Privacy Policy

BioHack Optimum ("we", "us") provides AI-generated Personal Optimization Blueprints. For privacy questions, write to office@biohackoptimum.com.

Assessment answers — while you answer. Your 14 lifestyle responses (sleep, energy, focus, stress, nutrition, hydration, activity, stimulants, lifestyle and goals) are saved only in your own browser's local storage. Nothing is sent to us while you complete the assessment.

Assessment answers — when your Blueprint is generated. After payment is confirmed and you have given the explicit consent described in section 4, your answers are sent from your browser through our server to the AI service to write your Blueprint. This happens again if you request your free revision. We do not save your answers in our database; our generation code handles them for the request. This does not mean that the AI providers keep no copies; see section 6.

Your Blueprint. The generated text is returned through our server to your browser, where it and your calculated domain scores are stored. The PDF is created on your own device. We do not save a copy of the Blueprint in our database; the AI providers may retain request or response data (see section 6).

Payment and consent records. Payments are processed by Stripe. We receive confirmation that a payment succeeded and a reference for it; we never receive or store your full card number, expiry or security code. The payment record in Stripe also holds your consent confirmations (immediate delivery, withdrawal acknowledgment, Terms acceptance and health-data consent, with date and policy version), an internal assessment reference, a scrambled form of your access code and whether your free revision was used. Your assessment answers are never sent to Stripe.

Technical data. Standard information your browser sends when loading the site (such as IP address and browser type), and server error logs used to keep the service working. Our Blueprint generation code is built so that its error messages and logs do not contain your answers or Blueprint text. Separately, Lovable's AI gateway keeps a log of each AI request made by this site, and that log can include the request and response content (your answers and the generated Blueprint), sometimes in redacted or shortened form. We have not received confirmation of how long Lovable keeps these logs.

Stripe handles payments and the records described above. At checkout you give your email and payment details directly to Stripe, and checkout may be provided through Stripe's Link service; Stripe processes that information under its own privacy terms. Our hosting provider runs the website and server. For generation, our server sends your answers to Lovable's AI gateway, requesting a Google Gemini model. Lovable's applicable provider retention arrangements have not been confirmed for this app's exact AI route. We have not verified which Google service or contractual arrangement Lovable uses for this request, whether the data may be used for training, nor the locations or transfer safeguards applicable to this specific AI route. We will update this notice once those details are confirmed. We do not sell your personal data or share it for advertising.

Your answers describe lifestyle habits, but some of them (for example about sleep, energy or stress) can reveal information about your health, which is a special category of data under Article 9 GDPR. We therefore process it only with your explicit consent (Art. 9(2)(a) GDPR), which you give with a separate, unticked checkbox before any answers leave your browser, and solely to generate and deliver your Blueprint. Please do not submit diagnoses, medications or other medical details.

Our other legal bases are:

• Performance of a contract (Art. 6(1)(b)) — generating and delivering the Blueprint you purchased, including the free revision.
• Legal obligation (Art. 6(1)(c)) — keeping payment and accounting records.
• Legitimate interests (Art. 6(1)(f)) — securing the service and preventing fraud.

You can withdraw your health-data consent by emailing office@biohackoptimum.com. Include your Blueprint access code or another purchase reference so we can identify your request; do not email your assessment answers. We will acknowledge it and stop any further generation or revision we handle for that purchase unless you explicitly consent again. Please do not submit another generation or revision request after withdrawing: the site does not currently maintain an automatic server-side withdrawal block, so an email alone cannot prevent a new submission if you later tick the consent box again. Withdrawal does not undo processing already completed or a Blueprint already delivered. You can clear this site's data to remove the answers and Blueprint stored in your browser. We do not keep an assessment database copy, but this does not delete any copies held by AI providers. If you ask us to address provider-held copies, we will contact the relevant providers about your request, report what they confirm, and explain any limits to access or deletion. Payment and consent records in Stripe may need to be retained for legal reasons.

• Answers in your browser — until you clear site data or start a new assessment. A saved Blueprint may remain available after starting a new assessment; clear site data to remove it from this browser.
• Answers and generated text sent for generation — not saved in our assessment database. Our generation code handles them during the request. Lovable's AI gateway keeps a request log that can contain assessment answers and Blueprint text (see section 2). We have not confirmed how long Lovable keeps this log, the applicable provider retention arrangements, training use or transfer arrangements for this specific integration, so we cannot promise immediate deletion or a particular provider retention period. Contact us to request information or action concerning provider-held copies; see section 5.
• Payment and consent records in Stripe — for the period required by applicable tax and accounting law, and as needed to handle refunds, disputes or legal claims.
• Server error logs (designed not to contain answers or Blueprint text) and Lovable's AI request logs (which can contain them) — kept by our hosting provider and by Lovable under their own settings. We have not verified the retention period for this app.

Depending on where you live, you may request access to, correction of, deletion of, or a copy of your personal data, withdraw consent, and object to or restrict certain processing. Email office@biohackoptimum.com and we will respond within the period required by law. You may also complain to your local data protection authority.

The site is served over encrypted connections and payment handling is delegated to a PCI-compliant provider. No system is perfectly secure, but we work to limit what we hold in the first place.

The service is not intended for anyone under 18 and we do not knowingly collect data from children.

We will update this page when our practices change and revise the date above. See also our Cookie Policy and Terms & Conditions.