Privacy Policy

OFFlore is built so that as little data as possible leaves your device. This policy describes what actually happens — not the maximum the law would allow.

In short

• You can use OFFlore entirely without an account. Your spots then live only on your device.
• We use no analytics, tracking or advertising services whatsoever — neither in the app nor on this website.
• When you share a post, its publicly reachable address is sent to our recognition service. We store no video and never access your social media account.
• A single video still may be cached for at most five minutes to run the image search. It is deleted afterwards.

Controller

1. Using the app without an account

OFFlore works fully without signing in. In that case all spots, trips, notes and images are stored solely on your iPhone. We have no access to them and nothing is transmitted to us — apart from the recognition requests described in section 3, which are not linked to any person.

2. Signing in with Apple

If you sign in to back up your spots across devices, we use Sign in with Apple. We store only:

• a random user identifier (UUID)
• the email address Apple passes to us — including an Apple-generated relay address

We create no profile and store neither your name nor a profile picture. Once signed in, your spots, trips and their order are synchronised to our server so they survive a change of device.

Our database is operated by Supabase in the Zurich region (eu-central-2). Database-level security rules restrict access so that only you can read and modify your own entries.

3. What happens when a place is detected

When you share a post or link with OFFlore, the app sends that post's publicly reachable address to our own recognition service, which then performs the following on your behalf:

• Post data: caption, preview image, author handle and public comments are read to find clues about the location. We read only publicly accessible content. Your social media account is never accessed, and we never ask for credentials.
• Image search: a reverse search may require a single still from the video. It is placed in non-public storage and made reachable only through a signed address valid for five minutes. It is deleted immediately after the search — including when the search fails.
• Image analysis: to interpret landscape features, the image may be sent to a language-and-vision model provider.

These requests carry no indication of who made them. OFFlore stores no videos from social networks. Every spot keeps a link to its original source so authorship stays traceable.

4. Location and weather

The app asks for your location only when you use a feature that needs it, such as the map or route planning. Your location does not leave your device and is not stored by us. Weather for a spot is retrieved via Apple WeatherKit; maps and routes via Apple MapKit.

5. Recipients

We use the following processors:

• Supabase — database, authentication and recognition service (hosted in Zurich)
• Apify — reading public post data
• SerpApi — reverse image search
• Anthropic — image analysis
• Apple — sign-in, maps and weather

We do not sell data and we do not share data for advertising purposes.

6. Transfers abroad

Apify, SerpApi and Anthropic are based in the United States. The content described in section 3 is therefore transferred to a country whose level of data protection does not match that of Switzerland and the EEA. Such transfers rely on Standard Contractual Clauses. They involve only the already-public post content you chose to share — not your account and not your saved spots.

7. Retention and deletion

• Spots and trips: kept until you delete them.
• Video stills for image search: five minutes at most.
• Account data: until you delete your account.

You can delete your account directly in the app. On the server this removes your trip stops and trip assignments first, then your trips, then your spots, and finally the account itself. The process cannot be undone.

8. Legal bases

Processing is governed by the Swiss Federal Act on Data Protection (FADP). Where the GDPR applies, we rely on Art. 6(1)(b) GDPR (performance of the contract — recognition and synchronisation) and Art. 6(1)(f) GDPR (legitimate interest in secure, abuse-free operation).

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A message to hello@offlore.app is enough. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with a supervisory authority in your country.

10. No tracking

OFFlore contains no analytics framework, no third-party crash reporting, no advertising identifier and no tracking pixels. We do not measure how often you open the app or which spots you view. This claim is verifiable in the source code.

11. This website

This website is static. It sets no cookies, embeds no fonts or scripts from advertising networks, and uses no analytics services. Our hosting provider keeps short-lived server logs containing IP address, timestamp and requested address out of technical necessity; they serve operation and abuse prevention only.

12. Changes

We update this policy when the app changes. The version published on this page is the applicable one.

Last updated: 2026-08-06

← Back to home