Privacy Policy

Effective date: 21 April 2026

1. Data Controller

Kularion FZCO ("we", "us", "our"), Sharjah, UAE, operates Oshy, a hydration tracking application. We are the data controller for the personal data described in this policy.

2. Information We Collect

On the Website (oshy.app)

When you join our waitlist or submit a contact form, we collect the information you provide — typically your name and email address — via Tally, our form provider. The website uses Vercel Analytics to measure aggregate traffic (page views, referrers, device category); this data is not linked to your identity.

In the Oshy iOS App

Oshy stores your personal data on your device. The information you enter — your weight, age, biological sex, activity level, life-stage inputs (pregnancy, breastfeeding), hydration logs, custom containers, and settings — is not transmitted to our servers, and we do not operate a backend that holds your account data.

The app does make the following network requests:

• To Apple, to validate your subscription receipt when you purchase or restore Oshy Premium, and to schedule local push notifications through Apple's notification service. Apple's privacy practices govern this data; see Apple's privacy policy.
• To Apple iCloud, if you have iOS device backups enabled and the app's data is included in your Apple-managed backup. This is controlled entirely by your device settings.
• To PostHog, to send anonymous product-analytics events — for example, which screens are viewed and which features are used, along with your app version, device model, and iOS version — so we can understand how Oshy is used in aggregate and improve it. PostHog assigns a randomly generated anonymous identifier that we do not link to your name, email, or the health-lifestyle data you enter in the app.
• To Sentry, to send crash and error diagnostics — including stack traces, device model, iOS version, app version, and breadcrumbs describing your recent interactions in the app immediately before an error — so we can detect and fix bugs. Sentry does not receive your name, email, or the specific values you log in the app.

Oshy does not collect location data, contacts, advertising identifiers (IDFA), or any personal information beyond what is described above.

In-App Purchases

Subscription and Lifetime purchases are processed entirely by Apple. We receive a transaction record from Apple indicating your subscription status, but we do not receive your payment card details, your name, or your email address. Apple handles all billing, renewals, and refund requests.

Future Features

If and when Oshy integrates with Apple Health (HealthKit) or adds cross-device sync via Apple iCloud (CloudKit), this policy will be updated before those features are released. HealthKit data, if authorized by you, stays within Apple's secure framework and is not sent to our servers. CloudKit data, if enabled, is stored in your personal iCloud container and is accessible only to you.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent — when you voluntarily join our waitlist or submit a contact form
• Legitimate interest — to improve the app through analytics and ensure stability through crash reporting
• Contract performance — to provide the Oshy service when you use the app

4. How We Use Your Information

• Website: to respond to waitlist sign-ups and contact messages, and to understand aggregate site traffic so we can improve the website.
• App: to calculate your personalized hydration target from the health-lifestyle inputs you provide, and to display your logs, streaks, and Oshy's reactions locally on your device.
• Purchases: to verify your active subscription or Lifetime status and unlock Oshy Premium features on your device.
• Diagnostics: to understand in aggregate how Oshy is used, and to detect, reproduce, and fix crashes and bugs.

We do not sell your personal data. We do not share your personal data with advertisers. We do not profile you for advertising purposes.

5. Third-Party Services

The Oshy iOS app relies on Apple's own frameworks for most functionality (StoreKit for purchases, UserNotifications for local reminders, and in future releases HealthKit and CloudKit). It additionally uses the following third-party services:

• PostHog — anonymous product analytics to help us understand how Oshy is used in aggregate and improve it.
• Sentry — crash and error reporting to help us detect and fix bugs.

The Oshy website (oshy.app) uses the following third-party services:

• Tally — form collection (waitlist and contact).
• Vercel — website hosting and privacy-respecting aggregate web analytics.

Each service acts as a data processor and has its own privacy policy. We encourage you to review them.

6. Data Retention

• App data is stored on your device and is retained until you delete the app or clear its data from iOS Settings. You can reset all app data from within Oshy (Settings → Reset).
• App analytics and crash data is retained in PostHog and Sentry for up to 12 months, and is not linked to your name, email, or the personal data you enter in the app.
• Waitlist and contact data is retained until you unsubscribe, until the waitlist closes, or until you ask us to delete it.
• Website analytics data is retained in aggregate form for up to 12 months and is not linked to individual identities.

7. Your Rights

Under applicable data protection laws (including the GDPR, where it applies), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing based on legitimate interest
• Request a copy of your data in a portable format
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with a supervisory authority

To exercise these rights, email us at legal@oshy.app.

8. International Transfers

Your data may be processed by third-party services located outside your country. Where applicable, we ensure appropriate safeguards are in place.

9. Children's Privacy

Oshy is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

11. Contact Us

Kularion FZCO, Sharjah, UAE
For privacy inquiries, email legal@oshy.app.

Changelog

• 21 April 2026 — Replaced Firebase with Sentry for crash and error reporting; retained PostHog for anonymous product analytics. Rewrote §2 (Information We Collect) to separate website data from app data, to describe the in-app purchase flow, and to spell out exactly what PostHog and Sentry receive and do not receive. Rewrote §4 (How We Use Your Information), §5 (Third-Party Services), and §6 (Data Retention). Lowered the minimum age in §9 (Children's Privacy) from 16 to 13 to align with the Terms and Apple's App Store minimum for non-kids-category apps.
• 20 March 2026 — Initial publication.