Efficiency OS — Privacy Policy

Account information. When you create an account we collect your email address, display name, and role. Authentication is handled by Google Firebase Authentication.

Workspace content.Messages, notes, tasks, documents, calendar events, KPIs, and file attachments you create are stored in Google Cloud Firestore so they sync across your team’s devices. Content is scoped to your workspace, and reading it requires signing in to the app. Someone removed from a workspace loses access, enforced by server-side security rules.

Roles and status. Each workspace records who its owners and admins are. If you choose to set them, your availability, status message and work location are shown to your teammates; status messages and work locations clear themselves at the time you pick.

Several accounts on one device. If you add more than one account, each keeps its own sign-in and its own copy of its workspace on your device. Removing an account from the device clears its copy there.

Push notification token.With your permission, the app registers a device push token (via Expo’s notification service) so teammates can reach you with call, message, and meeting notifications. Tokens are stored on your workspace member record.

Calls. Video and audio calls are transmitted in real time through LiveKit Cloud (when configured by your team) or Jitsi Meet. The app does not record calls.

Efficiency OS includes an AI assistant powered by Anthropic’s Claude models. To answer, workspace content (such as recent messages, notes, tasks, and documents) is sent to Anthropic’s API as context. Conversations marked with vanish mode are never sent to the AI. Anthropic’s handling of API data is described in Anthropic’s privacy documentation; API data is not used by Anthropic to train models by default.

To learn which parts of the app are used and to fix crashes, the app uses two service providers. Neither receives what you write: message text, note and document contents, file contents, names and email addresses are never sent to them.

PostHog (product analytics). Records which screens are opened (with conversation and document identifiers removed), when the app is opened, installed or updated, and a small number of in-app events. Events are linked to your workspace member identifier, not your name or email. On iOS and Android, PostHog may also record session replays: a visual recording of screens and taps in which all text and all images are masked, without console logs or network requests.

Sentry (crash and performance reporting). When the app crashes or hits an error, it sends a report with the error and stack trace. Request data, local variables, breadcrumbs, IP addresses and device names are stripped before sending. A sample of app performance timings is also collected.

This data is used only to understand and improve Efficiency OS. It is not used for advertising and is not combined with data from other companies.

• We do not sell your data.
• We do not show ads and use no advertising SDKs.
• We do not track you across other companies’ apps or websites.
• We do not send what you write to analytics or crash reporting.
• We do not access your contacts or location.

Camera and microphone are used only during video calls and voice dictation, and only after you grant the system permission.

A workspace belongs to the organization that runs it. Messages, shared notes, tasks, documents and calendar events posted in a workspace are part of that organization’s records, much like email at work. The workspace owner decides who is in it, and can delete shared content, or the whole workspace, at any time.

Leaving or being removed. When you leave a workspace, or an admin removes you, your access ends immediately. What you shared stays in the workspace under your name, marked as a former member. Your private notes, private documents, personal agents and agent conversations in that workspace are kept for 30 days so an admin can take them over, then deleted. Leaving a workspace does not delete your account.

Deleting a workspace. When its owner deletes a workspace, everything in it is deleted for everyone and its members lose access.

Workspace content persists for the life of the workspace so your team’s shared memory keeps working. You can delete individual messages, notes, tasks, and documents in the app.

Deleting your account. You can delete your account in the app from Settings, Delete account. If you are the only owner of a workspace that has other members, you first transfer ownership or delete that workspace, so the organization is not left without an owner. You are then signed out, and your account is permanently deleted after 15 days. Signing in during those 15 days lets you restore it.

When the deletion completes we delete your sign-in account, your member profile in every workspace (name, email address, role and push tokens), your private notes and private documents, and your personal agents and agent conversations. Content you shared in a workspace stays with that workspace, and your name on it is replaced by “Deleted user”.

Full steps are on our account & data deletion page. If you cannot use the app, email us and we will complete the deletion within 30 days.

Data is encrypted in transit (TLS) to Firebase, Anthropic, Expo, PostHog, Sentry, and call infrastructure. Access to workspace data requires signing in, and the security rules on our servers enforce removals and decide who may change roles or delete a workspace.

Efficiency OS is a business tool intended for users 18 and over. We do not knowingly collect data from children.

We may update this policy as the app evolves; the date above reflects the latest revision. Material changes will be noted in the app’s release notes.

Questions or requests: hello@efficiency.dev