Privacy statement

Last updated: 8 October 2026

Headroom is an app for a full head. You type or speak whatever is on your mind; Headroom picks out what needs attention now and holds on to the rest for you. You can start without an account. This is one statement for all of Headroom: the site, the app and the emails. Below you can read, briefly, what we process, why, and what rights you have.

What you put down can be personal or sensitive. We treat that text as confidential, use it to give you back what is in it and to make Headroom better, and never share or sell it for advertising.

Who is responsible

Headroom is a project of Richard Mos.

Contact: hello@getheadroom.app
Based in: The Hague, the Netherlands

For questions about your data or this statement, you can email the address above.

What data we process

the text you type or speak into the field, and what Headroom takes from it: what is needed now, what has its moment, what can wait, what is on your mind and what you can let go of (older accounts still see the four boxes of the first version);
your answer to the question whether your head feels lighter;
your email address, only if you leave it yourself when Headroom asks where it may bring something back to you, or if it is part of a personal invitation link;
an anonymous cookie (a random code, valid for two years), so that we can link your dumps to the same browser and you can see again what Headroom is holding for you. We also set a cookie with your language choice (valid for one year) and one with how you came to Headroom (valid for two years);
the language and time zone in which you use Headroom, so that Headroom works in your language and on your day;
which link you came in through (for example an ad or a shared link), so that we know which route to Headroom works;
technical metadata that comes with a visit automatically, such as the time and IP address. We only use these against abuse (for example a limit on too many requests from one address) and to keep an eye on costs.

We do not ask for a name or an account. Sometimes we ask whether you would be willing to pay for Headroom; that is a question, not a payment, and we only keep your answer.

Speaking

If you choose to speak, Headroom uses your browser's speech recognition. Your browser (for example Chrome or Safari) may send the audio to its own maker's service for this, under that browser's terms. Headroom only receives the text that comes out of it; we do not keep any audio.

If you come through an ad

If you arrive through an ad from Meta (Facebook or Instagram), Headroom loads the Meta pixel on that route. It tells Meta that the page was loaded, that you started typing and that you put something down for the first time, so that we can see whether the ad works. For this, the pixel may set cookies from Meta and process technical characteristics of your visit. Your text never goes to Meta. If you do not come through such an ad, the pixel is not loaded.

Bot protection

The dump field uses no bot check from a third party; there we work with a limit per address and per day.

What for and on what basis

We only use that data to make Headroom work (processing your text, holding on to what you put down, bringing you back by email to what a day received) and to measure whether Headroom helps, so that we can make it better. The basis is the service you ask for by using the app, and for the emails your own choice to leave an address.

To understand whether Headroom really helps, Richard Mos (the maker) can view usage data per visit: when and how often something was put down, how full it was, how much Headroom took from it and is still holding, which route someone came in through, in which language and time zone Headroom was used, and which emails were sent. The text you put down is not part of that. This happens in a protected admin environment, only by him, and only to improve Headroom. The basis for this is our legitimate interest: an app that is meant to give peace of mind can only be improved if we see what really happens. If you do not want this, you can object via the contact address above.

Email

If you leave an address, Headroom only emails you when something you put down gets its day: at most one thing per day, never a feeling, no newsletter. Every email has an unsubscribe link; you can also reply with "stop" or "unsubscribe". Unsubscribing changes nothing about what Headroom holds for you.

Who we share it with

We never sell your data and do not share it for advertising. We do use a few service providers to keep Headroom running:

Anthropic (Claude), our AI provider, to process your text (based in the US). Your text is not used to train AI models;
Fly.io, where the app and the database run (server in Amsterdam, company based in the US);
Resend for sending our emails, and Google / Gmail where we read your replies to those emails (both based in the US);
Meta, only if you came in through a Meta ad (see above).

These parties only process data on our behalf. For processing outside the EU, we rely on the standard safeguards these services offer for that.

How long we keep it

We keep your text, what Headroom took from it and your email address for as long as that is needed to make Headroom work for you and to improve the app. If you ask for deletion, we erase all the text you put down and your email address. What remains is an anonymous count, such as when something was put down, without content and without anything that leads to you. Data that is no longer needed, we delete.

Your rights

see which data we have about you;
have it corrected or deleted;
object to the processing;
file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

A request? Email the contact address above and we will sort it out as soon as we can.

Changes

If Headroom grows and more data comes into play, we will update this statement. The date at the top shows when that last happened.

Headroom is not a medical or care service. If you are really struggling, talk to your GP or to 113 Suicide Prevention (the Dutch helpline: free, day and night, 113.nl).