Privacy Policy

OptiChroniX GmbH – Privacy Policy
Effective Date: March 26, 2026
Last Updated: March 26, 2026

1. Controller Identity

OptiChroniX GmbH
Brunngass 14c
4124 Schönenbuch
Switzerland

Contact: support@optichronix.com
Privacy Contact (if applicable): privacy@optichronix.com

OptiChroniX GmbH acts as the data controller under applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Scope

This Privacy Policy applies to:

• optichronix.com (the “Website”)
• Rejuvify and related applications (the “Services”)

3. Regulatory Positioning

Rejuvify is a wellness platform.

• It does not provide medical diagnosis or treatment
• Outputs are informational and behavioral guidance only

HIPAA applies only where OptiChroniX acts as a Business Associate under a formal agreement with a covered entity.

Direct-to-consumer usage is governed primarily by GDPR and applicable consumer privacy laws.

4. Categories of Data Processed

4.1 Health and Behavioral Data (Special Category Data)

Collected with explicit user consent:

• Activity (steps, workouts, energy expenditure)
• Heart rate and related metrics (e.g., HRV where available)
• Sleep data
• Body composition (weight, BMI, fat %, lean mass)
• Nutrition (AI-derived or user-entered)
• Behavioral inputs and goals

Sources include:

• Apple HealthKit
• Garmin Connect
• Withings
• Other user-authorized integrations

4.2 Account Data

• Name
• Email address
• Optional profile attributes

4.3 Technical Data

• Device type and OS
• Usage events
• Error and crash logs

5. Legal Basis for Processing

We process data under:

• Consent (Art. 6(1)(a), Art. 9(2)(a))
• Contract performance (Art. 6(1)(b))
• Legitimate interest (Art. 6(1)(f))

Consent may be withdrawn at any time.

6. Purpose of Processing

We process data strictly to:

• Calculate the Lifestyle Vitality Index and related metrics
• Generate personalized insights and feedback
• Enable AI-driven coaching features
• Display trends and progress
• Maintain system performance and reliability

We do not use data for advertising, data brokerage, or third-party behavioral profiling.

7. Use of AI-Powered Systems

Rejuvify uses internally developed and third-party AI systems to generate wellness insights.

AI is used for analysis, summarization, and behavioral guidance only. Outputs are non-clinical and informational. No automated medical decisions are made.

Data processed by AI may include:

• Health and activity metrics
• Behavioral patterns
• User-entered data

We use categories of providers including:

• Large Language Model (LLM) inference providers
• Data processing and analytics infrastructure providers

Data shared with AI providers is limited to what is necessary and processed under Data Processing Agreements (DPAs). Data is not sold or used for advertising.

AI inputs and outputs may be processed transiently or stored for feature delivery and system improvement. Retention is limited to what is necessary.

Users may choose not to use AI features. Core functionality remains available subject to product design.

8. Data Sharing and Processors

We do not sell personal data.

We use processors to operate the service, including:

• Cloud hosting (e.g., Vercel)
• Backend and database services (e.g., Supabase)
• Notification systems (e.g., OneSignal)
• Payment providers (if applicable, e.g., Stripe)
• AI processing providers

All processors operate under Data Processing Agreements and confidentiality obligations.

Data is disclosed only as necessary for service delivery or where required by law, limited to the minimum necessary scope.

9. International Data Transfers

Where data is transferred outside the EU/EEA:

• Standard Contractual Clauses (SCCs) are applied
• Additional safeguards such as encryption and access controls are implemented

10. Data Retention

Data is retained only as long as necessary for service provision or legal obligations.

Upon user request, data is deleted or irreversibly anonymized unless retention is required by law.

11. Security Measures

We implement:

• Encryption (in transit and at rest)
• Role-based access controls
• Audit logging
• Infrastructure monitoring

No system guarantees absolute security.

12. Third-Party Integrations

Rejuvify integrates with:

• Apple HealthKit
• Garmin
• Withings

Third-party data collection is governed by their respective policies.
Once data is imported into Rejuvify, processing is governed by this Privacy Policy.

13. Children

The Services are not intended for individuals under 16 years of age.
We do not knowingly collect data from minors.

14. Cookies and Tracking

• Minimal tracking is used
• No cross-site behavioral tracking
• No advertising cookies

15. Data Breach Response

In case of a breach:

• Immediate assessment is conducted
• Users are notified where required
• Authorities are notified where applicable

16. User Rights

Users have the right to:

• Access data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Data portability
• Withdraw consent

Requests: support@optichronix.com

17. Changes

We may update this policy.
Material changes will be communicated.

18. Contact

OptiChroniX GmbH
Email: support@optichronix.com