Legal
Privacy Policy
Summary
Oops Lab LLC (“Oops Lab”, “we”, “us”) builds and operates a small portfolio of software products, including the Mousey mobile application, the CrimeScore API (crimescore.io), WanderAware, and Taskmosis.
This policy explains what personal information we collect when you use our products and websites, how we use it, who we share it with, and the choices you have. It applies to oopslab.ai and to all Oops Lab products unless a specific product publishes its own product-level policy.
If you only want the short version: we collect the minimum we need to run the product you’re using, we don’t sell personal information, we use Stripe for payments, and you can email dev@oopslab.ai at any time to ask us to delete your data.
1. Information we collect
1.1 Account information
When you create an account — for the Mousey app, the CrimeScore API dashboard, or any other Oops Lab product that requires sign-in — we collect:
- Your email address.
- An authentication credential (password, or an OAuth identifier from Google or another sign-in provider you choose).
- Optional profile information you provide (display name, organization).
1.2 Mousey app data
The Mousey Android application is a companion app for the Mousey hardware device. When you use the Mousey app we collect or process:
- Bluetooth pairing data — the identifier of the Mousey device(s) you pair with your phone, and the configuration you set on each device (schedule, intensity, profile). Bluetooth permission is used solely to communicate with your Mousey hardware. We do not scan for, collect, or transmit information about other Bluetooth devices in your environment.
- Device configuration sync — settings you save are synced through our backend so the same configuration is available across your phones and the device itself. This sync is tied to your Oops Lab account.
- Network requests — the app communicates with our backend over HTTPS. Standard server logs (timestamp, IP address, request path, error code, app version) are retained for security and debugging purposes for up to 30 days.
- Device and crash diagnostics — if the app crashes or hits an unexpected error, we may collect a non-personal diagnostic record (operating system version, app version, error type) so we can fix the bug. These records do not include the content of your messages, contacts, location, or photos.
The Mousey app does not collect your contacts, calendar, photos, microphone audio, camera imagery, precise location, files, SMS, or call history.
1.3 Payment information
If you purchase a paid subscription or a product, payments are processed by Stripe, Inc. We do not store your full payment card number or banking details on Oops Lab servers. Stripe provides us with the limited information needed to manage your subscription — your name, billing email, country, last 4 digits of card, and subscription status. Stripe’s handling of your payment information is governed by Stripe’s Privacy Policy.
1.4 Communications
If you email us, sign up for product updates, or fill out a form on one of our websites, we keep that correspondence so we can reply, follow up, and provide the support you asked for.
1.5 Website logs and cookies
Our marketing websites use minimal analytics — aggregated, non-identifying counts of page views — and standard server logs. We do not currently set advertising cookies, and we do not run third-party advertising trackers on our pages.
2. How we use information
We use the information described above only for the following purposes:
- To create and authenticate your account.
- To run the product you’re using — sync settings, deliver API responses, communicate with your Mousey hardware.
- To process payments and manage subscriptions through Stripe.
- To respond to your support requests and feedback.
- To detect and fix bugs, abuse, and security issues.
- To send transactional notices about your account (billing receipts, security alerts, material policy changes).
- To meet our legal obligations.
We do not use your data to train machine-learning models, profile you for advertising, or sell access to it.
3. How we share information
We share personal information only in these specific situations:
-
Service providers (sub-processors). We rely on a small set of vendors who process
information strictly on our behalf, including:
- Stripe — payments and subscription management.
- Cloud infrastructure providers (such as Amazon Web Services and Google Cloud Platform) — hosting, storage, and email delivery.
- Email and customer-support tools — delivering account email and replying to your messages.
- Legal requirements. We may disclose information if required to do so by law, subpoena, court order, or in response to a lawful government request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers. If Oops Lab is acquired, merged, or transfers ownership of a product, information about you may be transferred to the new owner under the terms of this policy (or, if changed, after notice to you).
We do not sell or rent personal information.
4. How long we keep information
- Account data: as long as your account is active, plus a short retention window after deletion (typically 30 days) so we can recover from accidents.
- Device configuration data (Mousey): as long as your account is active.
- Server logs: up to 30 days.
- Crash diagnostics: up to 90 days.
- Billing records: retained as required by tax and accounting law (typically 7 years).
You can request earlier deletion at any time — see Your choices below.
5. Your choices and rights
You have the following rights regarding the personal information we hold about you:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to fix information that is inaccurate or incomplete.
- Deletion — ask us to delete your account and associated data.
- Portability — request a machine-readable export of the data you provided to us.
- Objection / restriction — ask us to stop or limit certain uses of your information.
To exercise any of these rights, email dev@oopslab.ai. We typically respond within 30 days. You will not be charged a fee, and we will not retaliate for an exercise of your rights.
Depending on where you live, you may also have rights under specific laws — the EU/UK General Data Protection Regulation, the California Consumer Privacy Act, and similar statutes. The same email address is the right place to start.
6. Children
Our products are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at dev@oopslab.ai and we will delete it.
The Mousey mobile app is rated and intended for adult, professional use.
7. Security
We use industry-standard technical and organizational measures to protect your information, including TLS/HTTPS for data in transit, encrypted storage at rest, scoped access controls, and regular review of authorized administrators. No system is perfectly secure, but we work to minimize blast radius and respond quickly when something is wrong.
If you become aware of a security issue with one of our products, please email dev@oopslab.ai with “security” in the subject line. We’ll respond promptly.
8. International users
Oops Lab is based in the United States, and the information we collect is processed and stored on infrastructure located in the United States. If you use our products from outside the United States, you understand and consent to your information being transferred to and processed in the United States.
9. Changes to this policy
We will update this policy from time to time. When we make material changes, we will revise the Last updated date at the top of this page and, where appropriate, give you notice through the app or by email before the changes take effect. Your continued use of our products after a change indicates that you accept the updated policy.
10. Contact us
Questions, requests, or complaints? Email dev@oopslab.ai.
Oops Lab LLC
Formed April 9, 2026 · New York, USA
DOS ID 7881073 · EIN 42‑1819703