Last updated June 27, 2026

Privacy Policy

This Privacy Policy explains how optml collects, uses, shares, and protects information when you use the optml app, quiz, website, and related services.

Information We Collect

• Account information, including email address, name, profile image, login provider information, and password hash when email/password login is used.
• Planning content you enter, including categories, goals, projects, blocks, actions, reflections, people, notes, discussion points, ratings, and scheduling data.
• Calendar connection information, including Google account email, calendar list metadata, selected calendar settings, event identifiers, sync status, and encrypted OAuth access and refresh tokens when you connect Google Calendar.
• Uploaded images, including category cover and inspiration images you choose to upload.
• Quiz and marketing information, including quiz answers, answer labels, profile result, email, first name, referrer, landing URL, UTM parameters, browser user agent, approximate location derived from hosting headers, Meta click/browser identifiers, and analytics identifiers.
• Usage and device information collected through analytics tools, including Vercel Analytics, PostHog, and Meta Pixel where enabled.

How We Use Information

• Provide, secure, maintain, and improve the app and quiz.
• Authenticate users, operate account sessions, and prevent unauthorized access.
• Store and display your planning data, uploaded images, goals, relationships, and calendar settings.
• Connect with Google Calendar when you authorize it, import calendar context, and create or update calendar events according to your selected sync settings.
• Measure quiz and product usage, understand funnel performance, and improve marketing.
• Send service-related messages and respond to support, privacy, or legal requests.
• Comply with legal obligations and enforce our terms.

Google API Data

If you connect Google Calendar, optml uses Google user data only to provide calendar import, calendar display, scheduling, and sync features you request. Calendar OAuth tokens are encrypted before storage. We do not sell Google user data, use it for advertising, or transfer it except as needed to provide the calendar features, comply with law, or protect the service.

Sharing

• Service providers that host, store, monitor, analyze, or process the service, including database, hosting, blob storage, authentication, analytics, and email or support providers we use.
• Google, when you use Google sign-in or Google Calendar features.
• Meta and PostHog for quiz, conversion, and product analytics where their tools are enabled.
• Other users only when you intentionally use sharing features.
• Authorities, advisors, or other parties when reasonably necessary for legal, safety, security, or business-transfer purposes.

Cookies And Tracking

We use necessary cookies for authentication and service operation. The quiz may also use analytics and advertising technologies from Vercel, PostHog, and Meta. These technologies can collect identifiers, usage events, referrer and landing URL data, and conversion events. See the Cookie Policy for more detail.

Retention

We keep information for as long as needed to provide the service, operate accounts, comply with legal obligations, resolve disputes, enforce agreements, and maintain backups. You may request deletion as described below.

Your Choices And Rights

• You can disconnect calendar accounts in the app settings.
• You can request access, correction, export, deletion, or restriction of your personal information by contacting us.
• California residents may request to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information where applicable, and may not be discriminated against for exercising privacy rights.
• European and UK users may have rights to access, rectify, erase, restrict, port, or object to processing, and to complain to a supervisory authority.

Children

optml is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us so we can delete it.

Contact

Privacy requests can be sent through the contact method provided in the app.