Account data: Email address and display name (managed via AWS Cognito) so we can sign you in and address you like a human.

App content: Brain dumps, tasks, journal entries, mood check-ins, and relief sessions — everything you create inside the app.

Device & usage data: Anonymous analytics events (screen views, feature usage counts) sent in batches. We use Sentry for error tracking, which may include device type, OS version, and crash details.

Push notification tokens: If you enable notifications, we store the push token your device gives us so we can deliver reminders.

Your data is stored in PostgreSQL on Railway (cloud-hosted, encrypted at rest). Media files live in Cloudflare R2. All traffic flows over HTTPS.

Your content is stored locally on your device first (offline-first architecture) and synced to our servers when connectivity is available.

We keep your data as long as your account is active. Deleted accounts are permanently purged within 30 days. Deactivated accounts retain data but stop syncing. Push notification tokens are automatically removed when they become invalid.

NeurospicyOS is not intended for children under 13. We do not knowingly collect data from children.

We may update this policy and will notify you via the app or email. Continued use after changes constitutes acceptance.

Questions? Email hello@neurospicyos.com.