Consumer Health Data Privacy Policy
Last updated October 2, 2026
This policy explains how OptiSelf LLC collects, uses and shares consumer health data through OptyPeptides, as required by Washington's My Health My Data Act and similar state laws. It covers health information that HIPAA doesn’t, such as personal accounts and clinics that aren’t subject to HIPAA. It supplements our Privacy Policy.
Consumer health data we collect
- Dose logs, peptide and supplement protocols, and the dates and routes of administration
- Wellbeing check-ins and symptoms
- Body measurements and body composition
- Lab results and biomarker values
- Data from devices and apps you choose to connect, such as Apple Health, Health Connect, Whoop, Oura, Garmin and InBody
- Health conditions and goals in your profile
Where it comes from
From you, through the app. From your clinic, when its staff enter or import information about you. From devices and services you connect.
Why we collect and use it
- To provide the app: tracking, reminders, adherence and supply insights, and showing you and your clinic your records
- To keep the service secure and to meet legal obligations
- To improve and develop the service
- Where your clinic takes part in our research data program, to prepare the data described below
Who we share it with
| Who | What | Why |
|---|---|---|
| Your clinic and its authorized staff | Your records in the app | To provide your care and manage your protocol |
| Service providers who work for us, including cloud hosting (Amazon Web Services) and email delivery | Only what each needs to do its job | To run the service. They may not use the data for their own purposes. |
| Research organizations and similar buyers, only where your clinic takes part in the data program | Profile, treatment, check-in and lab-result data, de-identified or, with your signed authorization, identifiable | Research. This is a sale. |
| Authorities, where the law requires it | What the request covers | Legal compliance |
Ask us at any time for the current list of third parties that received your identifiable data in the past 12 months: hello@optypeptides.com.
Sale of consumer health data
We do not sell identifiable consumer health data without your separate, signed authorization. Where your clinic takes part in the data program, we de-identify data under the HIPAA standard (45 C.F.R. §164.514), by the Safe Harbor method or an expert’s determination, and license the de-identified data to research organizations. Some state laws treat that as a sale. We never sell Apple Health or Health Connect data, messages, clinical notes, uploaded documents, or sign-in details. You can opt out of sale on our Privacy Choices page. Opting out works going forward: we leave your data out of any dataset created or delivered after we process your request. It doesn’t recall de-identified data already delivered, because that data can’t be linked back to you.
Your rights
- Confirm whether we collect your consumer health data, and get a copy and the list of third parties it was shared with
- Withdraw consent you gave us
- Ask us to delete your data
Use the privacy request page or email hello@optypeptides.com. We respond within 45 days. If we deny a request, you can appeal, and our response will explain how. If we deny your appeal, you can contact your state attorney general.
If you use OptyPeptides through a clinic, your clinic may hold the original record. Records a clinic must keep as part of your medical record are handled under our agreement with the clinic, HIPAA and record-retention law, so we may refer your request to the clinic, and some information may have to be kept.
Contact
OptiSelf LLC · hello@optypeptides.com