Privacy policy

This policy explains, transparently, how O — The Human Operating System ("the Service") collects, uses, stores and protects your personal data, in compliance with the EU General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the site publisher listed in the legal notice. For any data-related question, please contact: privacy@the-human-operating-system.app.

2. Data collected

  • Email address — when you subscribe to the briefing or activate a feature requiring an account.
  • Questionnaire answers — your answers cover lifestyle and health-related information (sleep, activity, nutrition, blood pressure, medical history). They may qualify as sensitive health data under Article 9 GDPR and are handled as such.
  • Coach O exchanges — the content of messages you send to the coach and the generated answers.
  • Usage and navigation data — pages viewed, session length, device type, anonymized technical data (only after you consent to analytics cookies).

3. Purposes and legal basis

All data is processed on the basis of your explicit consent (Article 6(1)(a) and, for health data, Article 9(2)(a) GDPR), in order to:

  • compute and display your estimated health-age and system scores;
  • provide a personalized action plan;
  • power the Coach O conversation;
  • send the prevention briefing if you subscribe;
  • measure usage of the Service in an anonymized way.

4. Recipients and sub-processors

Your data may be shared with the sub-processors listed below, strictly as needed to operate the Service. Several are based in the United States; transfers outside the EU are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

  • Google Analytics (GA4) — anonymized audience measurement (cookies). Transfer outside the EU: United States.
  • PostHog — audience and user-journey measurement, behavioral data only. Transfer outside the EU: none (European hosting) — or United States, depending on the region selected when the account was created.
  • Anthropic — engine powering Coach O. Your messages are sent to the Anthropic API to generate responses. Transfer outside the EU: United States.
  • Supabase / Lovable Cloud — database, authentication and application hosting.
  • beehiiv — email delivery for the briefing. Transfer outside the EU: United States.

5. Retention

  • Questionnaire answers and results: kept while your account is active, deleted upon request or after 36 months of inactivity.
  • Briefing email address: kept until you unsubscribe.
  • Coach O exchanges: kept for up to 12 months.
  • Anonymized analytics data: up to 14 months (GA4 setting).

6. Your rights

Under GDPR you may at any time exercise the following rights:

  • right of access;
  • right of rectification;
  • right of erasure ("right to be forgotten");
  • right of portability;
  • right to object and to restrict processing;
  • right to withdraw consent at any time.

To exercise these rights, write to: privacy@the-human-operating-system.app. You also have the right to lodge a complaint with the data-protection authority in your country.

7. Cookies

The Service uses anonymized audience-measurement cookies (Google Analytics 4 and PostHog). No analytics cookie is set until you have given explicit consent through the banner shown on your first visit. You can change your choice at any time via the "Manage cookies" link in the footer.

8. Security

We implement appropriate technical and organisational measures to protect your data against loss, alteration and unauthorised access (in-transit encryption, access control, secure hosting).

9. Changes

This policy may be updated. The date of the most recent change is shown below. Material changes will be notified by email if you are subscribed to the briefing.

Last updated: 25 June 2026.

O is a wellness-awareness tool for informational and educational purposes. It does not constitute a diagnosis, medical advice or treatment. Always consult a qualified health professional.