Privacy Policy

Last updated: May 25, 2026

1. What Information We Collect

When you use OFFMUTE, we collect the following types of information:

  • Account information: Name, email address, and profile photo (provided via Google, Apple, or email sign-in).
  • Trip data: Trip names, destinations, dates, activities, polls, votes, and group member information that you create or contribute to.
  • Usage data: How you interact with the app, including features used, pages viewed, and actions taken.
  • Device information: iOS version, device type, and app version for compatibility and debugging.

We do not collect location data unless you explicitly enable location sharing for a specific trip.

2. How We Use Your Information

  • To provide the service: Trip coordination, group features, polls, shared itineraries, and real-time updates.
  • To improve the product: Aggregate analytics to understand feature usage and fix bugs.
  • To communicate with you: Support responses, trip notifications, and product updates.

We do not sell your data to advertisers or third parties. We do not use your data for targeted advertising.

3. How We Share Your Information

  • With your group members: Trip data is shared with people in your trip group, as intended by the coordination features.
  • With service providers and subprocessors: We rely on the following third parties to operate the Service. Each processes data on our behalf under data processing agreements or their published privacy terms:
    • Infrastructure & hosting: Supabase (database, authentication, realtime, file storage, edge functions) and Vercel (web hosting, aggregate anonymous analytics).
    • AI features: Anthropic (Claude, primary) and OpenAI (used only as a fallback if the primary provider is unavailable) process your trip context, TravelBlueprint profile, and any free-text you submit to AI-powered features (Concierge, bucket list AI chat, receipt parsing).
    • Authentication providers: Apple (Sign in with Apple) and Google (Sign in with Google) when you choose those sign-in methods.
    • Maps & places: Google Maps Platform (Places API, geocoding, map tiles).
    • Travel data partners: AirLabs (flight tracking), Ticketmaster (local events), and Viator (experiences) receive destination, date, or flight-number lookups to surface relevant content.
    • Push notifications: Apple Push Notification service (APNs) delivers trip alerts to your device.
  • Not with advertisers: We never share your data with third-party advertisers.

User-generated content: Trip content, comments, polls, votes, and shared itinerary details are created by users and visible to the trip members they choose to invite.

4. Data Retention

We retain your trip data for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days.

Location sharing data is automatically deleted 48 hours after a trip ends.

5. Your Rights

You have the right to:

  • Access a copy of your personal data
  • Delete your account and all associated data
  • Export your trip data
  • Opt out of non-essential communications

To exercise any of these rights, email us at hello@offmuteapp.com. We will respond within 30 days. We do not currently provide a self-serve in-app mechanism for access, deletion, or export requests; all such requests are handled via email.

6. Children's Privacy

OFFMUTE is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

7. Cookies and Tracking

The OFFMUTE web app uses:

  • Essential cookies: Authentication session cookies required for the app to function.
  • Analytics: Vercel Analytics for aggregate, anonymous usage data. No personally identifiable information is collected.

We do not use advertising cookies or third-party tracking pixels.

8. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security policies on our database. Authentication is handled by Supabase Auth with OAuth 2.0.

9. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or an in-app notification. The “last updated” date at the top of this page reflects the most recent revision.

10. Contact Us

If you have questions about this privacy policy or your personal data: