·
Privacy
Encrypted at rest Your entries are locked.
Never sold or shared No ads, no third parties.
Export anytime Leave with all your data.
AI runs for you only In confidence, not to train.

Privacy Policy

Last updated: June 6, 2026

Who we are

Offtape (“Offtape,” “we,” “us,” or “our”) provides a daily performance and accountability tracking application (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

The data controller responsible for your personal data is Offtape, contactable at info@offtape.io.

The short version

Your journal entries and the data you log are yours. We do not sell them, we do not share them with advertisers, we do not pool them with other users’ data, and we do not use them to train AI models. We collect the minimum needed to run the Service, and you can export or delete your data at any time.

What we collect

Information you provide:

  • Account information — your email address and a securely hashed password when you create an account.
  • The data you log — the daily metrics you track, your outcome ratings, and your journal entries. This is the core content of the Service and it belongs to you.
  • Preferences — settings such as your reminder preferences, theme, and the metrics you choose to track.

Information collected automatically:

  • Authentication data — a session cookie (scoped to our domain) that keeps you logged in. It contains a signed session token, not your personal data.
  • Aggregate, privacy-friendly analytics — we use Cloudflare Web Analytics, which is cookieless and does not fingerprint or track individuals across sites. It tells us things like how many people visited a page, not who they are.

We do not collect advertising identifiers, we do not run third-party advertising or tracking cookies, and we do not build advertising profiles.

How we use your information

We use your information solely to provide and operate the Service:

  • To authenticate you and keep your account secure.
  • To store, display, and compute the metrics, scores, correlations, and trends you ask the Service to produce from your own data.
  • To send transactional emails you’ve asked for or that are necessary to operate your account — for example, email verification, password resets, and the reminders you opt into. These are sent via our email infrastructure provider (Cloudflare). We do not send marketing email without your consent.
  • To maintain, secure, and improve the Service.

We rely on the following legal bases (where GDPR applies): performing our contract with you (providing the Service), your consent (e.g. optional reminders), and our legitimate interests in keeping the Service secure and functioning.

What we will never do with your journal and logged data

We want to be explicit, because it’s central to what Offtape is:

  • We will never sell your journal entries or logged data.
  • We will never share them with advertisers or data brokers.
  • We will never pool your data with other users’ data in a way that exposes your individual information.
  • We will never use your journal entries or logged data to train AI or machine-learning models.

Any analysis the Service performs is of your own data, for your own view.

Data retention

  • Free accounts: the Service retains your most recent 30 days of logged history; older entries beyond that window are not retained on the free tier.
  • Account data: we retain your account information for as long as your account is active.
  • Deletion: when you delete your account, we delete your associated personal data and logged content, subject to any limited retention we are legally required to keep. We offer a data export before deletion so you can keep a copy.

Your rights

You can, at any time:

  • Access and export your data from within the Service.
  • Correct inaccurate account information.
  • Delete your account and associated data.

If you are in the European Economic Area, the United Kingdom, or another region with comparable laws, you also have rights to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to lodge a complaint with your local data protection authority. To exercise any of these, contact us at info@offtape.io.

Where your data is processed

The Service is operated from the United States (Florida) and runs on Cloudflare’s infrastructure, which may process and store data in multiple regions. Where data of users in the European Economic Area or the United Kingdom is transferred internationally, those transfers are covered by Cloudflare’s data-processing addendum and the Standard Contractual Clauses. Operating from the United States does not exempt us from our GDPR obligations toward EU/EEA users.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you.

Contact

Questions about this policy or your data: info@offtape.io.