Privacy policy

This policy covers the Headroom website and waitlist. When the app launches, this page will cover it too; the design principles are on the security page.

What we collect on the waitlist

• Your email address.
• Your answers: how you’re paid, what you use today, and, if you choose, your money question and whether you’d beta test or share a redacted statement.
• Your referral code, who referred you, and how you found us (for example a campaign tag).
• Your device type (iPhone, Android or desktop), read from your browser.
• A keyed hash of your IP address, used only to limit sign-ups per network. We don’t store the address itself.

Why

To confirm your email, send beta invites and product news, decide who to invite first, and understand which problems to solve first. We don’t sell your data or share it for advertising.

Cookies and analytics

• One cookie lets you answer the follow-up questions from the browser you signed up or confirmed in. It expires after 30 days.
• We use PostHog to count page views and form steps. Events never include your email or answers to the open question.
• We use Sentry to catch errors. Error reports exclude request bodies and cookies.

Who processes data for us

• Supabase (database), Vercel (hosting), Resend (email), PostHog (analytics), Sentry (error monitoring).

How long we keep it

Waitlist data is kept until the beta ends or until you ask us to delete it, whichever comes first. Unconfirmed sign-ups may be removed sooner.

Your choices

Email hello@example.com to see, correct or delete your data, or to stop emails.