← Back to home
Legal & Privacy

Privacy Policy

Last updated: October 2026 • Effective Date: October 13, 2026

1. Place-Based Privacy & Philosophy

At OFFLINE, privacy is fundamentally integrated into our product architecture. We believe that the moments you capture and the places you visit belong to you.

Unlike conventional social networks that exploit continuous GPS telemetry and track user movement histories, OFFLINE is built around discrete physical places. We do not track your continuous background location, nor do we build a persistent travel history of your device. Your location is only read on-demand when you explicitly decide to anchor a Trace to a spot or when you browse nearby places on the map.

2. Data Controller

The Data Controller responsible for the processing of your personal data under the European General Data Protection Regulation (GDPR) and international privacy laws is the OFFLINE Project.

For any inquiries, rights requests, or questions regarding this Privacy Policy, you can reach our team directly at info.offlineadd@gmail.com.

3. Information We Collect

We believe in strict data minimization and only collect information required to operate the service:

  • Waitlist & Early Access Information: Email address, optional full name, city, and social media handle (e.g., Instagram/Twitter) submitted when registering for access waves.
  • Account Credentials & Profile: If an account is created, your username, display name, email, profile photo (avatar), and bio.
  • User Content (Traces & Memories): Photographs, videos, captions, timestamp, spot tags, reactions, and comments you choose to create or publish.
  • Approximate Location: Geolocation coordinates captured only at the specific moment you choose to create a Trace or query nearby Traces.
  • Technical & Diagnostics: Anonymous crash reports, device model, operating system version, and essential telemetry required to keep the application stable and secure.

4. Location Data Policy

Because OFFLINE is a location-anchored experience, we treat location data with the highest sensitivity:

  • On-Demand Only: Location permission is used strictly while the app is active and you trigger a location-based action (e.g., taking a photo to anchor a Trace or centering the 3D globe).
  • No Background Surveillance: We do not track your location in the background when the app is closed or minimized.
  • No Location Reselling: We never sell, monetize, or license your location coordinates to data brokers, ad networks, or marketing syndicates.

5. How We Use Information & Legal Bases (GDPR)

We process your personal data under the following legal bases:

  • Performance of a Contract: Providing core features, managing your account, verifying waitlist invitations, and delivering your Traces on the map.
  • Consent: Accessing your device camera, photo gallery, and location services when you explicitly grant system-level permissions.
  • Legitimate Interests: Protecting the safety of the community, enforcing our Terms of Service, preventing fraud or spam, and securing our infrastructure.

6. Third-Party Service Providers

We work exclusively with vetted, industry-leading infrastructure partners who meet rigorous privacy and security standards:

  • Supabase: Cloud database, authentication, and encrypted storage with Row Level Security (RLS) policies. Data is encrypted both in transit (TLS 1.3) and at rest (AES-256).
  • Mapbox: Vector map rendering, satellite imagery, and 3D globe visualization.
  • Apple (App Store & APNs) / Google (Play Store & FCM): App distribution, system updates, and optional push notifications.

We do not allow any third-party providers to use your personal information for their own marketing or advertising purposes.

7. Data Retention & Account Deletion

We retain your personal data only for as long as your account is active or as necessary to provide the service.

Your Right to Deletion: You can delete your account and associated data at any time directly in the app via Profile > Settings > Delete Account, or by submitting an email request to info.offlineadd@gmail.com. Upon account deletion, all personal profile records and user traces are permanently purged from our active databases within 30 days.

8. Your Rights (GDPR & CCPA)

Under applicable privacy laws, including the GDPR (EU) and CCPA (California), you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete information.
  • Erasure: Request the deletion of your personal data ("Right to be Forgotten").
  • Data Portability: Obtain an export of your content and traces in a machine-readable format.
  • Withdraw Consent: Revoke camera or location permissions at any time via your device settings.

To exercise any of these rights, contact our privacy team at info.offlineadd@gmail.com.

9. Children's Privacy

OFFLINE is strictly intended for users who are at least 13 years of age (or 16 years of age where required by local law in certain EU jurisdictions). We do not knowingly collect personal data from children under 13. If we become aware that personal data of a child under the required age has been collected without parental consent, we will take immediate steps to delete the account and associated information.

10. Security Measures

We employ state-of-the-art administrative and technical safeguards to protect your personal data, including encrypted connections (HTTPS/TLS), isolated Row Level Security (RLS) on all database tables, and restricted administrative access.

11. Contact Us

If you have any questions, suggestions, or concerns regarding this Privacy Policy, please contact us: