Legal

Privacy Policy

Effective date: July 4, 2026

This policy applies to the OttO desktop application and the OttO website.

Summary

OttO is local-first. Your knowledge, notes, documents, and graph data stay on your device — we never see them. The only data we collect is optional, anonymous usage statistics, and only if you give your consent. You can decline at first launch or turn it off at any time in the app settings.

What we collect (only with your consent)

If you allow anonymous analytics, the desktop app sends us the following:

  • Anonymous usage events — for example “app opened”, “search performed”, or “agent message sent”. Events record that a feature was used, never what you used it for.
  • Operating system name and version — e.g. macOS 15 or Windows 11.
  • App version — e.g. 0.1.0.
  • A randomly generated identifier — created locally on your device and used solely to count daily active users. It is not linked to your identity in any way and is deleted when you disable analytics.

What we never collect

Under no circumstances do we collect or transmit:

  • Names, email addresses, or account information (OttO has no accounts)
  • File contents, notes, or knowledge graph content
  • Prompts, AI conversations, or agent messages
  • Search queries
  • Project names or file paths

Why we collect it

We use anonymous usage statistics for exactly two purposes: counting how many people use OttO each day, and understanding which features are used. This helps us decide what to improve. The data is never used for advertising, profiling, or sold to anyone.

Third-party processor

Anonymous analytics data is processed by PostHog Inc. on PostHog’s US cloud infrastructure. Your IP address is used only to transport the data and is not stored with events. You can read PostHog’s privacy policy for details on how they handle data.

Your choices

  • On first launch, the app asks whether you want to share anonymous usage statistics. Declining has no effect on any feature.
  • You can enable or disable analytics at any time in Settings → Privacy.
  • Disabling analytics immediately stops all collection and resets the random identifier on your device.

Data retention

Anonymous usage data is kept only as long as needed for aggregate statistics and is retained for no longer than 12 months.

Changes to this policy

If we change this policy, we will post the updated version on this page with a new effective date.

Contact

Questions about this policy? Contact us at boedemirkol@gmail.com.