Privacy Policy

This Privacy Policy explains how Ozzyapp (“we”, “us”, “our”) collects, uses, stores, and shares information when you use the Ozzyapp mobile application and related services at tryozzy.xyz (collectively, the “Service”).

Ozzyapp is operated by Soham Goswami, an individual developer based in India.

General contact: soham.sg@gmail.com. Privacy requests: soham.sg@gmail.com.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2.1 Information you provide

• Account information: email address, password (stored securely by our auth provider), display name, profile photo.
• Profile & business card: job title, company, phone number, website, social links, address, onboarding preferences (e.g. role, goals).
• Contact & CRM data: names, emails, phone numbers, addresses, employers, notes, tags, relationship details, and other information you enter or import about your contacts.
• Interactions & follow-ups: logs, reminders, notes, and scheduling details you create.
• Scheduling / bookings: when you use scheduling, we collect invitee names, emails, time zones, and optional notes.
• Communications: messages you send us (e.g. support email).

2.2 Information from integrations (with your permission)

• Google Sign-In & Google Contacts: basic profile (name, email, photo) and contacts you choose to import (readonly scope).
• LinkedIn Sign-In: basic profile via OpenID Connect (name, email, photo). LinkedIn connections are imported only if you upload a LinkedIn data export (CSV) yourself.
• Device contacts: contacts you explicitly choose to import from your phone.
• Google Calendar: calendar data needed for scheduling (when you connect it).

2.3 Information collected automatically

• Usage & analytics: app events such as screens viewed, feature usage, and success/failure buckets. We do not intentionally send raw contact names, emails, phone numbers, note text, or passwords to analytics. See Section 6.
• Device & app data: device type, OS version, app version, language, and general diagnostic information.
• AI usage metadata: task type, token counts, latency, and error codes for cloud AI requests (not full conversation storage unless required for the feature).

2.4 Information from device permissions

With your consent, we may access:

• Contacts — to import into Ozzyapp
• Camera — to scan business cards
• Microphone / speech recognition — for voice input
• Notifications — for reminders and follow-ups

You can revoke permissions in your device settings; some features may stop working.

We use information to:

• Provide, maintain, and improve the Service
• Authenticate you and manage your account
• Store and sync your contacts data
• Run AI features
• Show reminders and notifications
• Analyze aggregated usage to improve the product
• Enforce our Terms, prevent abuse, and comply with law
• Process premium subscriptions via payment providers

We do not sell your personal information.

Where GDPR applies, we rely on:

Cloud AI (Premium): For premium users, selected prompts and redacted contact context are sent to our server, then to a third-party AI provider. Before sending:

• Email addresses and phone numbers in context are replaced with hashed tokens
• Other contacts mentioned in notes may be replaced with anonymous tokens

Full unredacted contacts data is not sent to the AI provider by design. AI outputs may be inaccurate; do not solely rely on them as professional advice. Personal discretion is advised.

We use PostHog for product analytics. We configure the app to avoid sending sensitive fields (names, emails, phones, note text, search queries, tokens). Events may include internal UUIDs and coarse metadata (e.g. screen name, success/fail).

You may request information about analytics or opt out where applicable by contacting us at soham.sg@gmail.com.

We share information only as needed:

We require service providers to handle data consistent with this Policy and applicable law.

We operate from India and use providers that may process data in India, the United States, the European Union, or other countries. Where required, we rely on appropriate safeguards (e.g. standard contractual clauses, provider certifications, or your consent).

• Account & CRM data: kept while your account is active.
• Deleted contacts: removed from active use; backups may persist for a limited period.
• Analytics: retained per PostHog settings (typically months, not indefinitely).
• AI usage logs: retained for operational and billing purposes, then deleted or aggregated.

After account deletion, we delete or anonymize personal data within 30 days, except where law requires longer retention.

Depending on where you live, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data / account
• Export your data (portability)
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Opt out of sale/sharing (we do not sell data; California residents may still have related rights)

India (DPDP Act): You may contact us to exercise rights as a Data Principal, including correction, erasure, and grievance redressal.

How to exercise rights: Email soham.sg@gmail.com with subject "Privacy Request". We may verify your identity. We respond within 30 days (or as required by law).

You may request deletion of your account and associated data by emailing soham.sg@gmail.com or via in-app settings (when available). Deletion is irreversible and removes your contacts, notes, and profile from our systems, subject to legal retention exceptions.

The Service is not intended for users under 16 (or 13 where local law allows with parental consent). We do not knowingly collect data from children. Contact us if you believe a child has provided data.

We use industry-standard measures including encrypted connections (HTTPS/TLS), secure token storage, row-level database security, and access controls. No method is 100% secure; use a strong password and protect your device.

The Service may link to third-party sites or use third-party APIs (Google, LinkedIn, etc.). Their privacy practices are governed by their own policies. We are not responsible for third-party services you choose to connect.

We may update this Policy. We will post the new version at tryozzy.xyz/privacy and update the "Last updated" date. Material changes may be notified in-app or by email. Continued use after changes means acceptance.

Data Fiduciary / Operator: Soham Goswami

Email: soham.sg@gmail.com

Address: Bengaluru, Karnataka, India

For privacy questions or complaints, contact us at the email above.