Privacy Policy

This Privacy Policy describes how ooddle ("ooddle", "we", "us", or "our") collects, uses, shares, and protects information about you when you use our website, mobile and web application, and related services (collectively, the "Service"). By using the Service you agree to the practices described below.

ooddle is a personal wellness app. We are not a healthcare provider, health plan, or healthcare clearinghouse, and the Service is not covered by HIPAA. Information you choose to share with us is treated as personal information and, where applicable, as consumer health data under the Washington My Health My Data Act (RCW 19.373) and similar state laws. See our Consumer Health Data Privacy Policy for additional disclosures specific to that category.

1. Information we collect

We collect the following categories of personal information:

• Identifiers: name, email address, account password (stored only as a one-way hash), authentication tokens.
• Profile and lifestyle information you provide: goals, preferences, optional age range, optional gender, optional height/weight, free-text answers to onboarding and reflection prompts, and notes you write in the app.
• Wellness signals: daily check-ins (energy, stress, sleep ratings), action completion, streaks, and other interaction patterns inside the Service.
• Communications: messages you send our support inbox or to the in-app AI companion.
• Device and usage data: IP address, device type, browser, pages visited, timestamps, approximate region inferred from IP, and similar diagnostic information.
• Billing information: subscription tier, plan status, and billing identifiers. Full payment-card details are never seen or stored by ooddle; they are entered directly into our payment processor's secure form.
• Cookies and similar technologies: see our Cookie Policy for details.

We do not require or knowingly collect government-issued identifiers, precise geolocation, biometric data, contents of any genetic test, or details of any medical treatment. If you choose to type sensitive information into a free-text field, please be aware that we will store what you wrote.

2. How we use your information

We use your information to:

• provide, personalize, and improve the Service;
• generate the daily and weekly content that ooddle sends you (insights, reflections, the Sunday Letter), using your wellness signals as input to language-model prompts;
• send transactional emails (sign-up confirmation, billing, password resets);
• send the daily Insight email and the Sunday Letter on the cadence you choose in your account settings (you can change this any time at /settings/email);
• respond to support requests;
• detect, prevent, and address technical problems, fraud, and abuse;
• comply with legal obligations.

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. See Section 5 below for the specific categories of recipients we do share with.

3. AI-generated content and third-party AI processing

ooddle uses a third-party AI service provider, DeepInfra, Inc. (deepinfra.com/privacy), to draft personalized content (daily insights, the Sunday Letter, in-app chat replies, the OWS insight caption, and similar surfaces).

What we send to DeepInfra: your daily check-in numbers (energy, sleep, stress on a 1-10 scale), check-in notes, your wellness goal and onboarding profile answers, your chat messages and recent conversation history, and recent OWS score trends. We send only the minimum context required to generate the response you see.

Data retention: DeepInfra processes these requests as transient prompt input and does not retain or store your data after the request returns. Your data is not used by DeepInfra or by us to train base models.

Your consent: Before we send any of your data to DeepInfra for AI processing, the ooddle iOS app asks you to consent in a dedicated screen on first launch. You can revoke consent at any time by contacting support@ooddle.com; once revoked, AI features stop working for your account.

AI-generated content is intended for informational and motivational purposes only. It is not medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical concerns.

4. Cookies and similar technologies

We use a small set of strictly necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies or third-party tracking pixels for marketing purposes. Read the full Cookie Policy for the complete list.

5. How we share your information

We share personal information with the following categories of recipients, only to the extent reasonably necessary for the purposes listed above:

• Cloud hosting and infrastructure providers that store and serve the Service on our behalf.
• Payment processors that handle subscription billing under their own privacy policy and PCI-DSS controls.
• Email service providers that deliver transactional and cadence-driven emails.
• AI service providers that generate the Service's personalized content. We currently use DeepInfra, Inc. See Section 3 for details on what data is sent and DeepInfra's retention policy.
• Analytics and error-monitoring providers that help us detect bugs and understand aggregate usage patterns. We do not share content of your check-ins or notes with these providers.
• Professional advisors (lawyers, accountants, auditors) when reasonably needed.
• Successors in interest in connection with a merger, acquisition, financing, or sale of assets, subject to commercially reasonable confidentiality obligations.
• Authorities when required to do so by law, subpoena, or court order, or where we believe disclosure is necessary to protect rights, safety, or property.

All recipients are bound by contract or by law to use the information only for the purposes for which it was disclosed and to keep it secure.

Partners and affiliate networks. The Service surfaces curated partner offers in the Perks Jar. When you tap a partner link you are taken to that partner's website, which has its own privacy practices. We do not share your account information, email, wellness signals, or free-text content with partners. We may record internally that a click occurred for product-usage analytics, but no personally identifying information leaves ooddle as part of that click.

6. Retention

We retain your personal information for as long as you have an active account and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete your personal information from our active systems within 30 days, with limited exceptions for backup copies (cycled out within an additional 60 days) and information we are legally required to retain.

7. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• request a portable copy of your information;
• opt out of any "sale" or "sharing" (we do neither — see Section 2);
• limit the use of sensitive personal information;
• withdraw consent where processing is based on consent;
• appeal a decision we make about a privacy request.

You can exercise most of these rights directly inside the app: account deletion under Settings → Profile, and email-cadence controls under Settings → Email. For any other request, email us at support@ooddle.com and we will respond within 45 days. We will not discriminate against you for exercising any of these rights.

Washington residents: please also see our Consumer Health Data Privacy Policy. California residents: please also see our Do Not Sell or Share notice.

8. Age requirement and minors

The Service is intended only for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at support@ooddle.com and we will delete it.

9. International transfers

ooddle operates from and stores its primary data in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have different data-protection rules than your country.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS for data in transit, encryption at rest for backups, password hashing with a modern algorithm, role-based access to production systems, and routine review of our security posture. No system is ever 100% secure; we cannot guarantee absolute protection against all forms of misuse.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, send a notice through the app or by email. Your continued use of the Service after the effective date of the updated policy constitutes acceptance of the changes.

12. Contact us

For questions about this policy, to exercise a privacy right, or to file a complaint, contact us at support@ooddle.com.