Privacy Policy

Last updated: November 2026

This policy explains what information osiris — the social app, not the Vrosa website — collects and how it is used. It is written in plain language and describes how the app actually behaves today.

Information we collect

To create an account we collect a username, display name, and password (stored only as a salted hash — we never see or store your actual password). When you sign up with "Get your own Osiris" we also collect your email address and verify it with a 6-digit code we email you; it is also used to send a password-reset link if you get locked out — it is never shown on your profile or to anyone else. If you choose "Continue with Google" instead, Google gives us your Google email address and name (never your Google password), which we use to create your account or sign you in. On the older sign-in form, a recovery email is optional. You may also choose to add your gender and your year of birth (the year only, never a full birthday) in Settings → Personal information. Both are optional, can be removed at any time, and are never shown on your profile or to any other person. They are used only anonymously: the Audience insights shown to the owner of an account you follow can include totals by gender and age range, and only when at least 5 followers have provided the information — so no one can tell who you are from them. Everything else — your posts, stories, clips, comments, direct messages, profile photo, and bio — is information you choose to add. We also collect basic technical information automatically: your IP address and device/browser details (used for security, abuse prevention, and rate-limiting). When you open a page on osiris, we also note the approximate country and city your connection comes from and when you visited, and show the page owner only totals (for example "Top locations" and "Visitor active times") — never your IP address. We also record interactions like likes, views, and follows (used to personalize your feed and to power counts like followers/likes).

Link taps and who can see them

When someone taps a link card or a social icon on a page, osiris counts it for the owner of that page. The page owner can see, in their own dashboard, the total taps, taps per card by day, and a short list of recent taps showing which card was tapped and when. If the person who tapped was signed in, the owner sees their name and @username; if they were not signed in, the owner only sees "Guest". We do not put your IP address or device details in this list, and your own taps on your own page are not counted. The owner of a page never sees taps on anyone else's page.

What other people can see

A public account's posts, stories (while active), and profile are visible to anyone using osiris. A private account's posts and stories are visible only to approved followers. Direct messages are visible only to the people in that conversation. You control visibility further with Block, Mute, Restrict, Close Friends, and per-post comment settings, all in Settings.

How we use your information

We use it to operate osiris — showing you and others the content you post, delivering direct messages, powering your feed and search, and letting you manage your account. We also use it to enforce these terms: reviewing reports, and taking action (removing content, restricting, suspending, or banning) against accounts that violate them.

Sharing

We do not sell your personal information. Content you post publicly is, by design, visible to other users according to your own privacy settings — that is how a social app works, not a third-party disclosure. Photos and videos you upload are stored using a third-party cloud storage provider on our behalf, solely to run the app. Verification codes and password-reset emails are sent through a third-party email provider (Resend) on our behalf, and "Continue with Google" is handled by Google under Google's own privacy policy — in both cases only to run the sign-up and sign-in you asked for.

Account deactivation

You can deactivate your account at any time from Settings. This immediately signs you out of every device and hides your profile, posts, stories, and highlights from everyone else. It is fully reversible: logging back in with your username and password brings your account back exactly as it was.

Account deletion

You can also permanently delete your account from Settings — this requires re-entering your password and typing your username to confirm, since it cannot be undone. Deleting your account: signs you out everywhere and permanently prevents logging back in; removes your profile information (name, bio, profile photo); permanently deletes the posts, stories, and highlights you authored; and removes you from other accounts' followers/following lists. Comments you left on other people's posts and direct messages you sent are not stripped out of those other people's threads — they remain, attributed to "Deleted user" — since removing them would alter or delete content that belongs to someone else's conversation or post. Some information may also be kept for a period after deletion where needed to investigate abuse reports, resolve disputes, or meet a legal obligation.

Data retention

Beyond what's described above for deactivation and deletion, osiris does not currently have a fixed, automatic retention schedule that purges account data after a set period. Information is kept for as long as your account is active, and as needed to operate the app, enforce these terms, and meet legal obligations.

Children's privacy

osiris is not directed at children under 13, and account creation requires confirming you are at least 13. We do not knowingly collect information from anyone younger than that.

Security

Passwords are stored as salted hashes, never in plain text. You can see every device signed into your account, and sign any of them out, from Settings → Where you're logged in.

Your choices and controls

Add, change or remove your optional gender and birth year in Settings → Personal information; block, mute, restrict, switch your account between public and private, curate a Close Friends list, turn off comments on a post, set notification preferences, review and revoke your own active sessions, and deactivate or delete your account — all from Settings.

Changes to this policy

We may update this policy as osiris changes. Continuing to use the app after an update means you accept the revised policy.

Contact and reports

To report a specific post, story, clip, comment, message, or account, use the Report option on that content; it goes to a real review queue. For a copyright complaint, use the Report option or file a dedicated copyright report. For anything else, including questions about this policy, contact Help & Support — none of this requires an account.

This page describes how osiris currently works. It is not legal advice and has not been reviewed by a lawyer — have it reviewed against your actual data practices and local laws before treating it as final.