Last updated September 25, 2026

Privacy Policy

This Privacy Policy explains how optml collects, uses, shares, and protects information when you use the optml app, quiz, website, and related services.

Information We Collect

• Account information, including email address, name, profile image, login provider information, and password hash when email/password login is used.
• Planning content you enter, including categories, goals, projects, blocks, actions, reflections, people, notes, discussion points, ratings, and scheduling data.
• Calendar connection information, including Google account email, calendar list metadata, selected calendar settings, event identifiers, sync status, and encrypted OAuth access and refresh tokens when you connect Google Calendar.
• Uploaded images, including category cover and inspiration images you choose to upload.
• Quiz and marketing information, including quiz answers, answer labels, profile result, email, first name, referrer, landing URL, UTM parameters, browser user agent, approximate location derived from hosting headers, Meta click/browser identifiers, and analytics identifiers.
• Usage and device information collected through analytics tools, including Vercel Analytics, PostHog, and Meta Pixel where enabled.

How We Use Information

• Provide, secure, maintain, and improve the app and quiz.
• Authenticate users, operate account sessions, and prevent unauthorized access.
• Store and display your planning data, uploaded images, goals, relationships, and calendar settings.
• Connect with Google Calendar when you authorize it, import calendar context, and create or update calendar events according to your selected sync settings.
• Measure quiz and product usage, understand funnel performance, and improve marketing.
• Send service-related messages and respond to support, privacy, or legal requests.
• Comply with legal obligations and enforce our terms.

Google API Data

If you connect Google Calendar, optml receives and uses Google user data only to provide the calendar features you request. optml's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Data we access: the email address of the Google account you connect, the list of your calendars with their names and colors, the events on the calendars you select (titles, times, and status), and OAuth access and refresh tokens.
• How we use it: to show your calendar events next to your plan, let you tag events with a life area, create, update, and delete the calendar events that represent items you schedule in optml, and create a separate optml calendar if you ask for one.
• Sharing: Google user data is shared only with the infrastructure providers that host and store the service (hosting, database, and storage providers) so they can process it for us. We do not sell it, transfer it to advertisers, data brokers, or any other third party, use it for advertising or lending, or use it for any purpose other than providing and improving these calendar features, except where required by law or to protect the service.
• AI and machine learning: Google user data is not used to develop, improve, or train any AI or machine-learning model, and it is not transferred to any AI or machine-learning service.
• Protection: data is transmitted over TLS, OAuth tokens are encrypted with a separate key before storage, and access to production data is limited to what is needed to operate the service.
• Retention and deletion: we keep your Google account email, calendar list metadata, sync settings, event identifiers, and encrypted tokens for as long as the calendar stays connected. We do not store the content of your events; they are read from Google each time they are shown. This data is deleted when you disconnect the Google account in Settings or delete your optml account. You can also revoke optml's access at any time at https://myaccount.google.com/permissions.

Sharing

• Service providers that host, store, monitor, analyze, or process the service, including database, hosting, blob storage, authentication, analytics, and email or support providers we use.
• Google, when you use Google sign-in or Google Calendar features.
• Meta and PostHog for quiz, conversion, and product analytics where their tools are enabled.
• Other users only when you intentionally use sharing features.
• Authorities, advisors, or other parties when reasonably necessary for legal, safety, security, or business-transfer purposes.

Cookies And Tracking

We use necessary cookies for authentication and service operation. The quiz may also use analytics and advertising technologies from Vercel, PostHog, and Meta. These technologies can collect identifiers, usage events, referrer and landing URL data, and conversion events. See the Cookie Policy for more detail.

Retention

We keep information for as long as needed to provide the service, operate accounts, comply with legal obligations, resolve disputes, enforce agreements, and maintain backups. You may request deletion as described below.

Your Choices And Rights

• You can disconnect calendar accounts in the app settings.
• You can request access, correction, export, deletion, or restriction of your personal information by contacting us.
• California residents may request to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information where applicable, and may not be discriminated against for exercising privacy rights.
• European and UK users may have rights to access, rectify, erase, restrict, port, or object to processing, and to complain to a supervisory authority.

Children

optml is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us so we can delete it.

Contact

Privacy requests can be sent through the contact method provided in the app.