Privacy policy for the Opsy app.
The short version. Your journal lives on your phone, encrypted. To ask you the next question, the app sends the conversation so far to our server in the EU, where our AI provider turns it into one follow-up and keeps nothing. We do not use ads, trackers or third-party analytics, we never sell data, and you never have to give us your name. Anything we keep on our server, we keep only because you said yes to it, and you can delete it from the app.
Who is responsible
OPSY B.V., Ellecuylgaard 66 C 23, 6227 EB Maastricht, the Netherlands (KvK 42116503), is the controller for the personal data described here. For anything about your data, write to steven@psychedelic.science.
What stays on your device
Your entries, check-in answers and the conversations behind them are stored on your phone, encrypted, under a random ID that the app creates. We do not ask for your name, email address or phone number to use the app. "Erase everything" on the Data screen deletes all of it from the device at once. Because the record is on your device, deleting the app also deletes it, unless you made an encrypted backup file yourself.
What reaches our server, and why
Follow-up questions
While you write an entry, the conversation so far is sent over an encrypted connection to OPSY's server in Germany (Hetzner) and from there to our AI provider Scaleway (Paris, France), which generates the next question. Scaleway processes it only in that moment: it does not keep it, does not use it to train any model, and it stays in the EU. If our EU servers are unavailable, the plain EU service takes over; your words are not sent anywhere else. Only if you choose Claude yourself, in the app's model settings, does Anthropic generate the follow-up questions instead, with identifying details removed first. Anthropic processes that text under its commercial terms, which do not allow training on it, and deletes it after a limited retention period. You can switch back at any time.
Voice answers
If you choose to answer by voice, the recording is sent to our server and turned into text by Scaleway in the EU. The audio is not kept, unless you separately agree to "keep my voice notes". Saved voice notes are stored on OPSY's server in Germany for the testing phase and never longer than twelve months, and you can delete them at any time with "Delete my voice notes" on the Data screen. The app only uses the microphone when you tap it.
Copies of your entries, only with your agreement
Some tools ask for this as part of starting them. The Daily journal and Log an experience say, before you begin, that a copy of your conversations and the answers you tap goes to the Opsy team and is stored on OPSY's server in Germany, where we read it to make the questions better and for no other purpose. Other tools ask you separately whether we may keep a copy, and saying no changes nothing about the tool. You can have a copy deleted at any time from the privacy section of the app, and we keep it until you do. Copies kept under the separate question are deleted when the testing phase ends, and never kept longer than twelve months.
The tester program, only if you join it
While Opsy is being tested, the app may invite you to join its tester program. Joining is optional, and saying no changes nothing about how the app works. If you join, the app sends a copy of what happens in it to OPSY's server in Germany, so we can find what is confusing, broken or missing and fix it. That copy includes everything you write or say to Opsy and everything Opsy answers, including every question and answer in interviews (voice is sent as the text it was turned into, never as audio), your answers to the short profile questions, the screens you open and the buttons you tap, error messages and how long things take, and your phone's model, operating system, screen size, language and app version. If you type a name or nickname when you join, we store that too. It is linked to a random tester code, not to an advertising ID, and no outside analytics service is involved. Only the OPSY team can read it. When we use an AI model to help us analyze tester data, we send it summaries and counts, not your conversations. To stop, tap "Leave the tester program" on the About screen: the copy stops at once and everything we kept under your tester code is deleted.
Research, only if you choose it
Nothing you write is shared for research or publication unless you choose it, scope by scope, after an entry is finished. You can say yes to some scopes and no to others, and change your mind later.
Messages to us
If you write to us from inside the app, your message and a random thread code are stored on our server so we can reply. We cannot see your journal unless you choose to attach part of it.
Research library questions
Questions you type in the research library are sent to our server and answered with the help of Anthropic's Claude, with citations to published research. Your own records are never added to that request. Please do not put personal details in these questions.
Consent records
When you agree to a study or to keeping a copy, our server stores which notice you agreed to, its version and when, so we can show what you agreed to. It contains nothing you wrote.
Usage counts
When you start or finish an entry, the app sends a few counts to our server so we can see whether the interviewer works: which tool, how many turns, how long it took, and whether a support message was shown. These counts never contain anything you wrote, and they are not linked to you.
Technical logs
Like any web service, our server briefly records technical data such as IP addresses and request times to keep the service running and to stop abuse. We do not use these logs to profile you.
What we never do
- No advertising, no tracking across apps or websites, no third-party analytics or crash-reporting services.
- No selling or renting of data, to anyone.
- No use of your entries to train AI models.
- No medical diagnosis or treatment. Opsy is a journal and research tool, not a medical device.
Legal basis
Entries can include information about your health, which is special-category data under the GDPR. We process it on the basis of your explicit consent (Article 6(1)(a) and Article 9(2)(a) GDPR), which you give inside the app before you start, and which you can withdraw at any time. Technical logs are processed on the basis of our legitimate interest in running a secure service (Article 6(1)(f) GDPR).
Who processes data for us
| Company | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting of OPSY's servers | Germany |
| Scaleway SAS | Generating follow-up questions, turning voice into text | France |
| Anthropic PBC | Follow-up questions, only if you choose Claude; research library answers | United States |
Each works under a data processing agreement and only on our instructions. Transfers to Anthropic in the United States are covered by the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.
How long we keep things
- On your device: until you erase it or delete the app.
- Follow-up questions and voice transcription: not kept by our AI provider after the answer is generated.
- Copies of entries from the Daily journal and Log an experience: until you delete them in the app or ask us to.
- Saved voice notes, and copies kept under the separate question: until the testing phase ends, at most twelve months, or until you delete them.
- Tester program data: until the testing phase ends, and never longer than twelve months from the day it was sent. Leaving the tester program deletes it at once.
- Messages to us: until the conversation is finished and no longer needed.
Your rights
You can ask for access to, correction of, or deletion of your data, ask us to restrict or stop processing it, ask for a copy in a portable format, and withdraw your consent at any time. Most of this you can do yourself in the app (export and erase on the Data screen). For anything else, write to steven@psychedelic.science; include the code the app shows for a voice note, conversation copy, message thread or tester program, because that code is the only way we can find it. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Age
Opsy is for adults. You must be 18 or older to use it.
Changes
If this policy changes, we publish a new version here with a new date. Changes to what you consented to inside the app always come as a new, versioned consent notice that you can accept or decline; we never edit a consent you already gave.