Privacy Policy

We collect the following categories of information:

Information you provide directly

• Email address — required to join the waitlist and receive early-access notifications.
• Improvement preference — optional field asking which cognitive area you most want to work on (Critical Thinking, Mental Math, Communication, Verbal Fluency, Memory, Focus, or Other). This helps us prioritize what we build first.

Information collected automatically

• Usage data — pages visited, time on page, clicks, and navigation paths.
• Device and browser data — IP address, browser type and version, operating system, and referring URL. IP addresses may be truncated or anonymized before storage.

We use the information we collect to:

• Add you to the Rusty waitlist and notify you when early access opens.
• Prioritize features and skill areas based on aggregated waitlist preferences.
• Send you occasional product updates about Rusty. You can unsubscribe from these at any time via the link in any email.
• Analyze aggregate usage patterns to improve the website's performance and content.
• Comply with our legal obligations.

We do not use your information for automated decision-making or profiling that produces legal or significant effects on you.

We rely on a small number of trusted third-party providers to operate the Service:

• Tally (tally.so) — processes waitlist form submissions. Your email and improvement preference are transmitted to and stored by Tally. Tally's own privacy policy governs their handling of that data. We do not use Tally to place tracking pixels or cookies unrelated to form submission.
• Analytics providers — we may use tools such as Google Analytics, Plausible, or PostHog to understand site traffic in aggregate. Where possible, we configure these tools to minimize the collection of personally identifiable information.

We do not permit third-party partners to use your information for their own marketing purposes.

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers — third parties who assist us in operating the Service (e.g., hosting, analytics, email delivery), under confidentiality obligations and only for the purposes described in this policy.
• Legal requirements — if required by law, court order, or a valid government request, or where we believe disclosure is necessary to protect the rights, property, or safety of Rusty, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is subject to a materially different privacy policy.

We retain your waitlist data (email and improvement preference) until you request deletion, or until Rusty launches and your information is migrated to the app's user database with your consent. Automatically collected usage data is retained in aggregate form and is not linked to individual identities after 26 months.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten").
• Objection / restriction — object to or request restriction of certain types of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at privacy@rusty.xyz. We will respond within 30 days. Residents of California may have additional rights under the California Consumer Privacy Act (CCPA), including the right to opt out of the sale of personal information (we do not sell personal information). Residents of the European Economic Area (EEA) and United Kingdom may have rights under the General Data Protection Regulation (GDPR).

The Rusty website itself does not set first-party cookies beyond those required for the site to function. Third-party services (such as Tally and analytics providers) may set cookies in accordance with their own policies. You can control or disable cookies through your browser settings at any time.

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, or destruction. No method of internet transmission is 100% secure, however, and we cannot guarantee absolute security. If we become aware of a data breach that affects your rights, we will notify you as required by applicable law.

Rusty is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has submitted information to us, please contact us at privacy@rusty.xyz and we will promptly delete it.

Rusty is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (using the address you provided) or by posting a prominent notice on the website prior to the change taking effect. We encourage you to review this page periodically. The date at the top of this page reflects the most recent update.

Questions, requests, or concerns about this Privacy Policy? Reach us at: