Privacy policy

Offload is an iPhone app that helps a household share its mental load: tasks, appointments, lists, useful contacts, and an assistant that understands what you type, dictate or photograph. This policy explains, in plain language, what data we process, why, with whom, for how long, and how to exercise your rights.

What we don’t do: no advertising, no selling of data, no advertising trackers or audience analytics tools in the app.

The controller is Jean-David Viala, individual (registration in progress), contact details provided to the host (French law no. 2004-575 of 21 June 2004, article 1-1 II) (‘Offload’, ‘we’). Contact for any question about your data: privacy@theoffloadapp.com. Data Protection Officer: none appointed.

• Email address and password (the password is handled by our authentication provider and is never readable by us); or the identifier provided by Sign in with Apple or Continue with Google if you choose one of them. With Apple you can hide your address (relay address).
• Your profile in the household: displayed name, colour or emoji, photo (optional), birthday (optional).
• When you ask to join a household, your email address is shown to the person who approves the request, so they know who is joining.

What you and your household members enter: tasks, subtasks and notes, lists, appointments (including their location), useful contacts (doctor, school, tradesperson…: name, phone, email, address, notes, birthday), and a log of the household’s last 30 days of activity (‘X completed a task’).

Household members without an account, usually children. You can add a person by first name and nickname and, if you wish, surname and date of birth (all optional). These let the assistant understand ‘pick up Oscar’ and work out a school year or birthday.

Household profile (optional, every question can be skipped): children, vehicles, pets, home, and health follow-up (glasses, dentist, ophthalmologist, orthodontics, regular treatment). It is used to suggest the year’s deadlines.

Offload is not a health app, but some information you put in it may reveal health matters: a doctor’s appointment, a ‘Health’ category, a household-profile answer about health follow-up, or a fact remembered by the assistant (‘Lily is allergic to peanuts’). This is health data under the GDPR (Article 9). It is processed only because you choose to enter it, and is sent to the AI only with your explicit consent (section 4). On the Lock Screen, widgets and Live Activities can hide the title of health appointments (‘Health appointment · 16:30’).

• Your typed or dictated messages to the assistant and its replies (conversations).
• Photos you give it (school letter, mail, screenshot). A photo sent in a conversation is analysed by the AI, then kept in that conversation (private storage, same access rights as the conversation: the thread of a task or appointment is shared with the household). It is only added to a task or appointment, as an attachment (15 MB maximum), if you agree. A screenshot shared from another app is not kept. Stored photos are not yet erased automatically, even when the conversation or the account is deleted: email privacy@theoffloadapp.com to have them erased.
• The household memory: facts the assistant remembers from your conversations (routines, school, preferences, health…). Some are extracted automatically; you can view, correct and delete them in Settings › Assistant › ‘What the assistant remembers’.
• Your custom instructions for the assistant (tone, preferences).
• If you rate an assistant reply (thumbs up/down) and send feedback: your comment, an optional screenshot and the conversation context. This feedback is read by the publisher to improve the assistant.

When you dictate, transcription is performed by Apple’s speech recognition service. Depending on the screen and your iPhone, it happens on the device, or the audio is sent to Apple’s servers to be transcribed. Offload only receives and keeps the transcribed text, never the audio recording.

• Calendar import: if you turn it on, Offload reads the calendars you choose in order to display them. It also sends our servers a private copy of the ‘yesterday → 30 days ahead’ window of those calendars (title, day, times, location, video-call link, calendar name — never notes or attendees) so that the assistant and your briefs take them into account. Only you can read this copy; it is emptied when you turn the import off.
• Sync to phone: if you turn it on, your Offload appointments are written into your iPhone’s calendar, and therefore also to that calendar’s provider (iCloud, Google, Outlook…).
• Contacts: Offload reads your phone’s address book, on the device, so you can import the contacts you choose.

• When you search for an address, the text you type is sent, directly from your phone, to OpenStreetMap-based search services (Photon, with Nominatim as a fallback).
• Your home address (optional) stays on your phone. To work out when to leave for an appointment, the app sends the coordinates of home and destination to a route planner (OSRM) and those of the destination to a weather service (Open-Meteo). The calculated departure time is stored on our servers to trigger the Live Activity (‘Leave · 14:20’), then deleted two days later.
• Offload does not use your phone’s location services.

• Your devices’ notification identifiers (Expo, Apple), widget and Live Activity identifiers, and a log of notifications sent (title, text, recipients).
• Daily AI usage counters (to enforce limits).
• Technical logs from our hosting provider (requests, errors), kept for 7 days at most.
• When the app updates, your device contacts Expo’s servers (IP address, app version).
• The Sentry crash-reporting tool is in the code but inactive: no data is sent to it. If it is turned on, this policy will be updated first.

If you forward an email to your assistant address (assistant@theoffloadapp.com or your household’s address), it is received by Cloudflare’s email routing service, then passed on to our servers. We store the sender, their name, the subject, a 200-character excerpt and the message identifier, then the suggested card (summary, details, draft reply). The content is only sent to the AI (Google Gemini) if every adult in the household has accepted the AI assistant. Emails whose authenticity cannot be verified are ignored. ‘My email addresses’ lets you link other addresses with a code, without a password. Offload does not ask for your mailbox password. This information is kept for as long as the household exists and erased with it; no shorter period applies today.

We make no decision with legal or similarly significant effects about you on a solely automated basis. The assistant suggests; you decide.

What is sent to Google. When the assistant is on, we send to the Google Gemini API: your messages and dictations, the photos you give it, and useful household context (tasks, appointments — health included —, lists, first names, household profile and memory, excerpts of your imported calendar).

Nothing is sent without your consent. The AI assistant is off until you accept it. Our server checks that consent before every request, not only the app. A household’s automatic briefs and suggestions only start once every member with an account has consented. You can withdraw your consent at any time in Settings › Assistant; Offload still works without AI (tasks, calendar, lists, reminders, simple commands).

What Google does with it. Google acts as Offload’s processor for this service. Under the Gemini API terms that apply, whatever the tier, to a publisher based in the European Economic Area such as Offload, Google does not use your prompts or responses to improve its products or train its models; it keeps them for 55 days solely to detect abuse.

AI limitations. The assistant can make mistakes. Check what it suggests, especially dates and anything health-related. It does not give medical advice (see the Terms).

Another AI provider (Groq) appears in the code as a fallback; it is turned off and receives no data.

Your household members. A household’s content (tasks, lists, appointments, contacts, people, profile, assistant memory) is visible to all its members. Each person joining a household is approved by its creator. Exceptions: your free-form conversations with the assistant are private; threads attached to a task or appointment are shared with the household, like the item itself; the copy of your phone calendar is private.

Our processors (they process data on our behalf, on our instructions):

Third-party services contacted directly by your phone (they receive your IP address and the request; we send them nothing else): Photon (komoot) and Nominatim (OpenStreetMap Foundation) for address search; OSRM for journey time; Open-Meteo for expected rain. Google, if you choose ‘Continue with Google’ to sign in.

The publisher does not access your data day to day. It reads the feedback you voluntarily send about the assistant (2.4) and, occasionally, technical data to fix a fault.

We do not sell or rent your data, and do not share it for advertising.

Some processors are based outside the European Union: Supabase (Singapore and the United States depending on the service), Google, Expo, Apple and Cloudflare (United States). These transfers rely on the European Commission’s Standard Contractual Clauses included in their data processing agreements and, where applicable, the EU–US Data Privacy Framework (and its UK extension). You can ask us for a copy of the applicable safeguards.

Deleting your account. From Settings › Data & privacy › Delete my account. If nobody else is in your household, the household and all its content are erased. If other members remain, your member profile, your devices, your preferences and the private copy of your calendar are erased; what you created for the household (tasks, lists, appointments) stays with the household, unlinked from you. What may remain today: stored photos and files (photos sent in a conversation, attachments, profile photo), feedback sent about an assistant reply along with the exchange concerned, your private conversations if other members remain in the household, and your AI usage counters; email privacy@theoffloadapp.com to have them erased.

• Encrypted connections (HTTPS/TLS); data encrypted at rest by the hosting provider.
• Per-household isolation: row-level security policies are active on every database table; a member only sees the data of their own households.
• Server functions check the caller’s identity or an admin secret themselves; AI consent is checked server-side; AI usage is capped per person per day.
• No advertising or audience-analytics SDK.
• Profile photos can be accessed via their address, which cannot be guessed.

No system is infallible. If a data breach is likely to put you at risk, we will tell you and notify the supervisory authority as required by the GDPR.

Offload is for people aged 18 and over (see the Terms). Children do not have accounts: adults in the household may, if they wish, enter a child’s first name and information about them, under their responsibility as parent or legal guardian. Enter only what is necessary.

Who is responsible? Jean-David Viala, individual (registration in progress), publisher of Offload, contact details provided to the host (French law no. 2004-575 of 21 June 2004, article 1-1 II). Contact: privacy@theoffloadapp.com.

• If you sign up to hear about the launch: your email address; the language of the page; if you tell us, your phone (iPhone or Android); the page and position of the form; the campaign labels of the link that brought you here (for example ‘linkedin’) and the name of the site you came from, without the page itself; the country, inferred from your connection by our host; the date and time you signed up and confirmed, and the version of the wording shown. If you tick them on the confirmation page: whether you’d like to test the beta (and whether there are two of you), and whether you’d like two tips after launch.
• To prevent abuse: a fingerprint of your IP address, recalculated every day, which can’t be linked to you without our key, deleted after 48 hours.
• If you email us (contact@, support@, privacy@): your address, your message and our replies.
• When you visit the site: your IP address and the technical details of the request are processed by our host, Cloudflare, to serve and protect the site. We only see overall figures (visits per page and per country), never who you are.

What we send you. An email to confirm your address; then, once confirmed, a welcome email, one update before launch, then the link on launch day. If you chose ‘Android’: an email on launch day, then an email when the Android version is ready. If the launch date changes, a short email to tell you. Nothing else without your say-so: the beta and the post-launch tips only if you asked for them. We add no tracking pixels or tracked links to our emails. Our email provider (Brevo) may still technically record opens and clicks until this tracking is switched off on our account.

What we don’t do. No cookies, no tracker-based analytics, no social media buttons, no profiling. We never sell or rent your address, and only share it with the providers listed below.

• Supabase (database, servers in Sweden): storing the list; service provided by Supabase Pte. Ltd. (Singapore). Transfers covered by the standard contractual clauses in its data processing agreement.
• Brevo (Brevo SAS, formerly Sendinblue, France): sending waiting-list emails; data hosted in the European Union.
• Cloudflare, Inc. (United States): hosting the site and the form, receiving emails sent to our addresses. Transfers covered by Cloudflare’s data processing addendum and the EU–US Data Privacy Framework (and its UK extension), under which Cloudflare is certified.
• Google (Gmail): storing our email exchanges (messages sent to contact@, support@ and privacy@ are forwarded by Cloudflare to our Gmail inbox).
• Apple (TestFlight), only if you test the beta: Apple then processes your data under its own privacy policy.

• Unconfirmed sign-up: deleted within 30 days.
• Confirmed sign-up, iPhone or phone not given: until 24 February 2027 (three months after the last launch-related emails), unless you unsubscribe first.
• Confirmed sign-up, Android: until three months after the email announcing the Android version, and no longer than three years after you signed up.
• IP fingerprint: 48 hours.
• After you unsubscribe: your sign-up is deleted; we only keep a fingerprint of your address for 3 years, so we never email you again.
• Email exchanges: 3 years after our last exchange.

Age. The waiting list and Offload are for adults (18 and over).

theoffloadapp.com sets no cookies and uses no advertising or analytics trackers. We only know the number of visits per page and per country, calculated by our host Cloudflare from the requests it receives, without storing anything on your device. If you close the bar suggesting the site’s other language, that choice is kept in your browser (local storage) only so it isn’t shown again; you can clear it in your browser settings. The fonts you see are your device’s own, except one font for numbers hosted on our own domain: no request is sent to Google Fonts or any other service.

• Turn the AI assistant on or off: Settings › Assistant.
• Hide titles on the Lock Screen: Settings › Notifications.
• Turn off notifications or daily summaries: Settings › Notifications, and your iPhone’s settings.
• Export your data or delete your account: Settings › Data & privacy.
• Leave the waiting list: the link at the bottom of any of our emails.
• Anything else: privacy@theoffloadapp.com.

You can access, correct or delete your data, receive a copy, object to its use, ask us to restrict it, withdraw your consent at any time (without affecting what was done before) and, under French law, leave instructions about your data after your death. Email privacy@theoffloadapp.com; we reply within one month. You can also complain to the CNIL (France), to the Information Commissioner’s Office (ico.org.uk) if you live in the UK, or to the authority in your country.

Directly in the app: edit or delete any item; view and correct the assistant’s memory; withdraw AI consent (Settings › Assistant); delete your account; export your data (Settings › Data & privacy › Export my data). The export doesn’t yet include conversations, the assistant’s memory, household people and profile, preferences or the calendar copy: for a full copy, email privacy@theoffloadapp.com.

The date at the top shows when this page was last updated. If a significant change affects the waiting list, we’ll let you know by email; if it affects the app, in the app.

Back to top