Privacy, in plain language

The whole point of Osita is that families trust it with their mail. So here’s exactly what happens to it: no fine print, no fog.

Effective date: 22 July 2026 · Last updated 1 August 2026

What arrives

You choose how school mail reaches Osita. With a supported provider, you can grant read-only mail access; Osita scans recent and new messages to identify likely school mail and pull out the family details inside. Spam, junk, and trash are excluded. You can disconnect at any time.

Forwarding remains a first-class option. If you choose it, your household gets a private address and Osita sees only messages sent to that address — there is no inbox access for that setup.

Google user data we access

When you connect Gmail, Osita accesses your Google Account email address and the Gmail data needed to check the previous 90 days and new messages: message and history IDs, received dates, sender addresses, subjects, snippets, threading headers, and message text or HTML. Osita first applies your saved sender choices. When those do not decide the answer, it reads normalized message text to determine whether the message is school-related. Full content from mail classified as not school-related is discarded. If Osita needs your answer, it temporarily keeps a short text excerpt so you can make that decision; rejecting the message removes that excerpt.

The permission is read-only. Osita does not send, draft, modify, move, label, or delete Gmail messages, and it does not access Google contacts, Drive files, calendars, or any other Google service.

How Osita uses Google user data

Osita uses Gmail data only to provide features you can see: identifying school, child-care, camp, club, lesson, and youth-activity mail; extracting dates, times, locations, deadlines, forms, amounts, child names, instructions, schedule changes, and cancellations; and showing the results in your family feed, calendar, to-dos, reminders, and source-email view.

Google user data is processed only by Osita and cloud and model service providers acting on Osita’s behalf to deliver those features. It is never sold, used for advertising, used to build advertising profiles, or used to train a generalized AI model. Osita’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How Google user data is protected

Google data is encrypted in transit with HTTPS and at rest in Google Cloud. Gmail refresh credentials receive an additional layer of encryption with Google Cloud KMS; short-lived access credentials are never stored. Access is limited to the services that classify mail, create your family updates, and show an authorized household member the source behind an update. Email bodies, subjects, and sender addresses are prohibited from logs, traces, metrics, and analytics.

Osita keeps a sanitized, media-free copy of admitted school mail while any resulting item is current and for 30 days after the last item becomes historical, then deletes its content. Disconnecting Gmail revokes Google access and deletes Osita’s encrypted credential.

Microsoft user data we access

When you connect the Outlook mailbox attached to a personal Microsoft account, Osita uses Microsoft’s Mail.Read permission to check the previous 90 days and new messages outside Junk Email and Deleted Items. The Microsoft account may use an Outlook.com, Hotmail, Live, or another email address to sign in. Osita accesses that account email address plus immutable message identifiers, folder checkpoints, received dates, sender addresses, subjects, previews, threading headers, and message text or HTML. It uses that data for the same visible school-mail feed, calendar, to-do, reminder, and source-email features described above. Rejected content is discarded under the same rules.

The Microsoft permission is read-only. Osita cannot send, draft, modify, move, or delete Microsoft mail, and it does not request contacts, files, calendars, directory access, or organizational mailbox access. Direct connection is limited to personal Microsoft accounts; work and school Microsoft 365 inboxes use forwarding.

Microsoft mail and refresh credentials receive the same transport, storage, Cloud KMS, access-control, retention, and body-blind diagnostics protections described above. Microsoft does not provide a per-app refresh-token revocation endpoint. Disconnecting therefore deletes Osita’s encrypted refresh credential, which ends Osita’s access. You may separately remove the inactive Osita consent record in your Microsoft account privacy settings.

What’s kept

When school mail is admitted, Osita pulls out the useful parts — the events, tasks, and heads-ups: a title, a date, which child it’s about, and a link back to the source message. Those items live in your shared family feed.

We keep the minimum needed to run your feed, calendar, reminders, sender decisions, and source details. Connected-provider refresh credentials are encrypted with Google Cloud KMS; short-lived access credentials are never stored. We also keep account basics such as membership and devices registered for notifications.

What’s deleted, and when

Osita keeps a sanitized, media-free copy of admitted school mail so you can review the source behind a plan. It remains while any derived item is active and for 30 days after the last one becomes historical, then it is deleted. Full content from rejected and muted mail is not retained. A short excerpt held for your decision is deleted when you reject that message.

Deleting your Osita account removes your personal account data and deletes Osita’s stored connected-inbox access. If you are the last family member, it also deletes the shared family data; otherwise that shared data remains available to the other family members.

What we never do

We never sell your data, and we never share it to be sold.
We never show ads, and we don’t build ad profiles from your mail.
We never modify, send, or delete mail in a connected inbox. Access is read-only.
On the forwarding option, we never access your inbox; Osita receives only what you send to the private address.
Our internal diagnostics are body-blind by rule: they record counts, IDs, and timings so we can keep the service healthy — never the contents, subjects, or senders of your mail. This is an enforced engineering gate, not a promise we hope holds.

Your household, your data

Everything in Osita is scoped to your household. Members you invite can see the shared feed; no one outside it can. You can ask us to delete your household’s data at any time — see below.

Children’s information

Osita is a tool for parents and guardians to organize their own household. Items may reference a child’s first name and school activities because that’s what school mail is about. We don’t build advertising profiles, and we never sell this information. If you have questions about a child’s data, email us and we’ll help.

Contact

Questions, requests, or anything at all: support@getosita.com. A real person reads it.

Support & FAQ

Need a hand? Email support@getosita.com — we read every message. A few common questions:

What’s my Osita address?

If you choose forwarding, Osita creates a private address for your family (it looks like osita-xxxxxxxx@in.getosita.com). You’ll find it under Settings → School email. Connected-inbox families do not need or see a forwarding address unless they choose that option too.

How do I forward school mail to Osita?

Choose your email provider in School email. When a direct connection is available, Osita shows the provider’s consent screen. Otherwise Osita gives you a private family address and one clear forwarding instruction. Forward individual messages or create a provider rule — either way, forwarding remains fully supported.

How do I delete my data?

Use Account & privacy in the app, or email support@getosita.com from the address on your account. Deletion removes your account and deletes Osita’s stored connected-inbox access. If you are the last family member, it also removes the shared family data; otherwise that data remains with the other members.

Does Osita read my whole inbox?

With a connected provider, Osita checks the previous 90 days and new messages, excluding spam, junk, and trash. It uses sender details, subjects, snippets, and message text to find school-related mail and extract the family updates inside. Rejected message content is discarded. With forwarding, there is no inbox access at all. You can disconnect either setup in the app.