent, and, only if you arrived through an advertising or campaign link, a one-way SHA-256 hash of your lower-cased email address, which Meta uses only to match the event to its own users. We do not send your name, and we never send any health, child, financial, household or other content you keep in OptiAI. Renewals are not reported. These events are not sent if your browser sends Do Not Track or Global Privacy Control, or if you have opted out of marketing measurement. Meta processes this data under Meta's Privacy Policy.

Do Not Track

Analytics tracking (Google Analytics 4 and Meta Pixel) is automatically disabled when your browser's "Do Not Track" (DNT) setting is enabled. We respect this signal and will not load tracking scripts when DNT is active.

Native Mobile Apps

Google Analytics 4 and Meta Pixel are not active in the native iOS and Android apps. Web analytics tracking described above applies only to the web version of the Service (optiai.me). Mobile analytics in the native apps is described immediately below.

Mobile Analytics & Advertising Identifiers (Firebase)

In our native iOS and Android apps, OptiAI uses Google Firebase Analytics (Google Analytics for Firebase), a mobile analytics service operated by Google LLC, to understand how the app is used and to measure how people discover OptiAI (for example, install-to-registration attribution).

• What may be collected: On mobile this may include a device advertising identifier (the Google Advertising ID on Android) together with standard device and usage identifiers. On iOS, we use Apple's SKAdNetwork for privacy-preserving install attribution rather than a cross-app advertising identifier.
• Who processes it and how: This data is processed by Google acting as our analytics and measurement provider. It is used only for aggregate analytics and attribution and is never sold. It is not used to build advertising profiles of you within the Service.
• Your controls: You can reset or limit your advertising identifier at any time in your device settings (on Android: Settings → Google → Ads; on iOS: Settings → Privacy & Security → Tracking / Apple Advertising). Residents of the EU/UK and California have rights over this data under the GDPR, UK GDPR, and CCPA — including access, deletion, and opt-out — which you can exercise using the contact details in Section 19.

Data processed by Firebase is handled in accordance with Google's Privacy Policy.

9a. Notifications and Notification Emails

If you install our iOS or Android app, we may send you push notifications and notification-related emails — for example reminders you have set up, activity in your household, and occasional messages about features in the Service. These are delivered by OneSignal (see Section 7).

To send them, we provide OneSignal with your account identifier, your account email address, and your device's push token. We also provide a small set of non-identifying attributes — your subscription type, roughly how long you have had an account, a broad activity band, and which parts of the app you use — solely so that messages are relevant rather than indiscriminate. We do not provide OneSignal with any health, medical, reproductive, financial, or children's information, and we do not provide the content of anything you write in the Service.

Onboarding and lifecycle messages. We also send helpful messages by email and push notification after you sign up, such as a setup checklist, a morning briefing or summary, tips for getting more from the Service, a periodic recap, offers about the paid plan, and occasional requests to invite someone or refer a friend. These are sent based on your account state and activity in the Service (for example which setup steps you have completed). You can turn them off at any time in Settings → Notifications (the email and push options there), and every such email contains a one-click unsubscribe link. Opting out stops these messages, not essential service messages such as password resets, security alerts and billing notices.

How to stop receiving them:

• Push notifications: turn off notifications for OptiAI in your device settings (on iOS: Settings → Notifications → OptiAI; on Android: Settings → Apps → OptiAI → Notifications). This stops all push notifications from the app immediately.
• Emails: use the unsubscribe link included in any non-essential email we send. Unsubscribing stops those emails but does not stop essential service messages such as password resets, security alerts, and billing notices, which we must be able to send you while you hold an account.
• Everything: contact us using the details in Section 19 and we will remove you from notification messaging entirely. Deleting your account also removes your record from OneSignal.

If you are in the EU, UK, or California, your rights over this data — including access, deletion, and objecting to direct marketing — are described in Section 6 and can be exercised using the contact details in Section 19.

10. Children's Privacy and Parental Data

The Service includes child care features that allow parents and legal guardians to enter, store, and manage information about their children. This section describes how children's data is collected, used, and protected.

Data Collection by Parents

OptiAI does not knowingly collect personal information directly from children under the age of 13 (or under 16 in the EEA). All children's data within the Service is entered and managed by parent or legal guardian users on behalf of their children. Data types may include child profiles, vaccination records, growth measurements, developmental milestones, health records, and educational information.

Parental Responsibility

As a parent or legal guardian using the child care features, you represent and warrant that:

• You have the legal authority to provide and manage your child's information
• All information you enter about your child is accurate and provided with proper consent
• You assume full responsibility for the accuracy, appropriateness, and management of your child's data
• If you share access to your child's data with other household members, you consent to their viewing of that information

How Children's Data Is Used

Children's data is used solely to provide the child care features of the Service, including tracking vaccinations, growth, milestones, and health records. We do not use children's data for advertising, marketing, or profiling purposes. Children's data is not sold to or shared with third parties except as necessary to operate the Service (e.g., cloud infrastructure providers) or as required by law.

Financial data: The Service does not currently include any allowance, chore-pay, or per-child spending or savings ledger. No financial data belonging to a child is collected, and a household member's account marked as a minor does not have access to household financial records. If a children's financial feature is introduced in the future, it will be entered and managed by a parent or legal guardian on the child's behalf, will not be sold or shared with third parties, and will be deleted under the same rules described in Section 5 (Data Retention and Deletion).

Parental Rights

You may review, modify, or delete your child's data at any time through the Service. If you wish to request complete deletion of all children's data associated with your account, please contact us at support@optiai.me. We will process such requests in accordance with applicable law.

Compliance

Aspire Digital LLC is committed to complying with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR) as it relates to children's data, and other applicable children's privacy laws. If we become aware that children's data has been collected without proper parental consent, we will take steps to delete such information promptly.

11. Household Features and Shared Data

The Service includes household features that allow multiple users to share data and collaborate within a shared household. This section describes how shared data is handled from a privacy perspective.

What Data Is Shared

When you join or create a household, certain data may be visible to other household members with appropriate permissions. This may include grocery lists, meal plans, tasks, health data (when sharing is enabled), childcare data, and other information you choose to share. You are responsible for reviewing what data is shared before enabling household sharing features.

Data Ownership

Each user retains ownership of the data they contribute to a household. Shared views are provided as a convenience and do not transfer ownership. When you share data with household members, you grant them a limited, revocable right to view and interact with that data within the Service.

Leaving a Household

When a member leaves or is removed from a household, their access to shared household data ceases immediately. Data contributed by the departing member may remain visible to other household members. The departing member retains their own personal data and account.

Consent

By sharing data within a household, you consent to other household members viewing that information. If you enter information about another person (such as a family member's health data), you represent that you have obtained their consent to do so.

11a. Family Games & Social Features

The Service includes family games and related social features. Some games can be played with other households that you invite by email. When you connect with another household or join a league:

• What is shared: Your game participation, scores, and a curated set of positive reactions are shared with the families and leagues you are connected to. Competitive standings are shown at the family level — not as a per-child ranking across households.
• Your control: You can block, report, and leave connections at any time. Connections are only formed by an explicit email invitation and acceptance; there is no public discovery or open join code.
• Children: Games may involve children in your household. The game engine uses only coarse age bands to tailor gameplay — never an exact date of birth or age — and no child's data leaves your trusted circle without your action. We do not knowingly enable children to connect with people outside the households you invite. Children's data is handled consistent with Section 10 (Children's Privacy and Parental Data) and applicable children's privacy laws, including COPPA.

Game and social data is not sold and is not used for advertising. It is shared only with the households and leagues you choose to join and with the infrastructure providers (Section 7) that operate the Service on our behalf.

11b. Financial Data and Household Visibility (Wealth 360)

The Service includes a wealth module for manually tracking financial accounts, transactions, budgets, and income. This section describes who can see that data and how it is handled.

• Household visibility: Financial records you create may be visible to other adults in your household — automatically to a household member marked as a parent, and to anyone you have granted access under Settings → Data Sharing. A household member's account marked as a minor does not have access to any financial record. The Money In, Money Limits, and Money Out sections can each be shared separately, so a household member's visibility can be scoped to just one of them.
• Statement and receipt import: A bank statement or receipt photo you upload is sent to our AI provider to extract transaction data for your review; we do not keep the original file after that processing unless you attach it to a record yourself, and nothing extracted is saved until you confirm it.
• AI budget suggestions: A suggested budget or spending limit is generated from information already in your account (such as household size and past spending) and is informational only, not financial advice.
• Loan details: The loan terms you enter (amount borrowed, interest rate, term, start date, payments and any statement balance) are stored with the liability and used only to estimate its current balance inside the Service. The estimate is calculated on our servers and in the app from your own data; it is not shared with lenders or any third party, and it is visible only to the household members who can already see that liability.
• Accounts and Net Worth: An account added in the wealth module may be mirrored as an asset or liability in your Net Worth summary and retirement plan elsewhere in the Service, so the same account is not entered twice. Like any other asset or liability, that mirrored entry is visible only to household members you have shared Net Worth with.
• Multiple currencies: An account or transaction recorded in a currency other than your household's default is converted for display using a published exchange rate; the currency and amount you originally entered are kept unchanged.
• Not sold: We do not sell financial data you enter, and do not use it for advertising.
• Not financial advice: Budget totals, spending runway, surplus calculations, and any AI-generated commentary about your finances are informational only. See Section 8 (AI and Data Processing) for how this data may be processed by our AI provider.
• Kids' Money: If a parent or guardian uses Kids' Money, we store the child's jar records (amounts entered, allowance schedule, chore pay, savings goals, spend requests and the parent's decision, and which money lessons were completed with the quiz score). It is a record only; no money passes through OptiAI and no bank or payment details are collected. The record is visible to the household owner, household members marked as a parent, anyone the household owner grants Kids' Money access to under Settings → Data Sharing, and the child themself if they have their own login — never to another child in the household. A child can see only their own jars and can only ask to spend or log a gift for a parent to approve. We do not use children's records for advertising and do not share them with OneSignal. The record is deleted with the child's profile or the household, and a parent can ask us to delete it at any time; when a parent closes their own account, the child's record stays with the household and that parent's name is removed from it. When you ask Opti about Kids' Money in chat, the balances and entries are read on demand to answer you and are not copied into Opti's long-term memory.
• Chore Stars and pocket money: If a parent switches on pocket money, we also store the star rate they set (stars per amount, minimum, weekly limit, chosen jar, approval setting), each cash-in (stars, amount, status, the kind reason a parent picked if they said "not now", and who decided) and any routine money values. A cash-in is recorded against the child's Chore Stars and their Kids' Money jars together; it uses the same access rules as Kids' Money above, and a child can only cash in their own stars. Suggested templates are worked out from the child's age and the household's currency and country settings; nothing is sent to third parties to make them. When a parent approves a cash-in from WhatsApp, Telegram or another connected chat app, only the button choice is processed — the child's records stay in OptiAI. Stars and jar amounts are never Opti Points.
• A child's linked bank account: A parent can assign one of their own connected bank accounts (connected through our bank-data provider, Plaid) to a child in Kids' Money. We then use that account's balances and transactions — which we already hold for the parent's connection — to sort the child's spending into their jars, to show parents spending by category and shop, allowance compared with actual spending and saving, and to keep a short list of payments for a parent to check. We also store which account is linked, the sorting choices a parent makes and any shop a parent asked us to remember. Parents (and adults the household owner has shared Kids' Money with in Data Sharing) can see a linked account; the child can see it only if a parent turns that on, never a sibling's account, and children aged 13 to 17 are always told in the app that a parent can see it. A child cannot sort payments or change the link. We only read the account: nothing is paid, moved or held, and unlinking keeps the jar history. Spending answers given in WhatsApp, Telegram or another connected chat app are generated in OptiAI and sent as a message to the person who asked.

11c. Inbox, App Lock, Ratings & Feedback, AI Usage Records, and Access Requests

• Email forwarding (Inbox): If you turn on the Inbox feature, you get a personal OptiAI email address. Emails you forward to it, and any image or PDF attachments (for example a school flyer), are read by AI (Google Gemini) to find events and tasks and add them to your calendar and task list. Emails from a sender you have not approved are not read: we ask you to approve the sender first, and while you decide we hold only a reference to that one email — not its subject, body, or attachments — for up to 7 days, then discard it. For senders you have approved, items are added automatically and every one comes with an Undo option. We keep the items extracted (such as a title, date, and time) and minimal technical details such as the sender address and when it arrived. We do not keep the email body or its attachments; they are used only while the email is being processed. Confirmation emails about what was added are sent only to the email address of your own account, never to anyone named in a forwarded message. Email delivery is handled by Resend and AI processing by Google Gemini (Sections 7 and 8). You can block a sender or turn Inbox off at any time in Settings.
• Face ID / fingerprint app lock: On the mobile app we may require Face ID, fingerprint, or your device passcode to open the app. This check is performed entirely by your phone's operating system. Your biometric data never leaves your device, is never sent to us, and is never stored by OptiAI — we only learn whether your device says "yes" or "no".
• App ratings: When we ask you to rate the app, we record the star rating you choose, the platform and app version, and the date. If you rate low and write a comment, it is sent to us as feedback. If you rate high you may be sent to the app store, where your review is governed by that store's terms. Ratings are used only in aggregate, and we never give rewards in exchange for a rating.
• Feedback and bug reports: When you send feedback in Settings or report a problem, we create a support ticket containing what you wrote and, where relevant, the screen you were on. By default the ticket is not linked to your account. If you tick the optional box "You can contact me about this", we link it to your account so our team can follow up with you; you choose this each time.
• Thumbs-down on an AI reply: When you tap thumbs-down on one of Opti's replies, we create an internal quality ticket that is linked to your account and contains the reasons you picked, any comment you add, and up to the first 600 characters of the Opti reply you rated. It never contains the message you sent to Opti. Only the small team that reviews AI quality can see these tickets. A thumbs-down is not a request to be contacted, and we will not contact you about it. If you delete your account, the ticket is detached from it.
• AI usage records: We keep records of how AI features are used — counts, an estimate of cost, which feature, and whether the request worked — but not the content of your messages. We use these records to apply fair-use limits, to keep costs sustainable, and to improve quality and reliability.
• Data access requests between household members: If you try to view household data that someone has not shared with you, you can ask them for access. The request records who asked, who owns the data, the area requested, and the answer. The person whose data it is receives a notification and decides whether to say no or to grant View only, View & Edit, or Full access; nothing is shared unless they approve it.
• Home Map (where things live): If you use Home Map, we store the names of the rooms, storage spots, and drawers or shelves you create, and for each item which place it is in, how many there are, who last moved it, when, and a history of those moves. Members of your household who can see your Inventory can see this, except items you mark private, which only you can see (this is enforced in our database, so it also applies to Opti and to connected AI assistants acting for another household member). Storage spots you mark sensitive are not described over chat channels such as WhatsApp or Telegram. Household members recorded as children can view but not change it. We do not read health, cycle, pregnancy, mood, or mindfulness information into Home Map; item names that look like such information are refused. Deleting a place keeps your items; deleting an item or your account removes its placement data.
• Bank linking: Connecting an account through Plaid is optional and available in the United States and Canada only. See Section 7 and Section 11b.
• Service providers and contracts: If you save the people and businesses your household uses (for example a plumber, a tutor, a vet or an accountant), we store the contact details you enter (names, phone numbers, email, website, address, account or membership numbers, notes and type-specific details such as a class schedule) and any contract, membership or session-package details you add (dates, cost and currency, what is included, visits used, notice period, and a document link). These records are visible to other household members only through the Data Sharing settings for that area. Doctors, dentists and other clinical care are kept separately in Health › Care Providers. If you add providers from your contacts, only the contacts you select (or the entries you tick in a contacts file you import) are saved; the rest of your address book is never read by us or uploaded, and an imported file is processed on your device. We use these details to show them to you, to remind you before a contract renews, and to answer your questions in Ask Opti; in the future, an assistant feature may use them to contact a provider you choose, only when you ask it to. If you upload a contract document (PDF or photo), it is stored in a private storage area that only you can open; it is never shared with other household members, even if you share the provider. If you tap Read this contract, the document is sent to an AI service to suggest agreement details for you to confirm. If you enter a class schedule, we create matching entries on your family calendar. Insurance renewal reviews and agent emails are drafted from the details you saved and what you tell us, and are only ever opened in your own email app for you to review and send — we never send them.
• Protection and weekly check-ins: If you use Protection, we store which insurance lines you marked not applicable or dismissed, your emergency-fund target and the accounts you chose for it, and for each important document only a status, a review date and a short note about where it is kept (never the document). If you turn on the weekly check-in we store your chosen day and time, and for each week a short summary made of counts and category names (for example how many limits you kept) that never contains a merchant, description or free text. These are visible only to you unless you share Protection through Data Sharing, and are not used for advertising, sold, or used to train any AI model. We do not recommend or sell financial products. You can delete this information at any time by turning features off or deleting your account.

12. Pet Data

The Service includes a pet care module that lets you record information about pets in your household. Pet data may include profile fields (name, species, breed, date of birth), vaccinations, weight logs, feeding and activity logs, health events, and milestones.

Pet data is treated like other personal data you enter: it is stored under your account, accessible to household members you share with, and subject to deletion when you delete the relevant record or your account. We do not sell pet data and do not use it for advertising.

When a pet is marked as deceased ("Rainbow Bridge"), the underlying records remain associated with your account so you can keep memorial entries; you can permanently delete a deceased pet at any time from the Pets module.

13. Community Activity Data

The Service includes a community module where you can optionally log volunteering hours, charitable giving, acts of kindness, and other civic engagement activities. By default, every community entry is marked private to your account — these entries are never displayed on a leaderboard, public profile, or shared feed.

Donation amounts are always optional; the Service is designed so that the act of giving is what is recorded, not the dollar figure. If you do enter an amount, it is stored only under your account and used only for your own tracking and Opti Score computation (Section 14).

14. Opti Score and Engagement Metrics

The Service computes an "Opti Score" for each user — a numerical engagement metric derived from how many features across the modules (Home, Health, Wealth, Activities, Childcare, Pets, Community, Settings) you have set up and used. The score and its module breakdown are visible only to you and (where you have explicitly enabled household sharing) to household members.

The Opti Score is an in-product engagement signal. It is not a credit score, health score, fitness score, financial rating, insurance risk score, or any other regulated rating. It is never sold, shared with advertisers, used to gate access to outside services, or used to make decisions that produce legal or similarly significant effects about you. Modules that do not apply to you (e.g., Childcare if you have no children registered, Pets if you have no pets registered) can be opted out so they do not count toward your score.

Historical Opti Score snapshots may be stored to display trend lines, milestones, badges, and streaks. You can request deletion of this history through the Service or by contacting support@optiai.me.

14a. Home-Screen Widgets

OptiAI offers optional home-screen widgets on mobile. These widgets display only non-sensitive summaries — for example, upcoming tasks, item counts, an aggregate Opti Score, and family reward stars. No health or financial data is exposed to widgets. Widget content is derived on your device from data you already see in the app and is not used for any other purpose.

15. Authorized Personnel Access

A small number of authorized Aspire Digital LLC personnel hold administrative roles inside the Service in order to operate it. These roles are governed by an internal access-control list and are scoped as follows:

• Super Admin / Admin: Required for incident response, customer support escalations, security investigations, and database operations. These personnel may access your account data when responding to a support request you have filed, when investigating a security or abuse signal, or when required by law. All such access is logged.
• Support: May view feedback, support tickets, and account state needed to answer the question you sent in.
• Marketing: May view influencer / referral program data — including referred account email addresses and display names — only as needed to operate the affiliate program (Section 16), validate attributions, and pay commissions. Marketing personnel cannot edit user content, change roles, manage subscriptions, or access health/financial records outside the influencer dashboards.
• Security: Read-only access to security logs and incident reports.

Every administrative write action (role assignment, statement approval, feature flag flip, etc.) is recorded in an internal audit log. Administrative access to customer data is additionally monitored by automated, near-real-time alerting and an independent daily integrity check, so that access by one administrator is visible to another. We use these logs to detect misuse and to comply with our obligations under applicable data protection law.

16. Influencer / Affiliate Referral Program

The Service operates an influencer referral program. If you apply a referral code at signup or later in the Service, we record:

• Which code was applied to your account (first-touch: only the first valid code is recorded)
• The timestamp at which the code was applied
• Whether the referred account became a paid subscriber, and the normalized USD value of that subscription, for the purpose of calculating the commission owed to the influencer who shared the code

We do not share your name, email address, health data, financial data, or any other personal content with the influencer themselves. Influencers see aggregate counts of attributed signups and paid conversions and the commission earned. Authorized marketing personnel internally may view individual attributed accounts in order to validate the integrity of the program and resolve disputes (see Section 15).

You may not change or remove a referral code once applied; we keep the attribution intact for the duration of the configured commission window. After that window, the attribution becomes irrelevant to active commissions and is retained only for historical reporting.

Referring a friend (free month)

If you join using another member's referral code, we record that referral and, when you first pay for a subscription, that a payment occurred (not its details), so that we can reward the person who referred you, for example with a free month of the paid plan or Opti Points. We do not share your payment information, name or email address with them.

17. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely.

18. Changes to Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

19. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Aspire Digital LLC
Email: privacy@optiai.me
Support: support@optiai.me
Website: https://myoptiai.com