Privacy Policy

What Offimo collects, what never leaves your iPhone, and the rights you have wherever you live.

Last updated: October 23, 2026

This Privacy Policy explains how HayatoLab Tecnologia LTDA (CNPJ 48.551.929/0001-35), a company registered in Brazil (“Offimo”, “we”, “us”), handles personal data when you use the Offimo app for iPhone (the “App”) and the website offimo.app (the “Website”). We are the controller of this data.

Offimo was built to need as little of your data as possible. Most of what the App knows about you, including everything Apple’s Screen Time gives it, stays on your iPhone.

The short version

Your Screen Time data never leaves your iPhone. We cannot see which apps you use, what you do in them, or how long you spend in each one.
Our servers hold only your account: your e-mail, the name you give us, your occupation and your language.
The App sends usage events (for example “a session was completed”) linked to a random account ID, never to your name or e-mail, so we can improve it. You can turn this off in Settings → “Share usage data”.
No ads, no tracking across other companies’ apps, and we never sell or rent your data.
Payments go through Apple. We never see your card.
You can delete your account in the App at any time, and write to privacy@offimo.app for anything else.

1. What stays on your iPhone

The following is processed only on your device and is never sent to our servers or to anyone else:

Screen Time data. The apps, categories and websites you pick are handed to Offimo by Apple as anonymous tokens: we cannot read their names. Usage figures (time spent, pickups, most-used apps) are calculated by Apple inside a sandboxed extension that, by Apple’s design, cannot send anything out of the device.
Your answers during onboarding, such as your age range, how screen time affects you, your goals, your estimated screen time and your day plan.
Your blocks, sessions and history, your streak, Jeff’s state and your Focus Credits.
Location, if you create a place-based block. iOS tells the App when you enter or leave the places you set; the coordinates and events stay on the device. You can revoke location access in iOS Settings at any time.
Camera and motion, if you use challenges such as counting squats or keeping the phone face down. Images are analysed in real time on the device and are not recorded or uploaded; photos you take for a challenge are stored only on your device.
Rules written in your own words. When you describe a block in a sentence, it is interpreted by Apple’s on-device model. The text never leaves the phone.
Notifications, widgets and Live Activities are generated locally on the device.

Because this data never reaches us, we cannot access, export or delete it for you: it is removed when you delete your account in the App or uninstall it.

2. What we collect

Account

Your e-mail address and, if you use Sign in with Apple, the name Apple shares (you can choose to hide your e-mail, in which case we receive a private relay address).
If you use e-mail and password, your password is stored only as a secure hash by our authentication provider.
A random account ID that we create.

Profile

The name you type in onboarding, your occupation (for example student or remote worker) and your language. We use them to personalise the App and to show you the right content.

Usage events

Events about how the App is used, such as screens reached, onboarding steps completed, blocks created, sessions started or finished, a Shield shown, respected or bypassed, and purchases started. Numbers are grouped into ranges (for example “10–30 minutes” or “3–5 apps”).
Context attached to each event: your plan, occupation, language, “how you heard about us” answer, app version, device model, iOS version, country/region derived from the connection, and whether it is a test build.
Events are linked to your random account ID, never to your name or e-mail. They never contain app names, website addresses, text you type, exact usage times or location.

Purchases

Your subscription status, product, trial and renewal dates, and store transaction identifiers, received from Apple through our subscription provider. We do not receive card or billing details.

Crash reports and diagnostics

If the App crashes, a technical report (stack trace, device model, iOS version, app version and an installation identifier) is sent so we can fix the bug. It is not linked to your account.

Support

If you write to us, we keep your message, e-mail address and anything you choose to include.

We do not collect your contacts, health data, microphone audio, advertising identifier (IDFA) or precise location on our servers, and we do not ask for permission to track you.

3. The website

Analytics: the Website uses Google Analytics 4 and PostHog, which set cookies and local storage (such as _ga and ph_*) to count visits and see which pages and buttons are used. Google and PostHog receive your IP address and browser information for this purpose. PostHog session recording is turned off.
Campaign attribution: the Website keeps in your browser’s local storage where your first and latest visits came from (for example the campaign or site that sent you), so we know which channels work.
E-mail sign-ups: if you leave your e-mail to get the download link or to join a waitlist, we store it in HubSpot together with your language, the page and button used, and the attribution information above, to send you what you asked for.
Creator programme: if you apply, we store the details you send (name, e-mail, social profiles, audience size and your answers) in HubSpot to assess your application.
Hosting: the Website is hosted by Vercel, which processes technical logs (IP address, browser, pages requested) for security and operation.

The Website does not show a cookie banner. You can block or delete cookies and local storage in your browser settings, or turn on your browser’s “Do Not Track” or Global Privacy Control signal; the Website works the same either way. Every marketing e-mail has an unsubscribe link.

4. Why we use your data and on what legal basis

To provide the Service (create and secure your account, sync your profile, check your subscription, give support): performance of our contract with you.
To understand and improve the App (usage events, crash reports, testing new versions of features): our legitimate interest in building a product that works and helps people, balanced against your rights. You can object at any time by turning off “Share usage data” in Settings.
To operate the App safely (remote configuration that can switch a faulty feature off, fraud prevention on purchases): legitimate interest.
To send you e-mails you asked for from the Website: your consent, which you can withdraw at any time.
Website analytics cookies and campaign attribution: our legitimate interest in understanding which pages and channels work, balanced against your rights. You can object at any time by blocking cookies in your browser or writing to privacy@offimo.app.
To comply with the law (tax, accounting, responses to authorities, handling your rights requests): legal obligation.

We do not use your data for advertising, we do not build advertising profiles, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

6. International transfers

We are based in Brazil and our providers mainly process data in the United States, so your data may be transferred to countries other than your own. We protect these transfers with the safeguards required by the law that applies to you, such as the European Commission’s Standard Contractual Clauses (and the EU-U.S. Data Privacy Framework where the provider is certified), the UK International Data Transfer Addendum, and the standard contractual clauses approved by Brazil’s ANPD. You can ask privacy@offimo.app for a copy of the relevant safeguards.

7. How long we keep it

Account and profile: while your account exists. When you delete your account in the App, we delete your profile and login from our servers immediately, revoke Sign in with Apple, and wipe the App’s data on the device.
Usage events: up to 24 months, then deleted or aggregated so that they no longer relate to anyone. After you delete your account they remain linked only to a random ID that no longer maps to you; ask privacy@offimo.app and we will erase them within 30 days.
Purchase records: for as long as tax and accounting laws require (generally 5 years in Brazil).
Crash reports: up to 90 days.
Website e-mail sign-ups and creator applications: until you unsubscribe or ask us to delete them, and in any case no more than 24 months after our last contact.
Support e-mails: up to 3 years after the conversation ends, in case the same problem comes back.

8. Your choices and controls

Turn off usage data: Settings → “Share usage data” in the App. Events stop being sent from the App and its extensions.
Delete your account: Settings → Account → Delete account in the App.
Revoke permissions: Screen Time, location, camera, motion and notifications can be switched off at any time in iOS Settings.
Hide your e-mail: choose “Hide My Email” when you sign in with Apple.
Website: block cookies in your browser, and unsubscribe from any e-mail with the link it contains.
Everything else: write to privacy@offimo.app.

9. Your rights

Depending on where you live (see the section on your country below), you can ask us to: confirm whether we process your data and give you access to it; correct it; delete it; export it in a portable format; restrict or object to certain processing; withdraw consent; and not be discriminated against for exercising these rights.

Send requests to privacy@offimo.app from the e-mail address linked to your account (or tell us that address), so we can confirm it is you. We answer within the time your law sets, and within 15 days at most wherever possible. Exercising your rights is free. If we cannot fully comply, for example because the law requires us to keep a record, we will tell you why.

You may also appoint an authorised agent to make a request for you; we may ask for proof of that authorisation.

10. Children

Offimo is not directed to children under 13 and we do not knowingly collect personal data from them. Where the law of your country sets a higher age for consenting to the processing of your data on your own, users below that age need the permission of a parent or guardian. If you believe a child under 13 has created an account, write to privacy@offimo.app and we will delete it.

11. Security

Data is encrypted in transit (TLS) and at rest by our providers. Access to our servers is limited by row-level security, so each account can reach only its own profile and administrative access is restricted to the people who need it. On your iPhone, account credentials are kept in the iOS Keychain.

No system is completely secure. If a security incident is likely to put your rights at risk, we will notify you and the competent authorities as the law requires.

12. Changes to this Policy

When we change how we handle data, we update this page and the date at the top. For material changes, we will tell you in the App or by e-mail before the change takes effect and, where the law requires it, ask for your consent again.

13. Contact

HayatoLab Tecnologia LTDA · CNPJ 48.551.929/0001-35 (Offimo), Brazil. Controller of the personal data described in this Policy.

Registered office: Alameda Rio Negro, 503, Sala 2020, Alphaville Centro Industrial e Empresarial, Barueri – SP, CEP 06454-000, Brazil

Privacy requests and data protection officer: privacy@offimo.app

General support: support@offimo.app

14. Your rights by country

The rights and protections above apply to everyone. The laws below add specific rights, contacts and authorities depending on where you live.

Brazil

Law: General Data Protection Law (Lei Geral de Proteção de Dados, Law 13,709/2018, “LGPD”). HayatoLab Tecnologia LTDA is the controller.
Legal bases: performance of a contract (art. 7, V), legitimate interest (art. 7, IX), consent (art. 7, I) and compliance with a legal obligation (art. 7, II), as described in section 4.
Your rights (art. 18): confirmation of processing; access; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed with consent; information about the entities we share data with; information about the possibility of refusing consent and its consequences; withdrawal of consent; and review of automated decisions (art. 20).
Data protection officer (encarregado): reachable at privacy@offimo.app.
Deadline: simplified confirmation or access immediately, and a full statement within 15 days of your request.
Adolescents: data of users aged 13 to 17 is processed in their best interest, as required by LGPD art. 14.
Security incidents: if an incident may cause you relevant risk or damage, we notify the ANPD and the affected users within 3 business days of becoming aware of it, as required by LGPD art. 48 and ANPD Resolution CD/ANPD No. 15/2024.
Complaints: you can petition the National Data Protection Authority (ANPD) at gov.br/anpd.

European Union, EEA and Switzerland

Law: General Data Protection Regulation (EU) 2016/679 (“GDPR”), and in Switzerland the Federal Act on Data Protection (FADP).
Legal bases: contract (art. 6(1)(b)), legitimate interests (art. 6(1)(f)), consent (art. 6(1)(a)) and legal obligation (art. 6(1)(c)), as described in section 4.
Your rights: access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18), portability (art. 20), objection, including to processing based on legitimate interests (art. 21), and withdrawal of consent at any time without affecting earlier processing.
Deadline: we answer within one month, which may be extended by two months for complex requests; we will tell you if so.
Age of digital consent: between 13 and 16 depending on your country; below it, parental consent is required.
Transfers: see section 6 (Standard Contractual Clauses and the EU-U.S. Data Privacy Framework).
Complaints: you can lodge a complaint with the data protection authority of the country where you live or work (list at edpb.europa.eu), or in Switzerland with the FDPIC (edoeb.admin.ch).

United Kingdom

Law: UK GDPR and the Data Protection Act 2018. The legal bases and rights are the same as for the EU above.
Transfers: protected by the UK International Data Transfer Addendum or the UK Extension to the EU-U.S. Data Privacy Framework.
Complaints: Information Commissioner’s Office, ico.org.uk, telephone 0303 123 1113.

United States

California (CCPA/CPRA)

Categories collected in the last 12 months: identifiers (e-mail, account ID, installation ID); personal information under Cal. Civ. Code § 1798.80 (name); commercial information (subscription and purchase records); internet or other electronic network activity (usage events within the App and Website); general geolocation derived from IP address (country/region only); and inferences limited to the occupation you tell us. Sources: you, your device, and Apple. Purposes and recipients: as described in sections 4 and 5; disclosed to service providers only for business purposes.
Sensitive personal information: we process account login credentials only to let you sign in, and do not use or disclose sensitive personal information to infer characteristics about you.
No sale or sharing: we do not sell personal information or share it for cross-context behavioural advertising, and we have not done so in the last 12 months. We have no actual knowledge of selling or sharing the data of consumers under 16. We honour Global Privacy Control signals as an opt-out request, even though there is nothing to opt out of.
Your rights: to know and access, to delete, to correct, to limit the use of sensitive personal information, to opt out of sale or sharing, and to not be discriminated against. Use privacy@offimo.app; we confirm receipt within 10 business days and answer within 45 days (extendable once by 45 days).
Retention: see section 7.

Other states

Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with comprehensive privacy laws have similar rights: to confirm and access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale and profiling (which we do not do).
Appeals: if we decline your request, you can appeal by replying to our decision at privacy@offimo.app. We answer appeals within 45 days (60 days in Colorado). If you disagree with the result, you can contact your state Attorney General.

Children

We comply with the Children’s Online Privacy Protection Act (COPPA): the Service is not directed to children under 13.

Canada

Law: Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Québec, the Act respecting the protection of personal information in the private sector (as amended by Law 25).
Your rights: access, correction, withdrawal of consent, and in Québec data portability and information about automated decisions.
Person in charge of the protection of personal information: reachable at privacy@offimo.app.
Your data may be stored and processed outside Canada (see section 6), where it may be accessible to authorities under local law.
Complaints: Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, the Commission d’accès à l’information (cai.gouv.qc.ca).

Mexico

Law: Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2025).
ARCO rights: you may access, rectify, cancel or oppose the processing of your personal data, and withdraw consent, by writing to privacy@offimo.app with your name, the e-mail of your account, a description of the request and any supporting document. We answer within 20 business days and carry out the request within 15 business days after that.
Transfers: transfers to our service providers (section 5) do not require your consent because they are necessary to provide the Service.
Complaints: you may go to the Mexican data protection authority if you believe your rights have been violated.

Japan

Law: Act on the Protection of Personal Information (APPI).
Foreign transfers: your data is handled by providers in the United States (section 5). The United States does not have a comprehensive federal data protection law equivalent to the APPI, but each provider is bound by contract to take measures equivalent to those required by the APPI, and we monitor them.
Security measures: we have established data handling rules, restricted access, and technical measures such as encryption and access control (section 11).
Your rights: you may request disclosure (including of records of third-party provision), correction, addition or deletion, and suspension of use or of provision to third parties, by writing to privacy@offimo.app.
Complaints: Personal Information Protection Commission (ppc.go.jp).

India

Law: Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules, as they come into force.
Your rights: to obtain a summary of your data and of the processing, to correct, complete, update and erase it, to nominate another person to exercise your rights in case of death or incapacity, and to grievance redressal.
Grievance officer: reachable at privacy@offimo.app. We respond within the period set by the rules, and within 30 days at most.
Complaints: once you have used our grievance process, you can approach the Data Protection Board of India.

Other countries

If you live elsewhere, you have at least the rights described in section 9, and any additional rights your local law gives you. Write to privacy@offimo.app and we will help you exercise them, and tell you which authority you can complain to.