Ostrov is an app for notes, meetings, tasks, delegated tasks, messages and calls. This page explains what data it uses, where that data is stored, who processes it and how to delete it. Last updated October 12, 2026.
Who the operator is
The personal data operator is Ostrov's developer, a private individual: Danil Sergeevich Kozlov, Moscow, Russia. Data is processed under Russian Federal Law No. 152-FZ "On Personal Data", and only so that the Ostrov features you use can work.
Where data is stored
Ostrov Cloud is Ostrov's own server in Russia: St. Petersburg, hosted by Aeza, domain getostrov.ru. Everything Ostrov keeps in the cloud is stored and processed there. Older versions of the app and older links to delegated tasks go through a gateway in Yandex Cloud (Russia), which only forwards requests to the Ostrov server.
What stays on your device
Recordings of notes and meetings stay on your iPhone or Mac: speech is transcribed right on the device, and the audio of your recordings is never sent to the cloud. Transcripts, tasks, meeting plans, people profiles and card attachments are stored on your device. Ostrov reads and changes Apple Contacts, Calendar and Reminders only on your device - they are never sent to Ostrov Cloud.
If you set up your own speech recognition server in Settings, recordings are sent to that address - Ostrov never receives them.
Cookies on the website
getostrov.ru uses no third-party analytics counters, advertising tags or third-party scripts. The Ostrov server itself counts only daily totals: views of the home page, the Pro page and invitation pages, downloads of Ostrov for Mac and taps through to the App Store. No cookies, IP addresses or any data about the visitor. For a download only the source is kept: our website, an invitation, a direct link, or the domain of the site you came from (not the page address). The site may set only a technical cookie the site needs to work (for example, a mark that the page was opened from the app); it is not used to track visits and is never shared with third parties.
Who processes your text
Ostrov Lite - a model that runs on your device: your text never leaves it, and it works offline. This is what the free plan uses.
Ostrov Cloud (Ostrov Pro and Ostrov Corp) - for summaries, tasks, plans and assistant answers, only the text of a transcript or question is sent to the Ostrov server, which passes it to the YandexGPT model (Yandex Cloud, Russia). Requests to YandexGPT are sent with Yandex's request logging turned off. The Ostrov server does not keep the text after the response - only a counter of the amount used during the month.
Your own model - if you connect your own key (YandexGPT, ChatGPT, Claude and others), requests go from your device directly to the service you chose, under that service's terms. The key is stored only in your device's Keychain; Ostrov never receives it.
Along with your question, the assistant receives a brief summary: your reminders, tasks, delegated tasks, projects and meeting titles, so that it can answer based on your data. The summary is not stored after the response.
iPhone and Mac sync
Tasks, projects, people profiles, delegated tasks and meeting plans sync between your devices through the Ostrov server in encrypted form. The encryption key exists only on your devices (iCloud Keychain carries it between them); only its fingerprint goes to the cloud, so the server stores data it cannot read. Audio recordings are not synced.
Messages and calls
Messages, voice messages, video circles, photos and files are end-to-end encrypted on the sender's device: the Ostrov server only stores and relays ciphertext and cannot read it. Attachments are stored on the Ostrov server in encrypted form; the key to them travels inside the encrypted message.
Voice and video calls are encrypted between devices. When a direct connection is not possible, the call goes through Ostrov's relay server (TURN), which only forwards encrypted packets. The Ostrov server never records or stores calls.
Notifications about messages, calls and delegated tasks are delivered by Apple (the Apple Push Notification service; VoIP notifications for calls). A notification about an encrypted message does not contain its text; a notification about a delegated task contains a name and the task title.
What is stored in Ostrov Cloud
Account - a random device key; the name you sign delegated tasks with; your profile card if you filled it in (status, "about", working hours); if you sign in with Apple, a private Apple identifier (without your email unless you chose to share it).
Delegated tasks sent by link or to a team member: what needs to be done, for whom, the due date, details, your signature and the assignee's response ("accepted", "done"). They can be seen via the link by the person you sent it to.
Conversations - encrypted messages and attachments in your team, groups and direct conversations with people who accepted your task or your invitation.
Shared projects - names, columns and cards of boards that you chose to share; visible to project members (up to 20 people).
My computer - the text of tasks you sent to your own computer and the computer's responses. The computer key is stored only as a fingerprint.
Support - your support requests and the replies to them.
Error reports, if "Send error reports" is on (Settings → Help; on by default): where in the app a failure happened, the error code, the Ostrov version, iPhone or Mac and the system version. Not linked to your account and with no content: no recordings, transcripts, messages or tasks; identical failures are stored as one row with a counter, for up to 90 days after the last occurrence.
Bug reports you send yourself: the text, device model, Ostrov and system versions and, if you added them, a contact for the reply, a screenshot and the diagnostic log (emails, phone numbers and meeting titles are removed from it on the device). Kept for up to a year together with your account number so we can reply to you in Support.
Service data: push notification addresses, purchase records, website payment records, cloud usage counters, and the day you last used the cloud and from which devices (iPhone, Mac), for the total number of active users.
Payments
Ostrov Pro is paid for on the getostrov.ru website through the YooKassa payment service (NKO YooMoney LLC, Russia). Card details are entered on the YooKassa page and processed only by YooKassa - Ostrov never sees your full card number. From YooKassa, Ostrov receives the payment number and status, the amount and the plan, and, if you agreed to auto-renewal, a reference to the payment method saved at YooKassa and its mask (for example, "Visa •• 1234"). Turn auto-renewal off and the reference to the payment method is deleted after 7 days (until then you can turn auto-renewal back on with one tap). For the receipt, you enter an email or phone number on the payment page: the seller issues the receipt in "My Tax" (Moi Nalog) and sends it there no later than the 9th of the month following the payment. This contact is used only for the receipt and never for mailings; it is deleted 30 days after the receipt is issued, and while auto-renewal is on it is kept so that receipts for renewals can be sent. Payment terms are in the public offer.
Subscriptions purchased earlier in the app are paid for through Apple In-App Purchase: Ostrov never receives your card details - only a purchase confirmation signed by Apple.
Training the Ostrov model
Only with your explicit consent: "Help train the Ostrov model" is turned on with a separate tap and is off by default. When it is on, Ostrov sends anonymized examples: a text fragment from which names, companies, phone numbers, emails and links have already been removed on your device, and what was produced from it (tasks, a plan, an assistant's answer). Examples are stored separately from your account, under a random number, and are used only to train Ostrov's own model. Responses from third-party models connected with your own key are never used for training. You can withdraw your consent at any time: turn the option off and all examples you have sent will be deleted.
Advertising and tracking
There is no advertising, no third-party analytics and no tracking. Data is not sold or shared with third parties other than the services listed on this page, and only so that Ostrov features can work.
Transfers outside Russia
Data is stored in Russia. Only what Apple services need to work (purchases, Sign in with Apple, push notifications, iCloud Keychain) and what you yourself send to services you connect (your own model, your own speech recognition server) leaves the country.
Deletion
Delete a delegated task, project or conversation in the app and it will also be deleted from the cloud. Your profile has a "Delete account" option: it deletes from the Ostrov server your account, profile, Sign in with Apple link, delegated tasks, conversations and attachments, shared projects and any team you own, synced data and the encryption key fingerprint, bug reports, website payment records and the reference to a saved payment method (auto-renewal is turned off); a payment record whose receipt has not been issued yet is kept until the receipt is issued, since the law requires a receipt for every payment. Delete the app and all recordings are removed from your device.
Your rights
You have the right to know what personal data of yours is processed, to have it corrected or deleted, and to withdraw your consent to its processing. We respond within the time set by Law No. 152-FZ (up to 10 working days).
Contact
For questions and requests about your data, use the app: Settings → Support.