Privacy policy.

Edgethink ("drifty", "we", "our", or "us") recognizes that your privacy is important. This Privacy Policy explains how we collect, use, disclose, and protect information when you access the drifty website, the drifty desktop application, or any related services (collectively, the "Platform").

By accessing or using the Platform, creating an account, signing in, downloading the app, or continuing through an account flow, you acknowledge the collection, use, and storage of information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

If you have any questions, please contact support.

Information we collect

Account information

When you create an account, we may collect information such as:

• Name
• Email address
• Password authentication data handled by our authentication provider
• Authentication provider information (such as Google login details)

We use this information to create and manage your account, authenticate access, and communicate with you about the Platform.

Activity and usage data

drifty is a productivity and activity tracking platform. Depending on your settings and permissions, we may collect:

• Application names
• Window titles
• Website domains
• Website URLs and page titles available to the local Mac tracker when browser permissions allow
• Active application usage duration
• Website usage duration
• Timestamps and activity metadata
• Productivity categorizations and labels
• Device and operating system information
• Interaction and feature usage data

We may also generate summaries, analytics, insights, categorizations, or productivity-related outputs based on this information.

drifty does not intentionally collect keystroke contents or passwords. Raw Mac activity history is stored locally on your device by default. drifty Cloud features may sync account data, billing state, profile fields, feedback, and opt-in aggregate leaderboard/profile totals, but are not designed to mirror your full local app, site, window, URL, session, or timeline history to Supabase.

Cookies and similar technologies

We may use cookies, local storage, analytics SDKs, and similar technologies to:

• Maintain user sessions
• Remember preferences
• Improve Platform functionality
• Measure usage and performance
• Analyze user behavior and product adoption

Website analytics on drifty.so uses PostHog in cookieless mode. PostHog analytics is configured not to store PostHog data in browser cookies, local storage, or session storage, and website session replay is disabled by default. Account authentication, checkout, app preferences, and security features may still rely on cookies, local storage, or similar browser storage where needed.

You can modify your browser settings to manage cookies and storage, although some Platform features may not function properly without them.

How we use information

We may use collected information to:

• Provide and maintain the Platform
• Authenticate users and secure accounts
• Generate productivity insights and analytics
• Improve Platform performance and reliability
• Develop and improve algorithms, AI systems, and machine learning features
• Conduct internal research and product analysis
• Monitor usage trends and user engagement
• Detect abuse, fraud, or security issues
• Communicate updates, announcements, and support information

We may use aggregated, anonymized, or de-identified data for analytics, benchmarking, research, and model improvement purposes.

We may also use certain user data to improve our internal algorithms and AI-powered features. However, we do not sell personal data to third parties.

AI features and generated content

The Platform may use AI models and automated systems to generate productivity summaries, categorizations, recommendations, or other outputs ("Generated Content").

For a product-level overview of AI classification, see AI time tracking.

You retain ownership of your data and Generated Content to the extent permitted by applicable law.

Cloud AI classification may transmit minimized activity fields, such as app name, domain or host, page or window title, duration, and optional sanitized work-profile context, to configured AI providers for that request. The cloud classification service is not designed to store raw prompts, full URLs, full local timeline rows, raw session history, local tracker databases, or provider API keys.

We may process User Data and Generated Content to improve Platform functionality, recommendation quality, categorization accuracy, and related machine learning systems.

We do not permit third parties to use identifiable customer data for their own independent advertising purposes.

Third-party services

We use third-party infrastructure and service providers to operate the Platform. These providers may process information on our behalf. These services may include:

• Supabase for authentication, account data, Edge Functions, and database services
• PostHog for cookieless website analytics and anonymous product analytics
• Google services for Google sign-in and Google AI/Gemini classification providers
• OpenRouter for AI model routing when configured for Cloud AI classification
• Polar for paid subscription checkout and billing records
• Resend for transactional email when configured
• Cloudflare Turnstile for abuse prevention when enabled
• GitHub Releases for public Mac app downloads and update metadata
• Static hosting and content delivery providers for drifty.so

These third parties may collect or process information in accordance with their own privacy policies and terms.

Data sharing and disclosure

We do not sell personal information to data brokers or advertisers. We may disclose information:

• To service providers and infrastructure partners that help operate the Platform
• To comply with legal obligations or lawful requests
• To protect our rights, users, systems, or security
• In connection with a merger, acquisition, financing, restructuring, or sale of assets
• With your consent or at your direction

Planned team and workspace features

drifty may introduce team or workspace functionality in the future. If such features are introduced, workspace administrators may be able to access organization-level productivity reports, aggregated analytics, and approved workspace data depending on role permissions.

Additional disclosures regarding workspace access and permissions may be provided when such features become available.

Data retention

We retain information for as long as reasonably necessary to provide the Platform, comply with legal obligations, resolve disputes, enforce agreements, and improve our services.

Local Mac tracker data remains on your device unless you delete it, export it, or choose a feature that intentionally shares or syncs a limited subset. Cloud account, billing, profile, support, analytics, and opt-in aggregate data may be retained according to the purpose for which it was collected.

You may request deletion of your account by contacting support.

Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

International users

drifty operates globally. By using the Platform, you understand that your information may be transferred to and processed in countries other than your own, which may have different data protection laws.

Children's privacy

The Platform is not directed toward children under the age required by applicable law in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us unlawfully, please contact us and we will take reasonable steps to remove such information.

Your privacy rights

Depending on your location, you may have rights under applicable privacy laws, including the right to:

• Access personal information
• Correct inaccurate information
• Request deletion of personal information
• Object to certain processing activities
• Request data portability
• Withdraw consent where applicable

To exercise these rights, contact support.

Changes to this privacy policy

We may update this Privacy Policy from time to time. If material changes are made, we may notify users through the Platform, by email, or by updating the Effective Date above.

Continued use of the Platform after changes become effective constitutes acceptance of the revised Privacy Policy.

Contact us

If you have any questions about this Privacy Policy or our data practices, please contact support.