Privacy Policy

Last updated: September 14, 2026

Who We Are

Ozmeva ("we," "our," or "us") operates the AI-powered social practice app at ozmeva.com. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

We collect only what is necessary to run the service:

IP address — used to enforce the 2 free session limit per visitor. Stored in our database (Supabase) keyed to your IP address.
Usage data — how many practice sessions you've started, and whether your account is active. We don't record your conversation content on our servers.
Stripe customer ID — if you subscribe, Stripe assigns you a customer ID (e.g. cus_xxx). We store this in your browser's localStorage and use it to verify your subscription status. We do not store your full payment card details — Stripe handles all payment processing.
Device fingerprint — a browser fingerprint generated by FingerprintJS to help distinguish sessions. Used only for rate limiting alongside your IP address.
Voice audio (temporary) — if you use the voice input feature, your recorded audio is sent to our servers and forwarded to OpenAI's Whisper API for transcription. We do not store the audio. OpenAI may retain it per their own privacy policy.
Analytics (PostHog) — we track anonymous usage events (page views, session starts, paywall views) via PostHog to understand how people use the app. PostHog is configured in EU mode. No personally identifiable information is sent to PostHog.
UTM parameters — if you arrive via a link containing utm_source, utm_medium, or utm_campaign, we store those values in your browser session to attribute signups to marketing campaigns. These are never sent to third parties beyond our analytics provider (PostHog).

Third-Party Services

We use the following third-party providers to deliver the service. Each has its own privacy policy.

Stripe (stripe.com) — payment processing and subscription management.
Supabase (supabase.com) — database for session counts and subscription status.
ElevenLabs (elevenlabs.io) — text-to-speech for AI character voices. Your practice responses are not sent to ElevenLabs.
OpenAI (openai.com) — Whisper speech-to-text (voice input only) and GPT-4 for AI character responses. Conversation turns are sent to OpenAI only for the purpose of generating the next AI response.
Groq (groq.com) — alternative AI inference for character responses.
PostHog (posthog.com) — product analytics (anonymous usage events).
Cloudflare R2 — storage for lesson audio and video assets. No user data is stored in R2.

How We Use Your Data

To enforce the free session limit and detect abuse.
To verify that you have an active subscription before granting unlimited access.
To process payments and manage your subscription via Stripe.
To improve the product using anonymous usage analytics.
We do not sell your data. We do not use your data for advertising profiling. We do not share your data with third parties except the service providers listed above, and only to the extent needed to run the service.

Data Retention

Session count records (IP-keyed) are kept until you contact us to request deletion.
Stripe customer records are retained per Stripe's default policies (typically 7 years for financial compliance). To delete your Stripe data, contact us and we will submit a deletion request on your behalf.
Voice audio is not retained — it is processed in real time and discarded.
Analytics events are retained by PostHog for up to 12 months.

Cookies and localStorage

We use browser localStorage (not cookies) to store your subscription status, lesson progress, and app preferences. This data lives only in your browser and is never sent to our servers unless you explicitly take an action that requires it (e.g. starting a session or cancelling a subscription).

Your Rights

If you are in the EU/EEA or California, you have rights to access, correct, or delete your personal data. To exercise these rights, email privacy@ozmeva.com. We will respond within 30 days.

Children

Ozmeva is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy as the service evolves. Material changes will be noted by updating the "Last updated" date at the top. Continued use of the service after a change constitutes acceptance.

Contact

Privacy questions: privacy@ozmeva.com
General support: support@ozmeva.com