1. Introduction
Off Software Foundry LLC is committed to protecting your personal information when you use our website, applications, and related services (the “Service”).
2. Information We Collect
Information you provide:
- Browser tab data and URLs saved through the Service
- Communications you choose to send, such as support requests or feedback, which may include your email address
- Answers you choose to submit to optional in-app research questions, such as how you first heard about Cubby
- Your email address if you choose to volunteer for a few research questions by email
- Diagnostic reports you choose to send, which may include the app version and build, device model and operating system, locale, available disk space, selected AI backend, recent app activity, site hostnames, and crash or hang diagnostics. These reports do not include full URLs, page paths or query strings, page contents, saved tab titles, tags, or cluster names.
Information collected automatically:
- Device information (type, operating system, browser)
- Usage patterns (features accessed, interactions with the Service)
- Log information (IP address, access times, pages viewed)
Website analytics: This website uses PostHog to count visits and see which pages are read. It runs without cookies: nothing is stored in your browser, and no data is kept in local or session storage. Your IP address is used only to generate an anonymous identifier that rotates daily and is never stored, so we cannot determine your location or recognize you across days.
In-app research: Optional research answers are counted in daily totals by a dedicated AWS collector. Each research event uses a random, one-use delivery token for retry protection, rather than an analytics or installation identifier. The request body does not include an email address, app or device details, or a session identifier. The collector does not store the individual answer, request IP address, or user-agent information; access logging for this endpoint is disabled. Only completed-day totals are sent to PostHog, using a shared system identifier, an IP placeholder, and disabled person-profile processing and location enrichment. We do not try to identify who submitted an answer or connect the totals to other user data. If you volunteer your email address, we store it separately using Amazon Web Services (AWS) and send a private notification to our research inbox. We do not attach your survey answer or analytics identifier to that contact record or notification, and we do not send your email address to PostHog as part of this feature.
3. How We Use Your Information
We use the information we collect to provide and improve the Service, process browser tabs with AI, respond to inquiries, analyze usage trends, maintain subscriptions and app access, and prevent abuse or fraud.
Optional research answers help us understand how people discover and use Cubby and guide improvements. A volunteered email address is used to follow up about your experience. Permission for research follow-up does not enroll you in a newsletter.
4. AI Processing
Your tab data may be processed by AI systems to provide these features. We process this data solely to deliver the Service to you and do not use it to train general-purpose AI models.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share it with service providers, when legally required, to protect safety or rights, and in connection with a business transfer.
6. Data Security
We implement reasonable technical and organizational measures to protect your personal information, though no method of transmission or storage is completely secure.
7. Data Retention
Cubby does not currently have user accounts. Saved tab data is stored by the app for as long as needed to provide the Service or until you remove it.
Support communications and diagnostic reports you choose to attach are retained only as reasonably necessary to respond to your request, investigate the issue, maintain support history, and meet legal or security obligations.
Pending research events are retained on your device for delivery retries and are excluded from device backups. They expire after seven days and are removed when the app next processes its delivery queue. The collector keeps only daily counters and hashes of one-use delivery tokens. Token hashes become eligible for automatic deletion after 14 days; infrastructure deletion may take additional time. Daily totals may be kept while useful for product research, and cannot be used to retrieve an individual answer.
Research contact records become eligible for automatic deletion 30 days after the latest accepted submission or email correction. Infrastructure deletion may take additional time. This does not automatically delete copies of notifications or correspondence from our research inbox; we retain those only as reasonably necessary for the research conversation and any legal or security obligations.
8. Your Rights
Depending on your location, you may access, correct, delete, restrict, or port your personal data. To exercise these rights, contact nate@offfoundry.com.
You can ask us to delete your research contact request and related inbox copies, or tell us you no longer want research follow-up, using the same contact address.
9. Children's Privacy
The Service is not designed for anyone under 13, and we do not knowingly collect data from this age group.
10. Third-Party Links
We are not responsible for the privacy practices of external websites and encourage you to review their policies.
11. Changes to This Policy
We may update this policy from time to time, with notice provided by posting the update on our website.
12. Contact Us
Questions about this policy can be directed to nate@offfoundry.com.