Privacy Policy

Last updated 2026-07-31 · v2026-07-31

Exactly what Offli collects, where it goes, how long it is kept, and what never leaves your device.

Overview

This policy describes every category of personal information that Offli, Inc. ("Offli") collects through the Offli iOS app and the offli.app website, why we collect it, who receives it, how it is protected, and how to delete it. It is written to be complete: if something is not described here, we do not collect it.

Two facts frame everything below. First, Offli contains no advertising, no third-party analytics or tracking SDKs, and no data brokers — we do not sell or share personal information for advertising, and there is no advertising identifier collection. Second, your Screen Time content is processed on your device by Apple's framework; our servers receive only the narrow verification evidence described in the next section.

Screen Time: what stays on your device and what does not

Offli verifies challenges using Apple's Screen Time / Family Controls framework. The apps you select in Apple's picker are represented by opaque tokens that never leave your device in a form anyone — including Offli — can read. Your minute-by-minute activity, the full list of apps on your phone, what you look at, type, or do in any app, and any usage outside your challenge apps are processed only on your device inside Apple's sandboxed extension and are never transmitted to us.

For each day of a challenge you are in, your device reports a small verification record to our servers: whether monitoring ran that day, whether the day completed, whether your selected apps crossed your daily limit (pass/fail), and — when available — the highest coarse usage milestone reached that day for your selected apps, as a single minutes number (used to show your progress and compute "time reclaimed"; it is often absent). The report also carries your device identifier (see "Device information") and a timestamp, which we use to prevent cheating.

When you join a challenge, the app also stores a short text label describing your selection (for example, the name of the challenge's target app, such as "Instagram") and how many apps you selected. This label is provided by the app you use, not derived from Apple's tokens, and it describes only the challenge target — never your other apps.

Information we collect, by category

Account: username, email address, display name, an avatar color, and your password stored only as a bcrypt hash (we cannot read your password and never store it in plain text).
Phone number: a US phone number collected at signup, normalized to ten digits. It is used solely for account integrity — preventing duplicate and banned accounts — and for fraud enforcement. We do not use it for marketing and do not send marketing texts.
Eligibility: your country (US), your US state of residence, your age confirmation, your date of birth if you provide it, and the version and timestamp of the Terms you accepted.
Location: during onboarding and before each paid entry, the app resolves your GPS position to a US state on your device (reverse geocoding runs on the phone). Only the two-letter state code is sent to and stored by our servers. Your coordinates, address, and city never leave your device, and we never receive or store precise location.
Challenges and wallet: which challenges you join, entry fees, per-day verification records (described above), your wallet balance, and an append-only ledger of every balance change (entries, rewards, refunds, deposits, withdrawals) kept for financial auditability.
Device information: a device identifier derived from Apple's identifier-for-vendor (not the advertising identifier), plus device model and OS version. It is sent with app requests and used to bind verification reports to a device, prevent multi-account abuse, and enforce bans.
Social: friendships you form, achievements you earn, and your participation in challenges.
Notifications: reminders are scheduled locally on your device. We do not operate remote push notifications and do not collect push tokens. In-app notification messages (for example, "challenge settled") are stored in your account inbox until you delete your account.
Support and contact: if you email us or use the website contact form, we receive what you send — name, email address, subject, and message. The contact form also records the sending IP address and time in the resulting email as an anti-abuse measure. These messages are delivered through our own mail server (see "Who receives your information").

Identity and payment information (real-money play only)

Card and bank details never touch Offli's servers. Deposits use a Stripe-hosted checkout page, and withdrawals require a one-time Stripe-hosted identity and bank onboarding (Stripe Connect). Your payment credentials, legal name, date of birth, address, and taxpayer identification (where required) are collected directly by Stripe, which acts as our payment processor and is bound by its own regulatory obligations. Offli stores only Stripe's reference identifiers for your customer and payout accounts, deposit/withdrawal amounts and statuses, and a flag indicating whether your payout account is ready.

Where prize winnings meet legal reporting thresholds, we collect the information needed to issue tax forms (for example, IRS Form 1099) and provide it to tax authorities as required by law.

What we do not collect

No advertising identifiers, no third-party analytics, no tracking pixels or SDKs in the app or on the site.
No contacts, photos, messages, browsing history, or microphone/camera access.
No precise location — only the US state code, resolved on your device.
No Screen Time content: no app lists, no per-app timelines, no screenshots, no activity outside your selected challenge apps.
No card numbers or bank credentials (Stripe-hosted only).
No biometric data, and no data purchased from data brokers.

How we use information

Each category above is used only for the purpose it was collected: operating challenges and verifying results; determining and enforcing state and age eligibility; processing entry fees, prizes, deposits, and withdrawals; preventing fraud, cheating, and multi-account abuse; providing support; and meeting legal, tax, and financial-recordkeeping obligations. We do not use your information for advertising, do not sell it, and do not share it for cross-context behavioral advertising.

Who receives your information

Stripe, Inc. — payment processing, identity verification for payouts, and payout delivery, as described above.
Apple — the Screen Time framework runs on your device under Apple's own privacy protections; we receive only the verification evidence described above. App Store distribution is subject to Apple's privacy policy.
Our infrastructure — Offli runs on servers we operate; the database is not exposed to third-party analytics services. Transactional and support email is sent through our own mail server (mail.offli.app), not a third-party email marketing service.
Authorities — we disclose information where required by law (for example, tax reporting, valid legal process) and to enforce our Terms or protect users from fraud.

We have no other categories of recipients. We do not sell personal information and have not sold it; we do not share it for targeted advertising.

What other participants can see

Challenges are shared experiences, so other participants in a challenge (and friends you add) can see your username, display name, avatar color, participation status (for example, still in / finished), streaks and leaderboard placement, and when you joined. Your email address, phone number, state, balance, transactions, and verification details are never visible to other users.

If you create a public challenge, its title, description, and your display name as creator are visible to users browsing challenges, and to anyone who opens a share link for it.

How your information is protected

All traffic between the app, the website, and our servers uses TLS (HTTPS); the iOS app enforces Apple's App Transport Security with no exceptions for our API.
Passwords are stored only as bcrypt hashes. Login sessions on your device are stored in the iOS Keychain, marked device-only so they are never synced to iCloud and cannot be restored onto a different device.
Wallet and account records are protected by authenticated, per-user access checks; administrative actions are logged in an audit trail; financial routes are rate-limited; database access is parameterized against injection.
Payment credentials are held by Stripe, not us, which limits what any breach of our systems could expose.

No security program can guarantee that a breach is impossible, and we do not make that promise. If a breach affects your personal information, we will notify you and regulators as required by applicable state breach-notification laws.

Retention and deletion

You can permanently delete your account at any time from Settings. Deletion is immediate and removes from our production database: your account record (including email, phone, password hash, state, and birth date), wallet and transaction ledger, challenge participation and per-day verification records, notifications, friendships, achievements, referral records, and registered devices. Challenges you created continue for their other participants with the creator listing detached from you.

What survives deletion, and why: (a) audit-log entries record that actions occurred but are unlinked from any account identity once the account is gone; (b) if your account was banned for fraud or abuse, we retain the ban record (the banned email, phone, or device identifier) to keep the ban effective — a legitimate fraud-prevention interest; (c) Stripe retains its own transaction and identity records under its regulatory obligations, independent of us; (d) records we are legally required to keep (for example, tax filings already made) are retained for the legally required period.

Two practical notes, disclosed here and in the app: if you have a bank-withdrawable real-money balance, deletion is refused until you withdraw it (so a mistaken tap cannot destroy your money), and deleting your account during an active paid challenge forfeits your entry fee to that challenge's pool, as described in the Terms.

Your rights and choices

Depending on your state (for example, under the California Consumer Privacy Act and similar state privacy laws), you may have the right to know what personal information we hold about you, to correct it, to delete it, and to not be discriminated against for exercising those rights. Deletion is available directly in the app (Settings → Delete Account); for access, correction, or any other request, contact privacy@offli.app and we will respond within the period your state's law requires. Because we do not sell or share personal information for advertising, there is nothing to opt out of under "Do Not Sell or Share" provisions, and we treat universal opt-out signals accordingly.

You can revoke Screen Time permission at any time in iOS Settings (this stops verification and may cause active challenges to be recorded as unverified), and you can revoke location permission (which prevents entering challenges, since all Offli challenges require state eligibility verification).

Children

The Service is not directed to anyone under 18, we do not knowingly collect personal information from anyone under that age, and we delete any such account we discover.

Changes to this policy

If we change what we collect or who receives it, we will update this policy, bump its version date, and — for material changes — require renewed acceptance in the app before you continue. The current version is always at offli.app/legal/privacy.

Contact

Privacy questions and requests: privacy@offli.app.