Privacy Policy

Your health information is private by default. Utopia is operated by Nomadic Ventures Group Inc. This policy explains the information we process when you use our website, app and connected features. Features still in development are identified in the app; this policy does not mean those features are available.

Information you provide

We process account identifiers and contact information; profile details such as age, height, weight, goals and routines; and information you choose to enter or upload, such as food logs, workouts, sleep information, health reports, DEXA reports and progress photos. Messages, consent choices and support requests may also contain personal information. Do not upload someone else’s health records or images without their authorization.

Connected wearables

When you authorize a supported wearable connection, we request the permissions shown on the provider’s authorization screen. The Oura integration requests daily activity, sleep and readiness data. We use authorized data to provide your personal dashboard and inform fitness, nutrition and recovery guidance. We store connection credentials on the server, encrypted for the account that authorized them. Authorization and ongoing synchronization are separate; the app indicates whether synchronization is available. You can revoke access through your wearable provider. Revoking a connection stops future authorized access but does not itself delete records already imported.

How we use information

We use information to provide and personalize the service, maintain your journal, evaluate completion of enrollment requirements, protect accounts, prevent abuse, troubleshoot problems and respond to requests. We also process technical information such as IP addresses, request logs, device or browser information and authentication events for operation and security. We do not use health records for targeted advertising or sell personal health information.

AI features and your choices

AI coaching is optional and requires its own consent. When enabled, OpenAI processes the message and relevant account context needed for that request, which may include profile, nutrition, workout, weight and wearable information. Lab and medication records are excluded from the current coaching context. If you choose an available voice or image-analysis feature, the app identifies the processing needed for that feature. Body-outcome image generation is not currently available; enabling it will require separate permission before progress photos are sent to an image provider. Avoid including unrelated sensitive information in messages.

Private records and community sharing

Your journal, health reports and uploads are not automatically published to the community or made available to other members. Where sharing is available, you choose the supported information and audience before sharing. Public profile or challenge participation can make the selected information visible to the relevant community. Private friend groups and individual sharing may not yet be available. You may withdraw future sharing, but people who already saw shared information may have retained a copy. Submitting enrollment documents does not authorize community sharing.

Service providers and other disclosures

Cloudflare provides hosting, database, file-storage and security infrastructure. OpenAI processes requests for enabled AI features as described above. Login and wearable providers process information under their own policies. Authorized service providers and personnel may access information when necessary to operate, secure or support the service; private-by-default does not mean infrastructure administrators can never access it. We may disclose information when legally required, to protect rights or safety, or as part of a business transfer subject to applicable privacy obligations. We do not grant advertisers access to your health records.

Retention, access and deletion

We retain account and journal information while needed to provide the service and meet applicable security, dispute-resolution and legal obligations. Deleting an item from the journal can hide it without immediately erasing stored files, historical records or backups. Contact us to request access, correction, export, account closure or permanent deletion. We may verify your identity before acting and explain any legally required retention. Withdrawal of AI consent stops future consent-dependent processing; it does not reverse processing already completed. Privacy rights and response periods depend on applicable law.

Security, storage and children

We use access controls and other technical safeguards to protect information, but no system can guarantee absolute security. Providers may process information in the United States or other countries where they operate. Utopia is intended for adults 18 and older. We do not knowingly enroll children. If you believe a child has provided information, contact us. We will provide notices of security incidents when required by applicable law.

Cookies and policy changes

Authentication and security features may use cookies or local storage. The public policy pages do not include advertising trackers. We may update this policy as the service changes, show a revised date, and provide additional notice or obtain consent when required. A policy update does not silently authorize a new use of health information that requires your permission.