Privacy Policy

Offload ("we", "us", "our") operates the Offload mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.

By using Offload, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and name when you create an account via email, Google, Apple, or Microsoft sign-in.
• Profile Information: Timezone, locale, wake/sleep times, work hours, and preferred navigation app (Apple Maps, Google Maps, or Waze).
• Voice Recordings: Audio recordings you submit through the App for transcription and task extraction. Recordings are processed and not stored permanently on our servers after processing is complete.
• Text Input: Text-based entries you submit for task extraction.
• Family Information: Names, roles (e.g., spouse, child, friend), and dietary preferences (allergies, likes, dislikes) for household members you add.
• Locations: Addresses, labels, and place identifiers for saved locations.
• Calendar Data: Event titles, times, locations, and notes from connected calendar accounts.
• Preferences: Dietary preferences, scheduling constraints, recurring tasks, and a personal "About Me" description you may provide to help the AI understand your household.
• Subscription Information: Purchase history and subscription status processed through Apple's App Store.

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, and app version, collected through our analytics provider.
• Usage Data: Interactions within the App such as features used, screens viewed, and actions taken (e.g., recording started, plan created, meal selected). See Section 5 for details.
• Push Notification Tokens: A device-specific token used to send you notifications, stored on our servers and linked to your account.
• Location Data: With your permission, approximate location used to display local weather on your home screen. Location is not continuously tracked.

1.3 Information We Derive

• AI-Generated Summaries: Based on your usage patterns and preferences, our AI generates a profile summary to improve task extraction and scheduling recommendations.
• Calendar Intelligence: Patterns derived from your calendar history (up to 90 days) to improve scheduling suggestions.
• Travel Estimates: Calculated using your saved locations and calendar event addresses.

2. How We Use Your Information

We use the information we collect to:

• Provide Core Services: Transcribe voice recordings, extract tasks and events, generate schedules, suggest meals, and manage grocery lists.
• Personalize Your Experience: Tailor AI recommendations based on your family composition, dietary preferences, locations, calendar patterns, and stated preferences.
• Process Subscriptions: Manage your subscription status and entitlements.
• Send Notifications: Deliver task reminders, meal prep alerts, travel departure reminders, and plan completion updates.
• Improve the App: Analyze aggregated, de-identified usage patterns to improve features and fix issues.
• Provide Customer Support: Respond to your inquiries and troubleshoot issues.

We do not use your information to:

• Sell your personal data to third parties.
• Serve targeted advertisements.
• Train AI models on your personal data.
• Build profiles for purposes unrelated to providing the App's services.

3. How We Share Your Information

We share your information only with the following categories of service providers, solely to operate the App. We do not sell your data.

3.1 Audio Transcription

• Deepgram, Inc. receives your audio recordings to convert speech to text. Audio is processed in near-real-time and is subject to Deepgram's Privacy Policy.

3.2 AI Processing

• Google (Gemini) receives transcripts, calendar context, family member information, and preferences to extract tasks, suggest meals, and generate schedules. Data is processed under Google's API Terms.
• Anthropic (Claude) receives the same categories of data as a fallback processor when the primary AI is unavailable, and for schedule optimization. Data is processed under Anthropic's Privacy Policy.

Both AI providers process your data to generate responses and do not use API inputs to train their models.

3.3 Maps and Geolocation

• Google Maps Platform receives addresses and location pairs to provide geocoding (converting addresses to coordinates) and travel time estimates. Subject to Google's Privacy Policy.

3.4 Authentication and Database

• Supabase, Inc. provides authentication services and hosts our database. Your account data, profile, tasks, events, meals, and all App data are stored on Supabase's infrastructure. Subject to Supabase's Privacy Policy.

3.5 Subscription Management

• RevenueCat, Inc. manages subscription status and purchase verification. Your user identifier and purchase transactions are shared with RevenueCat. Subject to RevenueCat's Privacy Policy.

3.6 Analytics

• PostHog, Inc. receives anonymized usage events (e.g., "recording started", "plan created") along with your user identifier. PostHog does not receive the content of your recordings, tasks, meals, or personal details. Subject to PostHog's Privacy Policy.

3.7 Push Notifications

• Apple Push Notification Service (APNs) delivers notifications to your device. Apple receives your device token and notification content.

3.8 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Offload, our users, or the public.

4. Data Storage and Security

4.1 Where Your Data Is Stored

Your data is stored on servers located in the United States through our service providers (Supabase, Redis/Railway). If you are located outside the United States, your data will be transferred to and processed in the United States.

4.2 Security Measures

We implement the following security measures:

• Authentication tokens are stored in your device's secure enclave (iOS Keychain) and are not accessible to other apps.
• API communications use HTTPS/TLS encryption in transit.
• Database access requires authenticated API requests verified with cryptographic signatures (ES256 JWT).
• Webhook payloads are verified using timing-safe signature comparison.
• Demo access tokens are generated using cryptographically secure random bytes.
• Administrative and development endpoints are disabled in production.

4.3 Local Device Storage

Certain data is stored locally on your device:

• Authentication tokens (encrypted via iOS Keychain).
• Theme preference, onboarding status, and usage counters (unencrypted local storage).
• Cached profile and schedule data for offline access (device-encrypted storage).
• Biometric authentication preference (stored locally, never transmitted to our servers).

5. Analytics and Tracking

We use PostHog to collect usage analytics. The following types of events are tracked:

• App interactions: recording started/stopped, plan created, schedule viewed, task delegated, meal selected, grocery list opened.
• Subscription events: paywall shown, subscription purchased/restored/cancelled.
• Onboarding events: onboarding completed, navigation app selected, partner invited.
• Feature usage: voice dump completed, text offload submitted, plan reoptimized, biometric enabled/disabled.

We do not use cookies. We do not use cross-app or cross-site tracking. We do not build advertising profiles.

6. Data Retention

• Account Data: Retained for as long as your account is active. When you delete your account, all associated data is permanently deleted, including family members, locations, plans, tasks, events, meals, grocery items, preferences, calendar connections, and notification history.
• Voice Recordings: Audio files are processed for transcription and then deleted. We do not retain raw audio files after processing.
• Transcripts and Plans: Retained as part of your account data until you delete your account.
• Demo Data: If you use the App without creating an account (demo mode), your demo data is automatically deleted after 24 hours.
• Analytics Data: Aggregated, de-identified usage data may be retained indefinitely for product improvement.
• Cache Data: Server-side caches expire automatically (5 minutes to 24 hours depending on the data type).

7. Your Rights and Choices

7.1 Access and Portability

You may request a copy of your personal data by contacting us at the email address below. We will provide your data in a standard, machine-readable format within 30 days.

7.2 Deletion

You may delete your account at any time through the App's Profile settings. Account deletion is permanent and removes all your data from our servers. This action cannot be undone.

You may also request account deletion by contacting us at the email address below.

7.3 Correction

You may update your profile information, family members, locations, and preferences at any time through the App.

7.4 Opt-Out of Analytics

You may request to opt out of analytics tracking by contacting us at the email address below. Note that this does not affect the App's core functionality.

7.5 Notification Preferences

You may disable push notifications at any time through your device's Settings app or through the App's notification preferences.

7.6 Permissions

You may revoke microphone, calendar, or location permissions at any time through your device's Settings app. Revoking permissions may limit certain App features.

8. Children's Privacy

Offload is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email address below, and we will delete that information.

Family members added to the App (including children) are managed by the account holder. The account holder is responsible for obtaining appropriate consent before adding family member information.

9. Canadian Privacy (PIPEDA)

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

• The right to access your personal information held by us.
• The right to challenge the accuracy and completeness of your information and have it amended.
• The right to withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions).
• The right to file a complaint with the Office of the Privacy Commissioner of Canada.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Do Not Sell: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

To exercise these rights, contact us at the email address below.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation:

• Legal Basis: We process your data based on your consent (account creation, permissions granted) and our legitimate interest in providing and improving the App.
• Data Transfers: Your data is transferred to the United States. We rely on Standard Contractual Clauses and our service providers' compliance frameworks for lawful data transfers.
• Additional Rights: Right to restriction of processing, right to object to processing, and right to lodge a complaint with your local data protection authority.

12. Third-Party Links

The App may contain links to third-party services (e.g., navigation apps, calendar providers). We are not responsible for the privacy practices of these services. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us at:

15. Summary of Data Practices