Privacy Policy

1. Controller and Processor Roles

We act as the data controller for your account data and for visits to our website. Content inside a workspace — recordings, transcripts, and tasks — is controlled by the workspace owner who invited its members; we process that content on their behalf to provide the Service.

2. Information We Collect

• Account data — name, email address, password (stored as a hash by our authentication provider), and your role in a workspace.
• Voice recordings — the audio you record, stored so it can be transcribed and (where the workspace owner enables it) played back.
• Transcripts and tasks — the text produced from your recordings, the tasks created from them, categories, and completion status.
• Workspace context — free-text notes a workspace owner adds to improve task sorting (for example, family names or business details).
• Device data — push notification tokens for your devices, and basic logs (IP address, timestamps) generated by hosting our Service.

We do not currently run third-party advertising or marketing trackers on the Service.

3. How We Use Your Information

• to provide the Service: transcribe recordings, create and sort tasks, sync lists, and deliver push notifications;
• to operate accounts and workspaces, including invites;
• to keep the Service secure and diagnose problems;
• to communicate with you about the Service;
• to comply with legal obligations.

4. Legal Bases

We process your data on the basis of contract (providing the Service you signed up for), legitimate interests (security, service improvement), consent where required, and legal obligation for records we must keep.

5. AI Processing

When you record a voice note, the audio and relevant workspace context are sent to Anthropic’s Claude API to produce a transcription and categorised tasks. Anthropic processes this content as our sub-processor, does not use it to train models, and does not retain API inputs beyond what is needed to provide the API.

6. Sub-processors

We use a small number of service providers to run Offload:

• Vercel (US) — application hosting;
• Supabase — database, authentication, and audio storage;
• Anthropic (US) — AI transcription and task categorisation;
• Apple (US) — push notification delivery (APNs).

7. International Transfers

Where data is transferred outside the UK, we rely on appropriate safeguards including the UK International Data Transfer Addendum and Standard Contractual Clauses entered into with our sub-processors.

8. Data Retention

• Recordings, transcripts, and tasks — kept until you or your workspace owner deletes them, or the workspace is closed;
• Workspace data after account closure — deleted within 30 days;
• Operational logs — kept for a short rolling window for security and debugging.

9. Your Rights

You have the right to access, correct, delete, and port your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email hello@offloadto.com. If your data is in a workspace controlled by someone else (for example, a family member who invited you), we may direct your request to them as the controller.

10. Complaints

You can complain to the UK Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

11. Children

Offload accounts and workspaces are for adults (18+). Workspace owners may invite members under 18 — for example their own children — and in doing so confirm they are the child’s parent or guardian or have that person’s consent. We do not knowingly collect data from children outside a guardian-managed workspace.

12. Security

Data is encrypted in transit (TLS) and at rest, access is restricted on a least-privilege basis, and audio is served through short-lived signed URLs. No method of transmission or storage is completely secure, but we work to protect your data proportionately to its sensitivity.

13. Changes to This Policy

We may update this policy from time to time; the “Last updated” date above shows the current version. Material changes will be flagged in the app or by email.

14. Contact

Privacy questions: hello@offloadto.com