Mossy

we don't sell anything. ever. no ads, no tracking pixels, no analytics companies looking over your shoulder.

here's exactly what mossy stores, where it lives, and how to make us forget you. read it. ask anything you want.

who's responsible

mossy is operated as an independent project. for any privacy question, request, or complaint, write to hello@mossyfocus.com. we read every email and answer ourselves — no support queue, no chatbot.

in legal terms, the operator of mossy acts as the data controller for everything you put in here.

what we collect

your email — used to sign you in via magic link. nothing more.
what you put into mossy — tasks, subtasks, notes, focus sessions, day records, debrief timestamps. that's the product. we keep it so you can come back to it tomorrow.
conversations with the companion — what you type to mossy in chat, plus the task context that ride along (current task title, time elapsed, etc.). same purpose: so the companion can be useful in the next message.
request logs — your user id and the path you hit, kept for around 30 days for debugging. no message bodies, no task content.

legal basis: we process this data because you've signed up to use mossy and we couldn't run the product without it (article 6(1)(b) of the gdpr — performance of a contract).

where it lives

we don't run our own servers. mossy uses a small number of sub-processors:

supabase (us company, data hosted in frankfurt, germany) — your account and everything you put into mossy lives here.
anthropic (united states) — claude is the model behind the companion. when you talk to mossy or ask for a task breakdown, that text is sent to anthropic for inference. their api terms forbid using your prompts for model training. transfers to the us happen under standard contractual clauses.
vercel (united states) — hosts the frontend. it serves you static files; no account data is stored there.
railway (united states) — hosts the backend api. requests pass through but nothing is persisted on railway itself; persistence happens in supabase.

what mossy sends to claude

when you ask mossy to break a task down, the task title goes to anthropic. when you chat with the companion during a focus session, your messages and the recent conversation history go too — plus a small slice of context (the task you're on, how long you've been working). same for the daily debrief: the day's stats and your replies.

anthropic doesn't train on api data and we don't share it with anyone else. if you'd rather not have a piece of conversation travel through claude, don't type it.

cookies and local storage

we use one localStorage entry to keep you signed in (an auth token from supabase) and a couple more to remember your theme preference and whether you've dismissed certain banners. no third-party cookies, no analytics, no advertising trackers.

your rights

under the gdpr, you can ask us to:

show you everything we have about you (right of access)
fix anything that's wrong (rectification)
delete your account and everything tied to it (erasure / "right to be forgotten")
export your data in a machine-readable format (data portability)
stop processing it for a while (restriction)
object to processing in some cases

email hello@mossyfocus.com and we'll handle it. no questions asked, no hoops to jump through.

you also have the right to lodge a complaint with your local data protection supervisory authority — every eu country has one, and a quick search for "data protection authority" plus your country's name will turn it up.

how long we keep things

your data sticks around as long as you have an account. when you ask us to delete it, we remove your account and everything we have stored in supabase within 30 days. request logs at our hosting providers may persist a little longer per their own retention windows, but contain no message content.

automated decisions

mossy uses an ai to suggest steps and reply to messages, but it doesn't make any decision that has a legal effect on you or significantly affects you. it's a thinking companion, not an authority.

changes to this policy

if we change anything material, we'll email you before it takes effect and update the "last updated" date at the top of this page.

that's it.

if anything here feels off, or you want everything wiped, one email and we make it so. hello@mossyfocus.com