Privacy, in plain language
What arrives
You choose how school mail reaches Osita. With a supported provider, you can grant read-only mail access; Osita scans recent and new messages to identify likely school mail and pull out the family details inside. Spam, junk, and trash are excluded. You can disconnect at any time.
Forwarding remains a first-class option. If you choose it, your household gets a private address and Osita sees only messages sent to that address — there is no inbox access for that setup.
Google user data we access
When you connect Gmail, Osita accesses your Google Account email address and the Gmail data needed to check the previous 90 days and new messages: message and history IDs, received dates, sender addresses, subjects, snippets, threading headers, and message text or HTML. Osita first applies your saved sender choices. When those do not decide the answer, it reads normalized message text to determine whether the message is school-related. Full content from mail classified as not school-related is discarded. If Osita needs your answer, it temporarily keeps a short text excerpt so you can make that decision; rejecting the message removes that excerpt.
The Gmail permission is read-only. Osita does not send, draft, modify, move, label, or delete Gmail messages. This permission does not give Osita access to your Google contacts, Drive files, or calendars. Connecting Google Calendar is a separate, optional step.
Google Calendar, if you connect it
You choose whether to connect Google Calendar and which Google account to use. Osita creates a calendar named Osita for your family’s school events and dated tasks, then keeps those entries up to date. We read your calendar list to find calendars Osita created. We do not read or change events in your other calendars.
We keep your selected account’s email address, the calendar’s identifier, and an encrypted Google connection key so updates can continue when the app is closed. Calendar data follows the same data-protection and no-advertising rules below.
You can disconnect in Settings. Osita stops updates and removes its calendar while it still has permission. If you have already removed access at Google, you can delete that calendar yourself. Disconnecting a calendar does not disconnect a Gmail inbox you still use with Osita.
How Osita uses Google user data
Osita uses Gmail data only to provide features you can see: identifying school, child-care, camp, club, lesson, and youth-activity mail; extracting dates, times, locations, deadlines, forms, amounts, child names, instructions, schedule changes, and cancellations; and showing the results in your family feed, calendar, to-dos, reminders, and source-email view.
Google user data is processed only by Osita and cloud and model service providers acting on Osita’s behalf to deliver those features. It is never sold, used for advertising, used to build advertising profiles, or used to train a generalized AI model. Osita’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How Google user data is protected
Google data is encrypted in transit with HTTPS and at rest in Google Cloud. Saved Google refresh credentials receive an additional layer of encryption with Google Cloud KMS; short-lived access credentials are never stored. Access is limited to the services that classify mail, create your family updates, keep your connected calendar current, and show an authorized household member the source behind an update. Email bodies, subjects, and sender addresses are prohibited from logs, traces, metrics, and analytics.
Osita keeps a sanitized, media-free copy of admitted school mail while any resulting item is current and for 30 days after the last item becomes historical, then deletes its content. Disconnecting Gmail stops Osita reading that inbox and deletes its saved connection key. Other inboxes and calendars you keep connected continue working. Osita removes its Google access after the last inbox or calendar using that Google account is disconnected.
Microsoft user data we access
When you connect an Outlook.com mailbox attached to a personal Microsoft account, or a work or school Microsoft 365 mailbox, Osita uses Microsoft’s Mail.Read permission to check the previous 90 days and new messages outside Junk Email and Deleted Items. The Microsoft account may use an Outlook.com, Hotmail, Live, or another email address to sign in. Osita accesses that account email address plus immutable message identifiers, folder checkpoints, received dates, sender addresses, subjects, previews, threading headers, and message text or HTML. It uses that data for the same visible school-mail feed, calendar, to-do, reminder, and source-email features described above. Rejected content is discarded under the same rules.
The Microsoft permission is read-only and covers only the mailbox you sign in with. Osita cannot send, draft, modify, move, or delete Microsoft mail, and it does not request contacts, files, calendars, directory access, or access to other mailboxes in your organization. A work or school organization may require its administrator to approve Osita before you can connect; Microsoft shows Osita as a verified publisher on that approval screen.
Microsoft mail and refresh credentials receive the same transport, storage, Cloud KMS, access-control, retention, and body-blind diagnostics protections described above. Microsoft does not provide a per-app refresh-token revocation endpoint. Disconnecting therefore deletes Osita’s encrypted refresh credential, which ends Osita’s access. You may separately remove the inactive Osita consent record in your Microsoft account privacy settings.
What’s kept
When school mail is admitted, Osita pulls out the useful parts — the events, tasks, and heads-ups: a title, a date, which child it’s about, and a link back to the source message. Those items live in your shared family feed.
We keep the minimum needed to run your feed, calendar, reminders, sender decisions, and source details. Connected-provider refresh credentials are encrypted with Google Cloud KMS; short-lived access credentials are never stored. We also keep account basics such as membership and devices registered for notifications.
What’s deleted, and when
Osita keeps a sanitized, media-free copy of admitted school mail so you can review the source behind a plan. It remains while any derived item is active and for 30 days after the last one becomes historical, then it is deleted. Full content from rejected and muted mail is not retained. A short excerpt held for your decision is deleted when you reject that message.
Deleting your Osita account removes your personal account data, disconnects your inboxes, and removes calendars created by Osita while it still has permission. It does not delete messages in your inboxes. If you are the last family member, it also deletes the shared family data; otherwise that shared data remains available to the other family members.
What we never do
- We never sell your data, and we never share it to be sold.
- We never show ads, and we don’t build ad profiles from your mail.
- We never modify, send, or delete mail in a connected inbox. Access is read-only.
- On the forwarding option, we never access your inbox; Osita receives only what you send to the private address.
- Our internal diagnostics are body-blind by rule: they record counts, IDs, and timings so we can keep the service healthy — never the contents, subjects, or senders of your mail. This is an enforced engineering gate, not a promise we hope holds.
Your household, your data
Your family’s feed is shared with its members. When you choose to share a link or connect a calendar, the selected content is also available through that link or calendar. You control those choices. You can ask us to delete your household’s data at any time — see below.
Children’s information
Osita is a tool for parents and guardians to organize their own household. Items may reference a child’s first name and school activities because that’s what school mail is about. We don’t build advertising profiles, and we never sell this information. If you have questions about a child’s data, email us and we’ll help.
Contact
Questions, requests, or anything at all: support@getosita.com. A real person reads it.
Support & FAQ
Need a hand? Email support@getosita.com — we read every message. A few common questions:
What’s my Osita address?
If you choose forwarding, Osita creates a private address for your family (it looks like osita-xxxxxxxx@in.getosita.com). You’ll find it under Settings → School email. Connected-inbox families do not need or see a forwarding address unless they choose that option too.
How do I forward school mail to Osita?
Choose your email provider in School email. When a direct connection is available, Osita shows the provider’s consent screen. Otherwise Osita gives you a private family address and one clear forwarding instruction. Forward individual messages or create a provider rule — either way, forwarding remains fully supported.
How do I delete my data?
Use Account & privacy in the app, or email support@getosita.com from the address on your account. Deletion removes your account, disconnects your inboxes, and removes calendars created by Osita while it still has permission. It does not delete messages in your inboxes. If you are the last family member, it also removes the shared family data; otherwise that data remains with the other members.
Does Osita read my whole inbox?
With a connected provider, Osita checks the previous 90 days and new messages, excluding spam, junk, and trash. It uses sender details, subjects, snippets, and message text to find school-related mail and extract the family updates inside. Rejected message content is discarded. With forwarding, there is no inbox access at all. You can disconnect either setup in the app.