Privacy Policy

Offmynd ("we," "our," or "us"), developed by AruAI Labs, is a voice-first AI journaling platform that helps you capture thoughts through voice, then transcribes, classifies, connects, and surfaces insights from what you record. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Offmynd Android application.

By using Offmynd, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the application.

Account Information

• Email address and display name (via Firebase Authentication)
• Optional profile photo (if signed in with Google)
• Authentication tokens (stored securely on device, encrypted at rest)
• Optional biometric / PIN unlock credentials (on-device only)

Voice Recordings & Transcripts

• Audio recordings captured through the device microphone (RECORD_AUDIO permission)
• Transcripts generated from your voice recordings via Deepgram speech-to-text
• AI-generated analysis of your transcripts: classifications, tags, topics, skills, decisions, reminders, corrections, entities, and narrative synthesis
• Emotional tone indicators and pattern signals derived from your entries

Knowledge & Context Data

• URLs, articles, documents, and videos you import into your knowledge base
• Context enrichment data you paste or import (e.g. AI conversation exports)
• Psychological profile self-assessment responses (optional)
• Relationships between your entries, skills, decisions, and knowledge items (graph data)
• Vector embeddings generated from your content for semantic search

Billing & Usage

• Subscription tier, billing cycle, and renewal date
• In-app purchase records (Google Play purchase tokens)
• Credit balance and credit transaction history (Private tier)
• Promo code redemption history
• Daily and monthly usage counts for fair-use enforcement

Technical Data

• Device type, model, operating system, and app version
• Crash reports and performance diagnostics
• Optional in-app diagnostic reports you submit (device info + recent activity summary)
• Audit logs of administrative actions if you use the admin tools

We use collected information to:

• Transcribe your voice recordings and generate structured analysis (titles, tags, decisions, reminders)
• Surface personalized insights, patterns, and nudges based on your entries
• Build and maintain your personal knowledge graph connecting related entries and topics
• Enable semantic search across your entries and knowledge items
• Manage your subscription, validate purchases, enforce fair-use limits, and process credits
• Send transactional notifications (welcome, processing, reminders, digests)
• Diagnose technical issues and improve recognition accuracy and app performance
• Comply with legal obligations

Offmynd integrates with the following third-party services, each governed by their own privacy policies:

Speech-to-Text

• Deepgram — transcribes your voice recordings in real time and from archived audio. Audio data is transmitted securely over encrypted connections.

AI Processing

• Anthropic (Claude) — processes transcripts for the Shared tier to generate classifications, summaries, nudges, and pattern insights. Data is transmitted securely and not used by Anthropic for model training.
• Fireworks AI (DeepSeek V3.2) — processes transcripts for the Private tier. Private tier data is routed exclusively to Fireworks and never touches Anthropic.
• OpenAI — generates vector embeddings of your content for semantic search. Content is transmitted securely and not used for model training.

Backend & Storage

• Supabase — secure database and file storage. Account data, entries, knowledge items, and audio recordings are stored with row-level security (RLS) and encryption at rest. Private tier users are assigned an isolated schema with separate API keys for stronger isolation.
• Vercel — hosts the backend API. No personal data is persisted on Vercel infrastructure beyond request-scoped logs.

Authentication & Notifications

• Firebase Authentication — manages email/password and Google Sign-In accounts
• Firebase Cloud Messaging — delivers push notifications (reminders, signals, processing updates)
• Firebase Crashlytics — collects anonymized crash reports to improve app stability
• Firebase Analytics — collects anonymized app usage analytics
• Resend — sends transactional emails (welcome, reminders, digests)

Payments

• Google Play Billing — processes all subscription and in-app purchases. Payment information (card numbers, billing addresses) is handled entirely by Google and is never accessed by us. We receive only purchase tokens and subscription status.

Offmynd requires microphone access (RECORD_AUDIO) to capture your voice entries. Audio is recorded only while you explicitly tap the record button and is immediately transcribed by Deepgram. You can revoke microphone access at any time via Android system settings — Offmynd will continue to function, but you will be unable to record new voice entries.

We implement robust security measures to protect your information:

• Encrypted storage for authentication tokens and sensitive credentials on-device (Android Keystore)
• Secure HTTPS / TLS connections for all network traffic
• Row-level security policies enforced on the backend database (users can only read their own data)
• Optional biometric or PIN unlock before the app decrypts local data
• Android auto-backup disabled by default to prevent exfiltration of voice recordings and tokens
• SSRF protection on URL ingestion to prevent server-side request abuse
• Per-user rate-limiting on expensive endpoints to prevent abuse
• Private tier users operate under a dedicated database schema with isolated API keys across Anthropic, Deepgram, and Fireworks

We retain your account data, voice entries, transcripts, knowledge items, and subscription records for as long as your account is active. You can configure data retention policies within the app (Settings → Data Retention) to auto-delete entries older than a chosen duration.

Audio recordings are stored in Supabase Storage under your user-scoped path. AI-generated analysis is stored alongside the transcript.

If you request account deletion, all associated personal data — voice recordings, transcripts, knowledge items, subscription history, credits, and derived signals — will be permanently removed from our systems within 30 days. To request deletion, use Settings → Data Retention → Delete Account or email offmynd@aruailabs.com. Note that anonymized, aggregated data may be retained for service improvement and fraud-prevention purposes.

Offmynd is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

You have the right to:

• Access your personal data stored in the application
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export all your data (voice entries, transcripts, knowledge, insights) in JSON, CSV, or Markdown formats (Settings → Export)
• Opt out of diagnostic reporting and analytics (Settings → Notification Preferences)
• Withdraw consent and delete your account at any time

Your information may be processed in the United Arab Emirates (where AruAI Labs is headquartered), the European Union (Supabase), and the United States (Anthropic, OpenAI, Fireworks, Firebase, Vercel, Deepgram, Resend, Google Play). We ensure appropriate safeguards are in place in compliance with applicable data protection laws, including UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and GDPR where applicable.

For privacy-related inquiries or to exercise your rights:

We may update this Privacy Policy periodically. Changes will be reflected within the application and on this page with a revised date. Continued use of Offmynd after changes constitutes acceptance of the updated policy.