Privacy Policy

This policy describes how Optiscio collects, uses and protects the personal data transmitted through the optiscio.com website and the mobile application.

Optiscio is a nutritional planning service. As such, some of the data collected falls under the category of sensitive data within the meaning of Article 9 of the General Data Protection Regulation (GDPR). Such data benefits from reinforced protections.

1. Data controller

• Identity: AKLI Massinissa Sadek — Sole proprietor under French micro-entreprise scheme (trading as Sadoukas), French SIREN 105 416 952 / SIRET 105 416 952 00015
• Address: 1 Place Nelson Mandela, 77700 Chessy, France
• Contact: legal@optiscio.com (GDPR requests) — contact@optiscio.com (general)
• Data Protection Officer (DPO): none appointed. Appointing a DPO is only mandatory beyond a certain activity threshold (large-scale systematic monitoring or large-scale processing of sensitive data, Art. 37 GDPR). For any request, write to legal@optiscio.com — AKLI Massinissa Sadek, the data controller, replies personally.

2. Data collected on the website (waitlist)

Upon registration to the waitlist, the following data is collected :

• Email address — to notify the User when the application launches
• Signup section (hero / final CTA / pricing) — to measure what converts
• Browser locale and country (derived from the IP address — the IP itself is not stored) — to tailor communication and prioritize languages

Legal basis: consent (Art. 6.1.a GDPR), given by clicking the waitlist button.

Retention period: up to 24 months after launch, or until unsubscription via the dedicated link provided in the announcement email.

Sub-processors: Brevo (waitlist storage and email sending — Sendinblue SAS, Paris, France, hence intra-EU processing), Vercel (website hosting — USA, under Standard Contractual Clauses).

3. Data collected in the application

The mobile application collects :

• Anthropometric data: biological sex, date of birth, weight, height
• Eating habits: goal, diet, allergens, cuisine preferences, logged meals
• Physical activity: overall level, training days, intensity
• Weigh-ins over time (adaptive tracking)
• Technical data: device model, OS, application version (for support)

Legal basis: performance of the contract (Art. 6.1.b) for the paid service, explicit consent (Art. 9.2.a) for health data.

Retention period: as long as the account is active. Complete deletion upon request within 30 days.

4. Rights of the User

The User has the following rights over their personal data at any time :

• Right of access — obtain a copy of the data concerning them
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten") — delete the account and all associated data
• Right to data portability — retrieve the data in a machine-readable format (CSV / PDF export available directly in the application)
• Right to object — object to a specific processing activity
• Right to restrict processing — freeze processing while a verification is in progress

To exercise these rights, please write to legal@optiscio.com. A response is provided within 30 days at the latest.

The User also has the right to lodge a complaint with the CNIL (French data protection authority) — cnil.fr.

5. Security

All data is transmitted over HTTPS (TLS 1.2+). Databases are encrypted at rest. Passwords are never stored in plaintext (bcrypt hash). Access to data is strictly limited to authorized personnel and logged.

6. Cookies and trackers

The optiscio.com website does not use third-party advertising or cross-site tracking cookies. If an analytics tool is enabled (e.g. PostHog), it is configured in "cookieless" mode with IP anonymization.

The only cookie that may be set is a functional cookie (optiscio-locale) that remembers the language you have chosen. Exempt from consent, it is only set after a manual language selection; no cookie banner is therefore required.

7. Changes

This policy may be updated. Registered Users are notified by email at least 30 days before any substantial change.