Privacy Policy
Last updated: 20 October 2026
Osbert is a personal assistant for life admin, made by WebBuddy LLC. This page explains, in plain words, what Osbert keeps about you and why, who helps us run it, how long things are kept, and how you take your data with you or delete it.
The short version
- Osbert keeps what you give him, so he can help: your chats, memory, documents and reminders.
- You can see, export and delete all of it, at any time.
- Nothing happens outside the app until you approve the exact action.
- Your data is never sold, never used for advertising, and never used to train AI models.
Who we are
Osbert is made and run by WebBuddy LLC, Wyoming, USA. We are responsible for your data under this policy. For anything about your data, write to hey@webbuddy.agency. Our website is heyosbert.com.
Osbert is an AI
You are talking to an AI assistant, not a person. Osbert says so when a conversation starts, and again from time to time. He can be wrong, so check anything important.
What Osbert keeps
- Your account: your email address, the devices you're signed in on, and your settings (name, time zone, region, quiet hours, the morning briefing).
- Your chats: what you write or say to Osbert, his replies, and the files you attach (photos, PDFs and text files). They stay until you delete the chat or your account. Files you attach but never send are deleted after a day.
- Memory: facts, short summaries and instructions Osbert saves so he can help you better, with a log of every change. You can see, edit and delete all of it in Memory, turn memory off, or chat off the record.
- Documents and Life: the documents you ask Osbert to keep (an ID or policy number is encrypted), and the subscriptions, bills, renewals and deliveries you track.
- Reminders and watchers you set up, and the notifications they sent.
- Email, if you connect it: Osbert reads your mail only to do what you ask (search, read, sort what needs you). His access is kept encrypted. He keeps a short list of what needs you (sender, subject, a one-line note), never message bodies, and a log of the emails he sent for you (to whom, subject and time, not the text).
- Calendar and contacts, if you share them from your iPhone: a copy of your events from two days ago to a month ahead, and only favourite contacts, people with a birthday and people Osbert remembers (at most 500). Each sync replaces the copy; you can remove it at any time.
- Location, if you allow it: only your phone's latest location while the app is open, kept for 24 hours. It is never put in a message to the AI; it is used for "near me" and for reminders at a place.
- Voice: what you say becomes chat text; Osbert's servers don't keep recordings. Voice minutes are counted for your monthly allowance.
- The web browser Osbert uses for you: a log of its steps (what it clicked and the page address, without anything after a "?"), never what was typed.
- Ratings: a thumbs up or down on an answer, the reasons you tick and your note. They stay with your chats.
- Conversations you choose to share: with a thumbs-down you can share the conversation so it becomes a test that checks Osbert gets it right next time. Before anyone reads it, names, emails, numbers, places and other personal details are swapped for made-up ones, and only that version is reviewed. Your own words are deleted as soon as it has been reviewed, or after 90 days. Sharing is always off unless you turn it on.
- Problem reports: when you shake your phone or choose Report a problem, what you write, a screenshot of the screen if you choose to include it, and what the app was doing just before (the screens you opened, the features used and any errors, never what you or Osbert said), with the app version and phone model. Kept for 90 days.
- How the app is doing: whether features worked and how long they took (for example, that a photo upload worked in two seconds), never their content, kept for 30 days. And simple counts, such as an approval turned down, a memory change undone or a question asked again, kept for 90 days.
- Usage and safety records: what each AI call cost (for your monthly allowance), safety events (when a message was flagged for crisis support, and your age answer), and an audit log of the actions Osbert took, which holds no message content.
- Push tokens for your iPhone and browsers, so Osbert can notify you.
How we use it
- To run Osbert for you: answer, remember, remind, and do what you approve.
- To keep Osbert safe: age checks, crisis support, fair use and security.
- To fix problems and make Osbert better, from problem reports, ratings and the conversations you choose to share, with their details made up.
- To send you sign-in codes and the notifications you asked for. We don't send marketing unless you ask for it.
Nothing happens without your OK
Osbert never sends an email, buys anything, adds to your calendar or takes another action that changes something outside the app until you approve the exact action on a card.
AI and your data
Your messages, and what Osbert needs from memory to answer them, go to Anthropic's Claude models, which write Osbert's replies. We don't use your conversations, memory, email or files to train AI models, and Anthropic doesn't train its models on data sent to it through its API.
Google user data
If you connect Gmail, Osbert uses that access only to do what you ask: search and read your messages, sort what needs you, and send the replies you approve. Osbert's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Gmail data is used only to provide the features you use in Osbert, never for advertising.
- It is never sold, and is shared only where providing those features needs it (for example, with the AI model that writes a summary you asked for), where the law requires it, or with your consent.
- No person reads it, unless you ask us to, it is needed for security, or the law requires it.
- It is never used to train AI models.
You can disconnect Gmail in Settings, or remove Osbert's access in your Google Account, at any time.
Who helps run Osbert
These companies process data for us, only to provide Osbert. None of them may use it for anything else. Before we add another, we'll update this list.
| Anthropic | The AI models that write Osbert's replies and search the web for him: your messages and what Osbert needs from memory to answer them. |
|---|---|
| ElevenLabs | Spoken replies, live voice calls, and the pictures you ask Osbert to make. |
| Railway | Hosts Osbert's servers and database, in the United States. |
| Apple | Push notifications to your iPhone. Your browser's own push service delivers web notifications. |
| Only when you connect Gmail. | |
| Your email provider | Only when you connect an email account with an app password (for example iCloud, Yahoo or Zoho). |
| Voyage AI (MongoDB) | Turns memories into search vectors, so Osbert finds the right one. |
| OpenStreetMap | Place searches (the search words, not who you are). |
| Resend | Sends the sign-in emails (your email address and the code). |
| Sentry | Reports of errors in Osbert's server and iPhone app, so we can fix them. They never contain your messages, email address or anything you wrote. |
Where your data is
Osbert's servers and database are in the United States. If you live somewhere else, your data travels there to be stored and processed, and we protect it the same way wherever it is.
Cookies
The web app uses one cookie, to keep you signed in. There are no advertising or tracking cookies, and no third-party analytics.
What we never do
Your data is never sold, never used for advertising, and never used to train AI models.
How long things are kept
- Chats, ratings, memory, documents, Life items and reminders: until you delete them or your account.
- Location: 24 hours. Calendar events: until three days after they end. Unsent files: a day. Link previews: a week.
- Problem reports: 90 days. Shared conversations: your own words until reviewed, or 90 days at most. How the app is doing: 30 days; simple counts: 90 days.
- A data export: until you download it once, or 24 hours.
- After you delete your account, nothing that identifies you is kept. The audit log keeps only an anonymous "account deleted" entry. A text "STOP" to Osbert's messaging number is remembered (as a scrambled code) so we never text that number again.
Your data, your choice
- Export: Settings → Your data → Export my data gives you a zip of everything above: profile, chats, ratings, memory, documents with their files, Life items, reminders, notifications, approvals, conversations you shared, connected accounts (names only, never passwords or tokens) and your files. The download link works once, for 24 hours.
- Delete: Settings → Your data → Delete my account removes all of it from Osbert and withdraws Osbert's access to your Google account. It can't be undone.
- Wherever you live, you can ask us at hey@webbuddy.agency to see, correct, export or delete your data, or to stop using it for something. Depending on where you live (for example the EU, the UK, California or India), the law gives you these rights too, and you can complain to your local data protection authority. We answer within 30 days.
Age
Osbert is for people who are 18 or older. If you tell Osbert you are younger, he stops.
Security
Everything travels over encrypted connections. Email access, card numbers and document numbers are encrypted at rest. You sign in with a one-time code sent to your email, and approvals on your iPhone ask for Face ID.
Changes
If this policy changes, the date at the top changes, and we'll tell you in the app about anything important before it takes effect.
Contact
WebBuddy LLC, Wyoming, USA. Email hey@webbuddy.agency. Website heyosbert.com.