Overshot helps a household understand the weather, climate and health risks around its home and make a plan. To do that it needs some personal information, and some of it is sensitive. This policy says what Overshot collects, why, who receives it, how long it is kept, and what you can do about it. Overshot is a product and brand of Land Supply, Inc., a Delaware corporation (c/o Corporation Service Company, 80 State Street, Albany, NY 12207-2543). In this policy, "we," "us" and "Overshot" mean Land Supply, Inc. This policy covers the Overshot app. The Overshot website has its own privacy policy.
small record of how the app is used.
app has no advertising or cross-app tracking software.
on powered medical equipment, relies on prescription medication or needs help moving, and any medical papers you put in the Vault. The section called Consumer health data covers it.
your Vault files.
Account. Your email address (or the private relay address Apple gives us if you choose that), the name you give us, and how you sign in: email and password, Apple, or Google. Before you sign up, the app starts an anonymous session so your place and plan are kept if you sign up later. An anonymous session has an identifier and no email.
Places and addresses. The addresses you add, such as your home, a place you might evacuate to, or a relative's home. For each we keep the address as you entered it and as formatted, its coordinates, city, state, county and census tract, and anything you add: a nickname, notes, a phone number, the type of home, whether there is a vehicle, and how many adults, children and infants live there. When you type an address, the characters are sent to our mapping provider to suggest and find it.
Precise location from your phone. Overshot asks your phone for your exact position only when you ask it to: when you tap Use my location while adding a place, when you use the map button that finds where you are, and when you check in or press Share where I am. Sharing your position at check-in is on by default and you can turn it off in Settings. Overshot asks for location only while the app is open. It does not track you in the background.
Household members and roles. The people in your household, the role each has, and invitations you send or accept. For a child, an adult in the household can add a name and a birth year. Overshot stores nothing else about a child.
Circle contacts. The people you add to your Circle: a name, and a phone number or email address, entered by you or chosen from your phone's contacts, and how each person relates to you. If you choose to import from Contacts, the app reads your address book on your phone so you can search and pick. Your address book is not uploaded. Only the people you pick are sent to Overshot. We do not message the people in your Circle unless you send an invitation or a request.
Check-ins and safety status. When you check in, mark that you are okay, or report that power is out, Overshot records the status, the time, your position if sharing is on, and any words you add. People in your Circle and household you have connected with can see it.
Answers about your household. Answers you give about your home and the people in it, such as how you heat and cook, whether there is backup power, a sump pump, pets, or a vehicle, and who is responsible for a job. Some answers are about health: whether anyone depends on powered equipment, relies on prescription medication, or needs help moving. You can skip any of them, and you can choose whether others in your household can see an answer.
During setup, Overshot may ask whether anyone you are planning for has a harder time with heat or bad air (for example asthma or a lung condition, or a young child or older adult). That answer stays on your phone. It is not sent to Overshot. The app uses it on the phone to choose which preparations to show first. Setup also records which priorities you choose, which can include health, and who you want to share your plan with.
Vault documents, photos and records. Documents and photos you put in the Vault, such as identification, insurance, medical, financial and legal papers, and photos of your home or belongings. Also the details you type about a record, such as an insurer or a due date, and secret values such as a policy or member number. The Vault section below says how these are encrypted.
Purchases. When you start a membership, Apple handles payment. Overshot and our subscription service, RevenueCat, receive the purchase record: which membership, its dates, whether it is a trial, and whether it renews. We do not receive your card number or Apple payment details.
Notifications. If you allow notifications, your phone's push token, its platform, the device name and the app version, so we can send alerts to that phone.
How the app is used. Overshot keeps two records of app use. The first is six moments: opening the app from a notification, marking a preparation done, saving guides to the phone, giving a check-in, opening the app with no network, and accepting an invitation. The second is a funnel of screens and actions such as steps in setup, opening an alert, marking a preparation done or later, asking a question, and starting a membership. Records carry the action, the time, the app version, the kind of phone and, for some, a place identifier, with identifiers and fixed values only. They never contain an address, a name, coordinates, your answers to health questions, Vault contents, or anything you typed.
Questions to Ask. Ask Overshot answers questions about your place. We keep a count of how many questions an account asks each day. When Ask cannot answer a question, we keep the question's text (up to 500 characters), the reason, and the place it was about, so we can improve the app.
Documents you open and secrets you view. Each time a Vault file is opened or a secret is shown, we record the time, your account, your internet address and the type of phone.
your plan.
headline on Today.
you choose.
invitations you send.
and fix problems.
Overshot uses a small number of companies to run the service. They handle your information for us and under their own terms, and they may use it only to provide their service to us.
| Company | What it receives | Why |
|---|---|---|
| Supabase | Everything stored in your account: account, places, household, Circle, check-ins, Vault files and records, app records | Database, sign-in, file storage and server functions |
| Anthropic | For Ask: your question, and what the question needs from your account, such as readings for your place, your plan, active alerts, the names of the people in your Circle and household and how you filed them, and the household answers you gave. For the Today headline: facts about conditions in your area and, for some households, which preparations are due and when. The headline never receives your name, your address or the name of your place | Writes Ask answers and the one-sentence headline on Today |
| RevenueCat and Apple | Your account identifier, the purchase record and the membership status | Subscriptions and billing |
| Apple and Google | Your sign-in, if you use Sign in with Apple or Sign in with Google | Sign-in |
| Stadia Maps | Addresses you type, and the coordinates and addresses of places for driving routes | Address search, geocoding and driving directions |
| Google (Google Maps Platform) | A location point for an area that includes your place, sent for each saved place. It is the place's own coordinate today. Google receives no name, email or account identifier | Hourly air quality and daily pollen readings |
| U.S. Census Bureau | Coordinates of a place | Finds the county and census tract |
| Public weather and map services | The coordinates of a place, the map area you view, and your internet address, as with any website. This includes the National Weather Service, Open-Meteo, OpenFreeMap and the elevation data from Amazon Web Services | Forecasts, alerts and map tiles |
| Expo, Apple and Google | Your push token and the text of a notification | Delivers notifications and app updates |
| Postmark | The email address and text of an email we send | Sends email |
The weather, alert, climate and health sources we read, such as NOAA, the National Weather Service, the CDC and FEMA, send us public data. They do not receive information about you from us, other than the place coordinates described above.
We may also disclose information when the law requires it, to protect the rights or safety of people, or in a sale or reorganization of the company, in which case we will tell you before your information is transferred.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use advertising software, and the app does not track you across other companies' apps or sites.
The Vault keeps documents and photos as encrypted files. When you add a file, our server encrypts it with a new random key for that file (AES-256-GCM), and then encrypts that key with a master key. Only the encrypted file is stored in Supabase storage. The master key is kept as a secret in our server environment, apart from the database. Secret values, such as a policy number, are encrypted the same way before they are stored.
Overshot encrypts the Vault on our servers and does not use end-to-end encryption. When you open a file, our server decrypts it and sends it to your phone over an encrypted connection. We do not keep a decrypted copy of the file after it has been sent. Because our server has the master key, Overshot is able to decrypt your files.
On your phone, the Vault is locked with Face ID or your phone's passcode. If you keep a record on the phone for use with no network, its files are encrypted again with a key kept in your phone's secure storage, and they are removed when you sign out.
The details you type about a record, such as a title, an insurer's name, or a date, are stored as ordinary database fields under the same access controls as the rest of your account.
By default a record you save is shared with the people you live with. You can keep a record private when you save it and later.
Vault files and records, and questions Ask could not answer: until you delete it or delete your account.
When you delete your account, we delete the membership records we keep about you. Apple and RevenueCat may keep their own records as required by law and by their terms.
delete your account.
can remain in a backup until that backup expires.
When you delete your account, we delete your places, household, contacts, Circle, check-ins, answers, Vault files and records, app records tied to your account, and your sign-in. If you signed in with Apple, we also revoke Overshot's connection to your Apple ID. Information that other people entered about you, such as your name and number in their Circle, belongs to their accounts and stays there. If you were a member of a household, records you created are deleted with your account.
You can see and change your places, household, Circle, answers and Vault in the app at any time. You can turn notifications and check-in location sharing off. You can delete your account in the app: open Settings and choose Delete account. The membership screen has the same option. If you cannot use the app, write to hello@joinovershot.com and we will help.
To ask for a copy of your information, to correct it, or to ask us to delete it, use the app where you can, or email hello@joinovershot.com. We may need to confirm it is you by asking you to write from the email on the account. Cancelling a membership is done in App Store subscriptions, and does not delete your account.
This section applies to California residents and is part of this policy.
What we collected in the last 12 months, and why.
| Category | Examples | Source | Why |
|---|---|---|---|
| Identifiers | Email, name, account ID, push token, internet address | You, your phone | Run the account, sign in, send alerts |
| Customer records | Name, phone numbers and emails of Circle contacts, addresses | You, people who invite you | Plan and Circle features |
| Precise geolocation (sensitive) | Home and other addresses, your phone's position when you allow it | You, your phone | Hazards for your place, check-ins |
| Health information (sensitive) | Powered medical equipment, prescription medication and help moving answers, medical papers in the Vault | You | Tailor preparations, store papers you choose |
| Account log-in and Vault secrets (sensitive) | Your sign-in details, and secret values you store such as policy numbers, member numbers and a Social Security number | You | Run the account, store what you choose |
| Commercial information | Membership, trial and renewal status | You, Apple, RevenueCat | Memberships |
| Internet or app activity | Screens, actions, alerts opened, app version | Your phone | Improve Overshot, see whether alerts work |
| Photos and documents | Vault photos and files | You | Keep what you choose |
Who receives it. We disclose these categories to the service providers in the table above for the reasons given there. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We use sensitive personal information only to provide the service you asked for.
Your rights. You can ask us to tell you what personal information we collected, used and disclosed and to give you a copy, to delete it, and to correct it. We will not treat you differently for using these rights.
How to ask. Use Delete account in the app, or email hello@joinovershot.com with "California request" in the subject. We will confirm your request within 10 business days and answer within 45 days, and we may take up to 45 more days and tell you why. To protect your account we match your request to the email on it. An authorized agent can submit a request for you with your written permission, and we may check with you directly. If we decline a request, you can ask us to review it by replying to our answer.
This section applies to consumer health data under the Washington My Health My Data Act, and similar laws in Nevada and Connecticut. It is part of this policy.
What we collect. Whether someone in your household depends on powered medical equipment, relies on prescription medication, or needs help moving; a note that nobody does; the health priority you may choose in setup; medical papers, insurance cards and photos in the Vault; and anything you type in notes or Ask that is about health. The answer about heat, bad air, asthma or lung conditions in setup stays on your phone. We do not receive it.
Where it comes from. From you. We do not buy health data and we do not infer it.
Why we collect it. To tailor outage, evacuation, heat and smoke preparations, to flag what has to come along in an evacuation, to keep papers you want available, and to answer your questions in Ask.
Consent. We collect consumer health data only when you enter it, after the app asks for your consent at that point. You can say no and still use Overshot. Sharing it with anyone beyond our service providers needs a separate consent from you. We do not do that now.
Who receives it. Supabase stores it. If you ask a question in Ask, Anthropic receives the household answers needed to write the answer. Nobody else receives it, and we do not sell it. Others in your household can see an answer only when you let them.
Your rights. You can confirm whether we collect your consumer health data, see it and the list of the third parties that receive it, withdraw consent, and delete it. You can change or delete a household answer or a Vault record at any time in the app, or delete your account. To ask for anything else, email hello@joinovershot.com. We answer within 45 days. If we decline, you can appeal by replying to our answer, and we will answer your appeal within 45 days. If you are still not satisfied, you may contact your state attorney general.
Overshot is for people 13 and older. It is not directed to children under 13 and we do not knowingly collect information from them. An adult in a household may add a child to the household with a name and a birth year. A child has no account. If you think a child under 13 has an account, write to hello@joinovershot.com and we will delete it.
Overshot is also available inside ChatGPT, from OpenAI, and inside Claude, from Anthropic. This section covers that connector. The sections above cover the Overshot app. The connector needs no account.
What Overshot receives. The place you ask about (a street address, a city and state, or a ZIP code), the tool the assistant calls, and which assistant called it, ChatGPT or Claude. The assistant sends these when it answers your question. Your conversation, your name and your account with the assistant stay with the assistant.
What Overshot keeps. To answer, Overshot finds the place on a map and works out its county and census tract. It keeps those two, and a record of each call: the date and time, the assistant, the tool, the county, whether the call worked and how long it took. This lets us count calls by tool and county. Overshot keeps no address, no account, no IP address and no conversation. The address you typed exists only while the request runs. The network address of a request is used to limit how fast one connection can call. Overshot's records never include it. The limit is counted under a code made from the address with a secret key. The key changes each day. Each count is deleted within a day of its last use. Supabase, which hosts Overshot, keeps request logs that include the network address, for a limited period under its own policy, and Overshot does not copy them.
Why. To answer your question from the right county and tract, to keep the service running and fair to everyone using it, and to see which tools are used so we can improve them. Overshot does not use this for advertising or for profiles of people.
How long. Call records are kept for 13 months and then deleted. An answer saved for a county or tract is kept for the day it was read and then replaced.
Who it is shared with. No one. Two services do part of the work. Stadia Maps, our geocoder, receives the place you asked about so it can find it. Supabase hosts the database. The assistant you are using receives Overshot's answer and handles your conversation under its own terms and privacy policy.
Age. The connector is for people 13 and older.
Contact. Questions about the connector, or a request to look into a call record: hello@joinovershot.com
If we make a material change, we will update this page and the date at the top and tell you in the app or by email before it takes effect. The previous version stays available on request.
Questions about this policy, or a request about your information: hello@joinovershot.com. By mail: Land Supply, Inc., c/o Corporation Service Company, 80 State Street, Albany, NY 12207-2543.