Legal

Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Osmi ("Osmi", "we", "us") collects, uses, and shares information across the Osmi app, our website, and our quiz (together, the "Service"), and the choices you have. Please read it carefully.

Health data has its own policy. If you took the quiz, read our Consumer Health Data Privacy Policy. It covers what counts as consumer health data, who processes it, and how to withdraw your consent or have it deleted.

Who we are

Osmi is operated by Osmi Health, Inc., a Delaware corporation registered at 131 Continental Dr, Ste 305, Newark, DE 19713, United States. For any privacy question or request, contact us at hello@osmihealth.co. Where required by law, this entity acts as the "controller" of your personal data.

Information the app uses

Osmi may use:

Camera access, when you scan a barcode, ingredient label, or lab report.
Barcode values, when the app looks up product information in public product databases.
Ingredient or label text you paste or scan, so Osmi can prepare product information.
Lab report images, PDFs, extracted text, and values, when you import a lab report. The current iOS app keeps these records on your device.
Apple subscription transaction data, when you purchase or renew an App Store subscription.

How information is used

Camera access is used for scanning. When you scan an ingredient label, the photo stays on your device. Osmi sends the extracted ingredient text, barcode, product name and brand when available, country, display language, and limited technical request data to Osmi's product service. The service stores this product information to prepare and improve ingredient results. It sends unfamiliar ingredient terms and their label context to OpenRouter for translation. Osmi may also send barcode and market information to public product data providers to retrieve product information. These records are about the product. They do not include your lab results, check-ins, period records, or Apple Health data.

Lab report images, PDFs, extracted text, and values stay on your device in the current iOS app. The app does not send these records through the lab-import feature.

The current iOS app does not include an account system. After you see the in-app disclosure, Osmi measures anonymous, non-health app usage through PostHog, processed on servers in the United States. Scan analytics may include up to 12 ingredient names identified in a result, along with scan counts and result metadata. These events exclude lab values, symptom entries, period records, and Apple Health data. You can turn this off at any time under Data & Safety.

We use RevenueCat to track App Store subscription purchases. RevenueCat receives an anonymous app identifier and Apple purchase transaction data. Osmi does not send RevenueCat your name or email.

The iOS app uses Meta's SDK to measure which advertisements bring people to Osmi. It asks your permission first, through Apple's App Tracking Transparency prompt. Meta receives an anonymous per-install identifier, app install and session events, and subscription events carrying the product identifier, the price, and the currency. It receives your device's advertising identifier only if you allow tracking at that prompt. Meta never receives your name, email, or phone number — advanced matching is switched off — and it never receives your lab results, check-ins, period records, symptoms, or Apple Health data. You can withdraw permission at any time in your iPhone's Settings, under Privacy & Security, then Tracking.

Information we collect through the website and quiz

When you take the quiz or subscribe on our website, we may collect:

Information you give us — such as your first name, age range, email address, and the answers you provide about how you feel and your goals.
Apple Health data you choose to connect — in the current iOS app, Apple Health is optional and read-only. See "Health and wearable data" below.
Device and usage data — such as IP address, device type and settings, browser, operating system, referring URL, and how you interact with the Service, collected automatically.
Cookies and similar technologies — see "Cookies and tracking" below.
Transaction data — when you subscribe, our payment processor handles your card details. We do not collect or store full card numbers, but we may receive limited details about the transaction (date, amount, payment method type).

If you apply to be an Osmi creator, we collect your name, email, phone number, and portfolio links to review your application.

How we use website and quiz information

To provide, personalize, and improve the Service and your plan based on your answers.
To process your payments and manage your subscription.
To communicate with you about your plan, your account, and service or legal notices.
To analyze and improve how the Service works.
To send marketing communications where permitted; you can opt out at any time using the unsubscribe link in our emails.
To keep the Service secure, prevent fraud and misuse, and comply with legal obligations.

Email updates

Before the app launched, our website offered an email sign-up. If you signed up then, we hold your email address, the part of the page you signed up from, and the time you signed up. This information is stored securely with our content platform. The website no longer collects email addresses; the app is available on the App Store.

If you signed up, you agreed that Osmi may email you about the app and product updates, which may include marketing content.
Every email includes an unsubscribe link. Opting out stops all marketing email; we honor opt-outs promptly.
Where your local law requires consent for marketing email (for example in the EEA or UK), your sign-up is the consent we rely on, and you can withdraw it at any time by unsubscribing or contacting us.
We do not sell these email addresses, and we do not share them with advertising platforms for ad targeting.
You can ask us to delete your sign-up record at any time using the contact details below.

Data sources

Osmi uses public and third-party data sources such as product databases, map search results, regional catalogs, and user-provided label text. Product, water, and restaurant data can be incomplete or outdated. Users should verify product labels, menus, packaging, and source documents directly.

Cookies and tracking

Our website uses cookies and similar tools from us and from a small number of partners, including Meta (Facebook) Pixel and PostHog, to understand how visitors use our site and measure our marketing. These tools only load after you accept cookies in our banner, and you can change your choice at any time from the "Cookie settings" link in the footer. We never send your quiz answers, symptoms, or any other health information to Meta or any advertising platform.

Health and wearable data

Apple Health is optional and read-only in the current iOS app. If you connect it, Osmi reads resting heart rate, heart rate variability, heart rate samples, steps, active energy, workouts, sleep, breathing rate, blood oxygen, wrist temperature, menstrual flow, and, on iOS 26, the medications you log in Apple Health. Osmi stores those records on your device and never writes anything back to Apple Health. The current iOS app does not sync these records to CloudKit. You can withdraw access at any time in Apple Health settings.

How we share information

We do not sell your personal data. We share information only as needed to run the Service, including with:

Service providers acting on our behalf — for example cloud hosting, analytics, advertising measurement, email delivery, and payment processing.
Public product data providers, to look up product information as described above.
Authorities or others, where required by law, to enforce our terms, or to protect the rights and safety of our users or the public.

Legal bases (EEA and UK)

If you are in the EEA or UK, we process your personal data on one or more of these legal bases: your consent (which you can withdraw at any time); to perform our contract with you (for example, to provide the Service and process payments); our legitimate interests (for example, to secure, analyze, and improve the Service and to market it responsibly), balanced against your rights; and to comply with legal obligations.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email hello@osmihealth.co. We will respond as required by applicable law, and we may need to verify your identity first.

California privacy rights

If you are a California resident, you may request the categories and specific pieces of personal information we have collected about you, request deletion, and request details of any information shared for direct-marketing purposes. We do not sell your personal information. To make a request, email hello@osmihealth.co with "California privacy rights request" in the subject line. We will not discriminate against you for exercising these rights.

Health information counts as sensitive personal information under California law. You have the right to limit how we use and disclose it, and to opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising. Because we don't use your health information for anything beyond running the Service, exercising this right won't change your experience. Email hello@osmihealth.co or use the "Do Not Sell or Share My Personal Information" link at the bottom of this page.

International data transfers

We may process and store information in countries other than where you live. Where we transfer personal data internationally, we use appropriate safeguards required by law to protect it.

Data retention and deletion

Osmi does not currently provide user accounts in the app. Label text, barcode values, or support information you provide may be used to deliver the app experience or respond to your request. To request correction or deletion of information you sent to Osmi, email hello@osmihealth.co.

For quiz, subscription, and website information, we keep personal data only for as long as needed for the purposes in this policy, and longer where required to meet legal, tax, accounting, or fraud-prevention obligations. Even if you ask us to delete your data, we may retain limited records where the law requires.

Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach of your personal information occurs, we'll notify you and the authorities as the law requires.

Children's privacy

The Service is intended for adults (18 and over) and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Medical and nutrition disclaimer

Osmi is an informational tool. It does not provide medical, nutrition, diagnosis, treatment, or safety advice.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Contact

For support, privacy questions, or data correction requests, email hello@osmihealth.co or use the support contact listed on the Osmi App Store product page.