No account is required. Someone with access to this browser profile may be able to open the record.
OptimaSelf Privacy Notice
This notice explains the web app, optional account, encrypted continuity, and Premium billing. We use short summaries first, then the full detail.
The short version
When enabled, the complete record is encrypted in your browser before it is stored.
Anonymous product events are optional, off by default, and never include your answers or notes.
Account creation is optional. Settings and Account provide separate data controls.
1. What the app records
OptimaSelf can record an optional name, onboarding preferences, daily check-ins, self-reported stress and energy answers, missions, practice responses, completion notes, closeouts, saved plan cards, Playbook rules, experiments, and app preferences. These are wellbeing records and may feel sensitive even though OptimaSelf is not a medical service.
2. Where the record is stored
Browser copy: the working record is stored in this browser. It remains until you delete it, clear browser or site data, or the browser removes it.
Optional encrypted continuity: if you choose Protect my progress, the complete record is encrypted with AES-GCM in your browser. The encrypted copy, an anonymous record identifier, a one-way access hash, a recovery salt, revision number, account link if created, and save times are stored in the OptimaSelf Sites database. Your recovery phrase and derived encryption key are not sent with that backup.
The app is hosted through OpenAI Sites and Cloudflare runtime services. Supabase provides optional passwordless identity. Stripe processes checkout, subscriptions, tax settings, receipts, and billing management. Resend may deliver transactional messages. Sentry may receive technical error details after monitoring is enabled. These providers process only the information needed for their role; OptimaSelf does not intentionally send check-in answers, journal text, or plan responses to analytics or error monitoring.
3. Why the information is used
The browser record is used to show your history, tailor deterministic recommendations, assemble plan cards, and compare the outcomes you choose to record. Optional encrypted continuity preserves the record across devices you authorize. The server cannot turn the encrypted copy into readable journal content without the recovery phrase you keep.
If you turn on anonymous product usage, OptimaSelf records allowlisted events such as onboarding completed, check-in completed, plan started, outcome recorded, or closeout completed. These events use a random browser identifier and may include a short route or plan-size label. They never include check-in answers, mission responses, notes, journal text, or saved plan cards.
If you create an account, OptimaSelf stores the identity-provider subject, verified email, account timestamps, entitlement, and the link to your encrypted record. If you buy Premium, Stripe stores and processes the payment method and billing details; OptimaSelf stores Stripe customer, checkout, subscription, price, plan, status, and renewal metadata needed to grant access and support the purchase. OptimaSelf does not receive or store your full card number.
OptimaSelf does not sell personal information, run behavioural advertising, or use journal text for product analytics.
4. Your choice and control
Cloud backup and anonymous product usage each require a separate explicit choice and are not required to use the app. You can turn either off in Settings. Turning backup off stops future backups but does not remove the existing encrypted copy; use Delete cloud backup for that. You can export a readable JSON copy or delete the local browser record separately.
To remove an email from the Premium updates list, email support@optimaself.com from the same address.
A verified passwordless account can restore a purchase and locate its connected encrypted record. A new device still needs the recovery phrase to decrypt that record. OptimaSelf support cannot recover the phrase or read the encrypted journal for you.
5. Retention and safeguards
The local record stays until you or the browser remove it. The encrypted cloud copy stays until you delete it or the account. Unconverted Premium interest is kept for up to 12 months. Optional product events are kept for up to 400 days. Account identity remains while the account is open. Payment and transaction records may be kept as required for tax, accounting, fraud prevention, disputes, and legal obligations. OptimaSelf uses HTTPS in production, browser-side encryption, passwordless verified identity, random access secrets, hashed server credentials, signed Stripe webhooks, input limits, rate limits, and same-origin checks. No system can promise absolute security.
6. Adults, wellbeing, and safety
OptimaSelf is intended for adults 18 and older. It provides general educational wellbeing and planning exercises. It does not diagnose, treat, monitor a medical condition, provide crisis care, or replace a licensed professional. Do not enter information you do not want stored in your browser or optional backup.
7. Operator, changes, and contact
OptimaSelf is operated by Gelin Zhu as an Ontario sole proprietorship. Material changes to data uses or providers will be dated here and presented for new consent where required.
Privacy, access, correction, portability, and deletion requests can be sent to support@optimaself.com. We aim to acknowledge requests within two business days. This mailbox is not an emergency or crisis service.