Your data, plainly.

The public check uses only the age, sex and country you pick, to compute population statistics. We don't save it with anything that identifies you.

Two conveniences live only in your browser: the profiles you checked (so after you sign up we can suggest adding them as loved ones) and, if you answer “Do you smoke?”, that answer (so it can pre-fill your health questions). Clearing your browser data removes both.

We also count “Do you smoke?” answers anonymously — per day, by country, sex and 10-year age band — with no identifier of any kind.

To preselect your country on the risk check, we use the country our hosting provider derives from your connection. We don't store it.

• Account: your email and name, via our sign-in provider.
• Profile: birth year, sex at birth and country — what the risk engine needs.
• Health answers (optional): smoking, exercise, height, weight, alcohol, fruit and vegetables, and — if you choose — which conditions your close family has had, how you get around (driving, a motorbike, cycling) and activities such as swimming in the sea or hiking in the mountains — with a dated history of your changes, so you can see your progress. This is special-category data under GDPR (Art. 9), so we store it only with your explicit consent, which you can withdraw at any time by deleting the answers (the history goes with them).
• Loved ones: the name you give them, relationship, birth year, sex and country.
• Health answers you keep for a loved one (optional): if you manage someone's profile — a parent who won't use an app, for example — you can answer the same questions for them. Before we store them, you confirm that you care for that person or have their permission. Only you can see or change them; they're never shared, sold or used for advertising, the AI guide never sees the person's name, and they're deleted when you delete them, remove the person from your list or delete your account. The person can always ask you, or us, to delete them. They can also have their own account and answer for themselves.
• Biostasis plans (optional): if biostasis (cryonics) is part of your plan or a loved one's, the provider, where you are with it, what's ready and the emergency number — so they're at hand when it matters. Wishes like this can reveal beliefs, so we treat them as special-category data (GDPR Art. 9): stored only with your explicit consent (for a loved one, you confirm it's their wish and you have their permission), never shared with any biostasis provider — you contact them yourself — and never used for analytics, advertising or AI: the plan pages are left out of analytics and session recordings entirely. Delete a plan any time on its page.
• Check-ups & reminders: which check-ups you track, when they were last done, and whether you want a reminder.
• Payments: handled by Stripe. We never see your card number; we keep your subscription status.

We don't sell your data, use it for advertising, or share health answers with employers, insurers or anyone else. Analytics never include your health values: the health sections of the app are excluded from session recordings, and form inputs are masked.

We use PostHog (EU cloud) to understand how people use Odainn. Until you choose, it runs without cookies or any storage on your device — visits are counted anonymously. If you accept, it uses cookies to link your visits, records anonymised sessions (form inputs are masked and the health sections are excluded), and — if you have an account — links activity to your account id, never your name or email. Sign-in uses strictly necessary cookies. Change your choice any time with “Cookie settings” at the bottom of every page.

If you use an AI feature (for example “Explain my results”), we send the model your numbers from our risk engine and, where relevant, your health answers — never your name or email. We use Google's Gemini API on a paid plan, under which Google does not use the data to train its models. The AI only explains numbers our engine computed; it does not diagnose or give medical advice.

• Clerk — sign-in and account security
• Convex — our database (EU region, Ireland)
• Vercel — hosting
• PostHog — product analytics (EU cloud)
• Stripe — payments
• Google (Gemini API) — AI explanations, only when you use them
• Resend — reminder emails

You can see and download everything we hold about you, correct it, and delete it — all from your account page: “Download my data”, “Delete my health answers” and “Delete my account” (which also cancels a subscription). You may also object to processing or complain to a data-protection authority — in Poland, the President of the Personal Data Protection Office (UODO).

We keep your data until you delete it or your account. Payment records are kept as long as tax law requires.

The controller's legal details and contact address are published here before public launch.

Odainn is educational. It shows statistics for people like you and the average effect of habits — not a diagnosis or an individual prediction. Talk to a doctor about your health.