Legal

Privacy Policy

Last updated: July 11, 2026

Draft prepared for your review. Please confirm the analytics and marketing tools actually in use, and have counsel review before publishing.

This Privacy Policy explains how Osmi ("Osmi", "we", "us") collects, uses, and shares information across the Osmi app, our website, and our quiz (together, the "Service"), and the choices you have. Please read it carefully.

Who we are

Osmi is operated by HAYES FZCO, DSO-IFZA-19691, IFZA Properties, Dubai, UAE. For any privacy question or request, contact us at hello@osmihealth.co. Where required by law, this entity acts as the "controller" of your personal data.

Information the app uses

Osmi may use:

Camera access, when you scan a barcode or ingredient label.
Location access, when you ask the map to show nearby restaurants or water options.
Barcode values, when the app looks up product information in public product databases.
Ingredient or label text you paste or scan, so the app can analyze the product locally.

How information is used

Camera access is used for scanning. Location access is used for nearby search. Barcode values may be sent to public product data providers over HTTPS so the app can retrieve product information.

The current app version does not include an account system, advertising SDKs, or third-party analytics SDKs.

Information we collect through the website and quiz

When you take the quiz or subscribe on our website, we may collect:

Information you give us — such as your first name, age range, email address, and the answers you provide about how you feel and your goals.
Health and wearable data you choose to connect — if you link a device or service (for example Oura, Apple Watch, WHOOP, Fitbit, or Apple Health), we may import data such as sleep, heart rate, activity, and cycle information to personalize your support. See "Health and wearable data" below.
Device and usage data — such as IP address, device type and settings, browser, operating system, referring URL, and how you interact with the Service, collected automatically.
Cookies and similar technologies — see "Cookies and tracking" below.
Transaction data — when you subscribe, our payment processor handles your card details. We do not collect or store full card numbers, but we may receive limited details about the transaction (date, amount, payment method type).

How we use website and quiz information

To provide, personalize, and improve the Service and your plan based on your answers.
To process your payments and manage your subscription.
To communicate with you about your plan, your account, and service or legal notices.
To analyze and improve how the Service works.
To send marketing communications where permitted; you can opt out at any time using the unsubscribe link in our emails.
To keep the Service secure, prevent fraud and misuse, and comply with legal obligations.

Data sources

Osmi uses public and third-party data sources such as product databases, map search results, regional catalogs, and user-provided label text. Product, water, and restaurant data can be incomplete or outdated. Users should verify product labels, menus, packaging, and source documents directly.

Cookies and tracking

Our website may use cookies and similar technologies to keep the site working, remember your preferences, understand usage, and measure our marketing. You can control cookies through your browser settings; blocking some cookies may affect how the site works. [If a separate Cookie Policy is published, link it here.]

Health and wearable data

If you connect a wearable or health service, we import only the data you consent to on the connection screen, and we use it solely to provide insights and personalize your support. We do not sell this data or use it for advertising or unrelated data-mining. You can withdraw access at any time in your device or health-app settings, and connecting a device is always optional.

How we share information

We do not sell your personal data. We share information only as needed to run the Service, including with:

Service providers acting on our behalf — for example cloud hosting, analytics, email delivery, and payment processing.
Public product data providers, to look up product information as described above.
Authorities or others, where required by law, to enforce our terms, or to protect the rights and safety of our users or the public.

Legal bases (EEA and UK)

If you are in the EEA or UK, we process your personal data on one or more of these legal bases: your consent (which you can withdraw at any time); to perform our contract with you (for example, to provide the Service and process payments); our legitimate interests (for example, to secure, analyze, and improve the Service and to market it responsibly), balanced against your rights; and to comply with legal obligations.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email hello@osmihealth.co. We will respond as required by applicable law, and we may need to verify your identity first.

California privacy rights

If you are a California resident, you may request the categories and specific pieces of personal information we have collected about you, request deletion, and request details of any information shared for direct-marketing purposes. We do not sell your personal information. To make a request, email hello@osmihealth.co with "California privacy rights request" in the subject line. We will not discriminate against you for exercising these rights.

International data transfers

We may process and store information in countries other than where you live. Where we transfer personal data internationally, we use appropriate safeguards required by law to protect it.

Data retention and deletion

Osmi does not currently provide user accounts in the app. Label text, barcode values, or support information you provide may be used to deliver the app experience or respond to your request. To request correction or deletion of information you sent to Osmi, email hello@osmihealth.co.

For quiz, subscription, and website information, we keep personal data only for as long as needed for the purposes in this policy, and longer where required to meet legal, tax, accounting, or fraud-prevention obligations. Even if you ask us to delete your data, we may retain limited records where the law requires.

Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's privacy

The Service is intended for adults (18 and over) and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Medical and nutrition disclaimer

Osmi is an informational tool. It does not provide medical, nutrition, diagnosis, treatment, or safety advice.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Contact

For support, privacy questions, or data correction requests, email hello@osmihealth.co or use the support contact listed on the Osmi App Store product page.