What information does Onzy collect?

Onzy collects account information (email, display name, password hash), profile data, task data, vibe check entries, Spotters connections, broadcasts, subscription data, general usage analytics, and a private AI Coach memory profile (patterns it has noticed, strategies that worked, preferred tone, and productive times). You can view, edit, delete, or pause the Coach profile at any time in the app.

Does the Onzy AI Coach build a profile of me, and can I control it?

Yes. To personalize coaching, Onzy builds a small, private behavioral profile of you — patterns it has noticed, strategies that have worked, your preferred tone, and your productive times — distilled from your tasks, vibe checks, and coach conversations. This profile is private to you, never sold or shared, and never used to train any AI model. You can view, edit, delete, or pause it at any time from the Coach memory panel in the app.

Does Onzy sell my personal information?

No. Onzy does not sell your personal information. Data is shared only with third-party service providers required to operate the app (Supabase, Vercel, Stripe, Google Gemini API, Anthropic (Claude) API, Firebase, Deepgram, AWS Polly, PostHog, Microsoft Clarity, Resend, and Sentry).

How can I delete my Onzy account and data?

You can delete your account directly in the app via Profile → Delete Account. Your personal data will be deleted within 30 days, except where retention is required by law.

How do I export my Onzy data?

Use the 'Download my data' button in your Profile for an immediate JSON export, or email privacy@onzy.app for a full export request.

Does Onzy comply with GDPR?

Yes. EEA and UK users have rights under GDPR including access, rectification, erasure, restriction, data portability, and the right to object. Contact privacy@onzy.app to exercise these rights.

🎯 Onzy

Privacy Policy

Effective date: June 26, 2026 · DryDev Solutions

Onzy ("we," "us," or "our") is operated by DryDev Solutions. This Privacy Policy explains how we collect, use, and protect your personal information when you use the Onzy application ("Service"). By using the Service you agree to this policy.

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

Account information — email address, display name, and password (stored as a secure hash by Supabase Auth).
Profile data — display name, Onzy ID, AI coach preference, and subscription tier.
Task data — task titles, categories, priorities, due dates, notes, and completion status.
Vibe check data — mood ratings and optional notes you submit for AI coaching.
Spotters — connections you create with other users (stored by user ID only).
Broadcasts — messages and reactions you send to connected users.
Subscription data — your plan tier, billing status, and Stripe customer ID. We do not store full card numbers; payments are processed by Stripe.
Usage data — server logs, error reports, and general usage analytics collected by Vercel and Supabase.
Voice data — when you use voice capture, your spoken audio is sent to Deepgram to be transcribed into text.
Coach memory & behavioral profile — to make the AI Coach feel personal, Onzy builds and stores a small, evolving profile of you from how you use the app. This includes things the Coach has "noticed" about you (your patterns and struggles), the strategies and nudges that have worked for you, your preferred tone, and your typical productive times of day. It is distilled over time from your tasks, vibe checks, coach conversations, and which nudges you act on. This profile is private to you, is never sold or shared, and is never used to train any AI model. You can view, edit, delete, or pause it at any time — see Your Coach Memory Rights below.

2. How We Use Your Information

To provide, operate, and improve the Onzy Service.
To authenticate your account and keep it secure.
To build and maintain your private Coach memory profile (see Section 1) so the AI Coach can personalize its suggestions, tone, and timing to you. This profiling happens only to power your own coaching experience — it is never used for advertising, never sold, and never used to train an AI model. You can view, edit, delete, or pause it at any time (see Your Coach Memory Rights).
Coach and AI Day Plan features send prompts to third-party AI providers (Google Gemini, and Anthropic's Claude for some coaching text). We do not include your name or email. To give useful coaching, though, these prompts can include what you've told Onzy and what it has learned about how you work — your tasks and notes, your check-in and vibe entries, and a short learned profile of your patterns and preferences. Spoken (voice) coach replies are generated by Google and AWS — Claude is used for text only. Neither provider trains its models on your data per their API terms. AI provider data handling is subject to their own privacy policies.
To process subscription payments through Stripe. Stripe's Privacy Policy governs payment data.
To send push notifications you have opted into (Nudge Time reminders, bud activity).
To communicate with you about your account, updates, and support.

3. Third-Party Services

Onzy relies on the following third-party services, each with their own privacy practices:

Supabase — database, authentication, and real-time infrastructure. Data is stored in us-east-1 (AWS). Supabase Privacy Policy.
Vercel — application hosting and edge functions. Vercel Privacy Policy.
Stripe — payment processing. Onzy does not store your full card details. Stripe Privacy Policy.
Google Gemini API — AI coaching responses. Your vibe check text and task context are sent to Google for processing. Google AI Terms.
Anthropic (Claude) API — AI coaching text generation. For some coach replies, the prompt text (your vibe check input and task context) is sent to Anthropic to generate the response. Anthropic does not use your data to train its models per its API terms. Claude generates text only — it is not used for voice. Anthropic Commercial Terms.
Firebase Cloud Messaging (FCM) — push notification delivery. Firebase Privacy.
Deepgram — speech-to-text transcription for voice input. When you use voice capture, your audio is sent to Deepgram for transcription. Deepgram Privacy Policy.
AWS Polly (Amazon Web Services) — text-to-speech for spoken coach replies. The text of a coach response is sent to AWS to generate audio. AWS Privacy Notice.
PostHog — product analytics. Collects anonymized usage and behavioral events to help us improve the app. PostHog Privacy Policy.
Microsoft Clarity — product analytics, session replay, and heatmaps to help us see how the app is used and improve it. Aggregate analytics, and session replays where available, may be reviewed by authorized Onzy administrators through a restricted, access-logged internal tool to diagnose problems and improve the product. Microsoft Privacy Statement.
Resend — transactional email delivery (account, billing, trial, and notification emails). Resend Privacy Policy.
Sentry — error monitoring and crash reporting. Diagnostic error data may include technical context about your session. Sentry Privacy Policy.

Session recording is opt-in. Session replays are off by default. We use two anonymous session-replay tools — PostHog and Microsoft Clarity — to spot bugs and improve the app. They are disabled until you turn them on. The first time you use Onzy we ask once whether to allow them; nothing records unless you choose "Allow." What you type is masked and never captured, and the text you've written (task names, notes, coach replies, brain-dumps) is masked in the replay. You can change your choice anytime in Settings → Privacy → Session recording; turning it off immediately stops both tools. Your choice is stored only on your device.

4. Data Sharing

We do not sell your personal information. We share data only:

With the third-party services listed above, as required to operate the Service.
With other Onzy users you have explicitly connected with as Spotters.
If required by law, court order, or to protect the rights and safety of Onzy, our users, or the public.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be deleted within 30 days, except where retention is required by law (e.g., billing records may be kept for up to 7 years).

6. Your Coach Memory Rights (View, Edit, Delete, Pause)

Because the AI Coach builds a private behavioral profile of you (described in Section 1), you have direct, self-service control over it inside the app — no email or waiting required:

View — Open the Coach memory panel to see exactly what Onzy has noticed about you, which strategies have worked, the tone it uses, and your typical productive times. Nothing is hidden.
Edit — Correct or reword anything in your profile that is wrong or that you would rather the Coach not act on.
Delete — Clear individual items or wipe your entire Coach memory. Deleted memory is removed and the Coach starts fresh.
Pause — Stop the Coach from learning new things about you at any time. While paused, Onzy keeps coaching you but stops adding to or updating your behavioral profile. You can resume whenever you like.

You can also download your full Coach memory as part of the "Download my data" export, or delete it entirely by deleting your account. For help, email privacy@onzy.app.

7. Your Rights (GDPR — EEA & UK Users)

If you are in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

Right of access (Article 15) — Request a copy of the personal data we hold about you.
Right to rectification (Article 16) — Request correction of inaccurate or incomplete personal data.
Right to erasure (Article 17) — Request deletion of your personal data ("right to be forgotten"). You can also delete your account directly in the app: Profile → Delete Account.
Right to restriction (Article 18) — Request that we limit how we use your data in certain circumstances.
Right to data portability (Article 20) — Receive your personal data in a structured, commonly used, machine-readable format (JSON). Use the "Download my data" button in your Profile to get an immediate export, or contact us for a full export.
Right to object (Article 21) — Object to processing of your personal data for direct marketing.
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, use the self-service tools in your account Profile, or email privacy@onzy.app. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following rights:

Right to Know — You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. Use Profile → Delete Account for self-service deletion.
Right to Correct — You have the right to request correction of inaccurate personal information.
Right to Data Portability — You have the right to obtain a copy of your personal information in a portable format. Use the "Download my data" button in your Profile.
Right to Opt-Out of Sale / Sharing — We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising. There is nothing to opt out of; however, if you believe this has changed, contact us at privacy@onzy.app.
Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, email privacy@onzy.app with subject line "CCPA Request." We respond within 45 days.

Do Not Sell or Share My Personal Information: As stated above, Onzy does not sell or share personal information for cross-context behavioral advertising. If our practices change, this page will be updated and you will be notified.

9. Security

We use industry-standard practices including encrypted connections (HTTPS), row-level security on our database, and hashed passwords. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

10. Children

Onzy is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective date" at the top of this page. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

For privacy-related requests (data export, deletion, GDPR/CCPA rights): privacy@onzy.app.

For general questions about this Privacy Policy: support@onzy.app.