Privacy policy

Olta Health is built to collect as little as possible. Most of what you enter never reaches us.

What stays on your device

Survey answers, fracture-risk screening answers, results, habit logs, calcium and vitamin D checks, the home-safety checklist, pet logs and reminders are processed and stored in your web browser. They are not sent to Olta Health. You can download, import or delete them in My Olta. Clearing your browser data deletes them.

What we do receive

• Daily usage totals. When you finish a survey or use a tool, your browser sends a one-word event such as “men's survey, moderate”. We add it to a count for that day. No answers, account or device identifier is attached, and no per-person record is kept.
• Specialist matching. To show directory listings, your browser asks for clinicians of the suggested specialist types (for example “endocrinologist”). Your answers are not sent and the request is not stored.
• Accounts (optional). A username you choose, a password and a recovery code (both stored only as one-way hashes), your role, and, if you turn it on, a two-step login key (encrypted). We ask your year of birth to confirm you are an adult, and do not store it. We do not ask for email, name or phone number.
• Encrypted backups (optional). If you back up, your browser encrypts your device data with a passphrase you choose before sending it. We store only the encrypted result and cannot read it or recover your passphrase.
• Community posts, which are public and shown with your username.
• Clinician applications: the professional details clinicians submit to be listed.
• Security records: login attempts by username (30 days), a salted hash of your device's IP address used to limit repeated form submissions (1 day; raw IP addresses are not stored), and an audit log of administrator actions.

Our hosting provider (Netlify) briefly records IP addresses in its request logs for security and reliability. Our database provider is Supabase.

What we do not do

We do not sell personal information. We do not use advertising, analytics trackers or third-party pixels; the site blocks third-party scripts. We do not pass messages between you and clinics: you contact them directly.

Newsletter

If you subscribe, your email address goes to our email provider, not to Olta Health's database. Every email includes an unsubscribe link.

Your choices

Device data: manage it in My Olta. Account data: download or delete it on your account page, which also removes your backup and community posts. See your privacy choices.

Children

Accounts are for adults 18 and older. The children's survey is completed by a parent or guardian about their child, on their own device. Olta Health is not directed to children and does not knowingly collect information from them.

Contact

privacy@oltahealth.com (set up this mailbox before launch).