Privacy policy

Your address, and very little else.

This policy covers the website at getosprey.ai, the Osprey waitlist, and the Osprey iPhone app. It explains what we collect, why, who helps us hold it, how long we keep it, and how to get it changed or deleted. The app has its own section, 3.5.

Last updated 8 November 2026 · Effective 7 November 2026

1. Who we are

Osprey is made by Osprey LLC (“Osprey”, “we”, “us”). We are the data controller for the website and the waitlist. You can reach us at [email protected]. A person reads every email.

2. The short version

• If you only read the site, we collect nothing that identifies you. Cloudflare counts page views without cookies.
• If you join the waitlist, we store your email address, the link you came from, a hashed version of your IP address, your browser's user-agent string, and timestamps.
• We use that to send you one confirmation email, then news about Osprey. Nothing else.
• We do not sell, rent, trade or share the list for anyone else's marketing, and we do not use advertising or cross-site tracking.
• You can get a copy of your data, correct it, or have it deleted by emailing us. Unsubscribe links are in every email.
• The app works without an account and shows no ads. Unless you choose to sign in with Apple, your sessions, settings and your bird's name stay on your phone. It sends a few anonymous usage counts, which you can turn off, and whatever you choose to write in the feedback form.

3. What we collect, and why

3.1 When you visit the site

Page-view counts	Cloudflare Web Analytics records that a page was viewed, the page path, the referring site, country, browser and device type. It does this without cookies, local storage or fingerprinting, does not record your IP address in the analytics, and does not follow you across other sites. We use it to see how many people reach the sign-up form and from where.
Server and security logs	Cloudflare, which hosts the site, keeps short-lived edge logs that include IP addresses and request details, as any web host does, to serve pages and block attacks. We do not use these logs to identify visitors.
The link you arrived from	If you came from a link we shared (for example one ending in ?src=reddit), the page keeps that label in your browser's session storage for the length of your visit, so a sign-up further down the page is labelled the same way. It is removed when you close the tab.
Fonts	The two typefaces are loaded from Google Fonts, so your browser requests them from Google and Google sees your IP address and browser details when it does. Google says it does not use these requests for advertising. We may self-host the fonts later to remove this.

3.2 When you join the waitlist

Email address	To send the confirmation link and, once confirmed, news about Osprey. This is the only thing we ask you to type.
Source	A short label for how you found the page, such as landing or the name of a link we shared. Taken from the link, not from tracking.
Hashed IP address	Your IP address is run through a one-way hash with a secret salt before it is stored, and the plain address is never written to the database. We use the hash only to limit sign-ups from one network (at most a handful per hour) and to spot automated abuse. We cannot turn it back into your IP address.
User-agent string	The text your browser sends to describe itself (browser and operating system), to help spot automated sign-ups.
Timestamps and confirmation token	When you signed up, when you clicked the confirmation link, and a random one-time token used by that link.
Turnstile result	Before accepting a sign-up we ask Cloudflare Turnstile whether the request looks like it came from a person. Turnstile may inspect browser signals to decide; we receive only a pass or fail token, never the signals. See Cloudflare's privacy policy for what Turnstile processes.

We do not ask for your name, age, location or anything about your work or studies. If you reply to one of our emails, we keep that email like any correspondence.

3.3 Emails we send

One email to confirm your address (double opt-in). If you never click the link, we send nothing more and delete the row after 90 days. After confirmation: the launch announcement, early-access invitations, and now and then a short look behind the build. Our emails are sent through Resend, which may record whether an email was opened (a tiny image loaded when you view it) and which links in it were clicked. We use this only to see which messages and links the waitlist finds useful; it is never shared or used for advertising. To avoid the open signal, read our emails with remote images turned off; links still work. Every email after the confirmation has an unsubscribe link, and replying “unsubscribe” works too.

3.4 If you take part in a research interview

Before launch we talk to a small number of people about how they focus and which apps they use. If you volunteer, we collect what you share with us on the call, your name or handle and contact address for scheduling, and, only if you say yes at the start of the call, a recording. We keep notes and recordings for up to 12 months, use them only to decide what to build, never publish them, and quote you only anonymously. You can stop the call, decline the recording, or ask us to delete your notes and recording at any time by emailing us. Thank-you gift cards are sent by email and recorded only as "sent" against your name. The sign-up form for interviews may be hosted by a form provider (for example Tally or Google Forms) and scheduling by Calendly or Cal.com; each handles your details under its own policy until we copy them into our notes.

3.5 The Osprey app

The app works without an account, shows no ads, and does not track you across other apps or websites. It never asks for your name, contacts, photos or location, and it never reads your phone's advertising identifier.

On your phone only	Your focus sessions (length, start and end times, the minutes counted, and the task word you typed, if any), your settings, and the name you gave the bird. These are stored in the app's own storage on your phone and are never sent to us or anyone else, except for the counts and the things you choose to send that are listed below. Deleting the app deletes them.
A random install id	On first launch the app makes up a random id, such as 3f1c2a9e-…. It is not your name, not tied to an account, and not taken from your phone's hardware or advertising identifier. It lets us count how many different phones use the app, and it is sent with the usage events and with feedback. If you delete and reinstall the app, you get a new one.
Anonymous usage events	To learn which parts of the app help and where people get stuck, the app sends a small number of events to PostHog, our product analytics provider. These are the only events, and the only details each one carries: app_opened session_started: the session length in minutes, and whether a task word was set (yes or no, never the word itself) session_paused, session_resumed session_ended_early: the minutes counted session_completed: the minutes counted fly_again (you started the next session from the landed screen) stats_viewed: which period you looked at (for example week or month) feedback_sent: whether it was the feedback form or the one-question survey sign_in, sign_out: you signed in with Apple, or signed out or deleted your account sync_conflict_resolved: two of your devices saved at the same moment and the app merged them The three account events carry no details at all. They are sent with the same random install id as the others, never with your account id or email address, and PostHog is never told who is signed in. Each event also carries the random install id, the time, and the basic context PostHog's software adds: the app version, the phone model, the iOS version, the phone's language and time zone. Events never include your task words, the bird's name, or anything you type. We have turned off PostHog's session recording, automatic screen and tap capture, and location lookup from your IP address, and we ask PostHog to discard IP addresses. PostHog stores the events in the United States. To opt out, open the app's Settings and turn off Share anonymous usage. The app then sends no more events, from that moment on. It is on by default.
The feedback form	Settings and the screen you see after a session have a Send feedback button. The form asks what you were doing, what was confusing, and anything else you want to tell us, and offers a box for your email address if you would like a reply. When you press Send, the app sends what you wrote, your email address if you gave one, the random install id, the app version and whether you are on iPhone or another platform. It is stored in our database at Supabase and emailed to [email protected] through Resend, so that a person reads it. We use your email address only to reply to that message; it is not added to the waitlist or any mailing list. We do not combine feedback with the usage events to work out who you are. If your phone is offline, the note stays on your phone as a draft until you send it.
The one-question survey	After your 3rd completed session the app asks once what would make you use it again tomorrow (you can type an answer or skip), and after your 10th it asks once how you would feel if Osprey disappeared (four choices, or skip). An answer is sent the same way as the feedback form, with the random install id, the app version and the platform, and no email address. Skipping sends nothing.
If you sign in	Signing in is optional (Settings, or the offer after your first session) and uses Sign in with Apple only. If you sign in, we receive from Apple a user id and the email address you share, which may be Apple's private relay address if you choose "Hide My Email"; we store that id and address and nothing else about you from Apple. The app then also uploads a copy of your saved data (your session times and lengths, task words, settings including the Share anonymous usage choice, and the bird's name) so it can be kept the same on your other devices. It is stored at Supabase in the United States, as one record linked to your account, until you delete your account. Delete it in Settings, Delete account: that removes the record and the account. Signing out keeps the data on your phone and stops syncing. Signing in does not link your usage events to your account, and usage events still never contain task words. Apple's handling of your Apple Account is under Apple's own privacy policy.
Purchases	The app does not take payments today. If it ever offers a purchase, Apple handles the payment and we will describe here, before that version ships, what the app receives.

4. Legal bases (EU, UK and similar laws)

Sending you waitlist emails	Consent. You typed your address and confirmed it. You can withdraw consent at any time by unsubscribing or emailing us, and we will stop.
Rate limiting, bot checks, security logs	Legitimate interests in keeping the waitlist usable and free of abuse, balanced against the minimal data involved (a salted hash, a user-agent string, short-lived logs).
Cookieless analytics	Legitimate interests in knowing whether the page works, using a method that stores nothing on your device and identifies no one.
App usage events	Legitimate interests in learning which parts of the app work, using a random id, a short fixed list of events and no task text. You can object at any time with the Share anonymous usage switch.
App feedback and survey answers	Consent: nothing is sent unless you press Send. Your email address, if you give one, is used only to reply.
Research interviews	Consent for taking part and, separately, for any recording. Withdrawable at any time.
Answering your emails and requests	Legitimate interests, and where relevant our legal obligations to honour your rights.

5. Who helps us hold and process it

We use a small number of companies as processors. Each acts on our instructions and under a data-processing agreement or terms that include one.

Supabase, Inc.	Hosts the waitlist database, the app's feedback and survey answers, the account and synced data of people who sign in to the app, and the small server functions that handle sign-ups, confirmations, counts, feedback and account deletion. Data is stored in the United States. Access to the database requires a server-side key that is never sent to browsers or to the app.
Apple Inc. (Sign in with Apple)	If you choose to sign in, Apple authenticates you and gives the app a user id and, if you allow it, an email address or a private relay address. Apple does this as an independent controller under its own privacy policy; we do not send Apple your focus data.
Resend, Inc.	Delivers our emails from [email protected], including the copy of each app feedback note sent to our own inbox. Resend receives the addresses and the message content in order to send it, and keeps delivery logs for a limited period.
PostHog, Inc.	Receives and stores the app's anonymous usage events described in section 3.5, in its United States cloud.
Cloudflare, Inc.	Hosts the website (Cloudflare Pages), provides DNS, runs Turnstile for the bot check, and runs the cookieless Web Analytics described above.
Google LLC (Google Fonts)	Serves the typefaces, as described in section 3.1.
Hostinger International Ltd.	Provides the [email protected] mailbox where your replies and requests arrive.

We do not share your data with anyone else, except if the law requires it (for example a valid court order), to protect someone's safety, or if Osprey LLC is ever sold or merged, in which case the list would pass to the new owner under this same policy and we would tell you by email first.

We do not sell personal information and have not done so in the past 12 months. We do not share it for cross-context behavioural advertising. (If that ever changes, for example to measure our own ads, we will ask your permission first and say so in this policy.) We do not use it to train AI models.

6. Where your data lives, and international transfers

Osprey LLC is in the United States and our processors store data there. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the United States. We rely on the processors' standard contractual clauses (and, where a processor is certified, the EU-U.S. Data Privacy Framework) to protect it. You can ask us which safeguard applies to a particular processor.

7. How long we keep it

Unconfirmed sign-ups	Deleted automatically 90 days after sign-up.
Confirmed waitlist rows	Kept until you unsubscribe or ask for deletion, until the launch emails have been sent and the waitlist is closed, or at most 24 months after the app launches, whichever is first. Unsubscribed addresses are kept only on a suppression list so we do not email you again, unless you ask us to delete that too.
Rate-limit entries (hashed IPs)	Deleted automatically after 24 hours.
Email delivery logs at Resend	Kept by Resend for its standard retention period, then deleted.
Cloudflare edge logs	Short-lived, per Cloudflare's own retention.
App usage events (PostHog)	Up to 12 months, then deleted automatically.
App feedback and survey answers	12 months from when you sent them, then deleted automatically; sooner on request. The copy in our inbox is deleted on the same schedule.
Account and synced app data	Until you delete your account in the app (Settings, Delete account), which removes the Apple-provided id, email address and synced data from our database straight away; or sooner if you ask us.
Data on your phone	Until you delete the app.
Interview notes and recordings	Up to 12 months, then deleted; sooner on request.
Your emails to us	Kept as long as needed to answer you and keep a record of the request, then deleted.

8. How we protect it

• All traffic to the site, to the sign-up and feedback functions, and from the app to PostHog is encrypted (HTTPS, with HSTS).
• The database is not reachable from browsers. Row-level security is on, and only our server functions, using a secret key, can read or write the list.
• IP addresses are hashed with a secret salt before storage; the plain address is never stored.
• Confirmation links use random single-use tokens.
• Only the founder has access to the list, through authenticated dashboards with two-factor authentication.
• If a breach ever affects your data, we will tell you and any required regulator without undue delay, and within the time the law sets.

No system is perfectly secure, and the companies above run their own security programmes which we rely on but do not control.

9. Your rights and choices

Wherever you live, you can ask us to:

• Tell you whether we hold data about you and give you a copy of it;
• Correct it (for example a mistyped address);
• Delete it;
• Stop emailing you (unsubscribe), or object to or restrict any processing based on legitimate interests;
• Export it in a plain, machine-readable form (it is one row, so this is a short file);
• Withdraw consent at any time, without affecting what was done before.

For the app: if you signed in, you can delete your account and synced data yourself in Settings, Delete account, or ask us. Otherwise, because there is no account, we cannot tell which phone is yours unless you help us. To have feedback deleted, tell us roughly when you sent it and what it said, or the email address you gave. Usage events carry no name or contact detail, so we cannot find yours on request; turning off Share anonymous usage stops new ones, and deleting the app removes the install id that tied them to your phone.

To use any of these, email [email protected] from the address you signed up with, or tell us that address. We will act within 30 days, usually much sooner, and reply to confirm. We will not charge for this and will not treat you differently for asking. If we cannot verify that a request comes from the address's owner, we may ask you to confirm from that address.

We do not make decisions about you by automated means that have legal or similarly significant effects. The Turnstile bot check only decides whether to accept a sign-up request, and you can email us if it wrongly blocks you.

9.1 If you are in the EU, EEA, UK or Switzerland

The rights above correspond to your rights under the GDPR and UK GDPR, including access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You also have the right to lodge a complaint with your local supervisory authority. We would welcome the chance to resolve any concern first.

9.2 If you are in California

Under the CCPA/CPRA you have the right to know what personal information we collect and how we use and share it (this page), to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information. The categories we collect are identifiers (email address, hashed IP, the app's random install id) and internet or other electronic network activity (source label, user-agent, cookieless page counts, the app's usage events), plus the content of feedback you choose to send, for the purposes in section 3, from you directly, from your browser and from the app. Requests can be made by email as above; you may use an authorised agent if they can show your written permission. We respond within 45 days, extendable once by 45 days if needed, and will tell you if so.

9.3 Other U.S. states, Canada, Australia and elsewhere

If your state or country gives you similar rights (for example under the Virginia, Colorado, Connecticut, Texas or Oregon privacy laws, PIPEDA in Canada, or the Australian Privacy Act), the same email address and the same promises apply. We apply the rights above to everyone rather than working out where each person lives.

10. Cookies and similar technologies

This site sets no cookies of its own and loads no advertising, social media or cross-site tracking scripts. The app uses no cookies and no advertising identifiers; what it stores on your phone is described in section 3.5. Specifically:

• Cloudflare Web Analytics uses no cookies and no local storage.
• Turnstile may set a short-lived token in your browser while it runs its check on the sign-up form, and Cloudflare may use a cookie named cf_clearance or similar for security on its network. These are strictly necessary for the form to work and are not used to track you.
• Session storage holds the source label for the length of your visit (section 3.1) and is cleared when you close the tab.

Because we set no optional cookies, there is no cookie banner. Browser “Do Not Track” and Global Privacy Control signals do not change anything here, since there is nothing to opt out of; we honour them in the sense that we already do not track you.

11. Children

The website and waitlist are not directed at children under 13, and we do not knowingly collect data from them. If you are a parent or guardian and believe a child under 13 (or under 16 where that is the local age of consent for online services) has signed up, email us and we will delete the address promptly. The app is not directed at children under 13 either; it has no accounts and collects no name, and if a child sends feedback with an email address, a parent can ask us to delete it.

12. Links to other sites

The site links to Apple (for the App Store, when the app launches) and to our processors' privacy pages. Those sites have their own policies, which we do not control.

13. Changes to this policy

We will update the dates at the top whenever this page changes. If a change matters to you (for example a new purpose for your email address or a new category of data), we will email confirmed waitlist members before it applies to them, and the previous version will be available on request. Continuing to receive our emails after a change you have been told about means the new version applies; you can always unsubscribe instead.

14. Contact

Osprey LLC, Nevada, United States · [email protected] · getosprey.ai. Full postal address available on request. We have not appointed an EU or UK representative because our processing of EU and UK data is occasional and low-risk; if that changes, we will name one here.