Legal

Privacy Policy

Last updated: July 14, 2026

Onzy ("we," "us," or "our") is operated by DryDev Professional Services LLC. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service at onzy.app and our mobile applications.

1. Information We Collect

Account information: When you sign up, we collect your email address, password (hashed — never stored in plain text), and date of birth (for COPPA age verification).

Profile information: Your display name, avatar, and any profile details you choose to provide.

Usage data: Task data, streak counts, coach check-in entries, broadcast history, and Spotter connections you create within the app.

Coach memory & behavioral profile: To make the AI Coach feel personal, Onzy builds and stores a small, evolving profile of you from how you use the app — things the Coach has "noticed" about you (your patterns and struggles), the strategies and nudges that have worked for you, your preferred tone, and your typical productive times of day. It is distilled over time from your tasks, coach check-ins, conversations, and which nudges you act on. This profile is private to you, is never sold or shared, and is never used to train any AI model. You can view, edit, delete, or pause it at any time — see Your Coach Memory Rights below.

Device and technical data: Browser type, operating system, IP address, and app version, collected automatically for security and performance monitoring.

Communications: If you contact us for support, we retain that correspondence.

2. How We Use Your Information

We do not sell your personal information to third parties. We do not use your data to train AI models.

3. Spotter Data Sharing

Onzy is a social accountability app. When you connect with a Spotter, that person can see:

Your Spotters cannot see your individual task content, coach check-in notes, or billing information.

4. AI Features

Coach and AI Day Plan features send prompts to third-party AI providers (Google Gemini, and Anthropic's Claude for some coaching text). We do not include your name or email. To give useful coaching, though, these prompts can include what you've told Onzy and what it has learned about how you work — your tasks and notes, your check-in and vibe entries, and a short learned profile of your patterns and preferences. Spoken (voice) coach replies are generated by Google and AWS — Claude is used for text only. Neither provider trains its models on your data per their API terms. AI provider data handling is subject to their own privacy policies.

To personalize coaching, Onzy also builds a small, private behavioral profile of you — the patterns it has noticed, strategies that have worked, your preferred tone, and your productive times (see Your Coach Memory Rights). This profiling happens only to power your own coaching experience — it is never used for advertising, never sold, and never used to train an AI model. You can view, edit, delete, or pause it at any time from the Coach memory panel in the app.

5. Your Coach Memory Rights (View, Edit, Delete, Pause)

Because the AI Coach builds a private behavioral profile of you (described in Section 1), you have direct, self-service control over it inside the app — no email or waiting required:

You can also download your full Coach memory as part of the "Download my data" export, or delete it entirely by deleting your account. For help, email privacy@onzy.app.

6. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted in the United States. We use row-level security to ensure users can only access their own data. All data is encrypted in transit (TLS) and at rest. We support multi-factor authentication (TOTP) for additional account security.

7. Data Retention and Deletion

You may delete your account at any time from within the app (Settings → Account → Delete Account). Account deletion soft-deletes your record for 30 days (allowing recovery), then permanently purges all personal data. You may also request data export or deletion by emailing privacy@onzy.app.

8. Children's Privacy (COPPA)

Onzy is not directed to children under 13. We collect date of birth at signup and block registration for users under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. Contact privacy@onzy.app if you believe this has occurred.

9. Cookies and Tracking

We use session cookies for authentication. We use analytics tools (PostHog and Microsoft Clarity) to understand product usage — these tools collect anonymized behavioral data only. We do not use advertising cookies or cross-site tracking.

Session recording is opt-in. Session replays are off by default. Onzy uses two anonymous session-replay tools — PostHog and Microsoft Clarity — to spot bugs and improve the app. They are disabled until you choose to turn them on. The first time you open the app we ask once whether to allow them; nothing records unless you choose "Allow." Everything you type is masked and never captured. You can change your choice at any time in Settings → Privacy → Session recording.

10. Third-Party Services

11. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to: access your data, correct inaccurate data, request deletion, restrict processing, or data portability. To exercise these rights, email privacy@onzy.app. We will respond within 30 days.

California residents (CCPA / CPRA) — Do Not Sell or Share My Personal Information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months. You also have the rights listed above (know, access, correct, delete, and portability) and the right not to receive discriminatory treatment for exercising them. To make any of these requests — including opting out — email privacy@onzy.app and we will respond within the timeframe required by law.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notice at least 14 days before the change takes effect. Continued use of Onzy after the effective date constitutes acceptance.

13. Contact

Questions about this policy: privacy@onzy.app
DryDev Professional Services LLC
United States