OFFLY PRIVACY POLICY
Effective Date: 13 October 2026
Last Updated: 13 October 2026
Operator: New Version Limited
Location: New Zealand
Contact: offly.support@newversion.studio
1.0 INTRODUCTION AND SCOPE
1.1 Offly is a screen time app made by New Version Limited, a company based in New Zealand ("we," "us," or "our"). This Privacy Policy explains what information Offly handles, where it is kept, who can see it and the choices you have.
1.2 This policy covers:
(a) The Offly app for iPhone
(b) The Offly app for Android
(c) Our website at https://sites.google.com/view/offly/
(d) Emails you send us
1.3 We decide how your personal information is used in Offly, so we are the "controller" (or "agency" under New Zealand law).
1.4 Offly has no accounts and no sign-in. You never give us your email address, phone number or real name to use it.
1.5 Email is the only way to reach us: offly.support@newversion.studio. We aim to reply within 2 business days (New Zealand time).
1.6 This Privacy Policy should be read together with our Terms of Use at https://sites.google.com/view/offly/terms-of-use.
2.0 THE SHORT VERSION
2.1 Almost everything Offly knows about you stays on your phone, in a local database. We cannot see it.
2.2 Your screen time and app usage are processed on your phone and do not leave it. The only exception is a few daily summary figures, and only if you turn on Flock.
2.3 Only two things go online, and only when you choose them: Flock (groups with friends, the optional league and friends' invite codes) and ideas you send from Help.
2.4 We do not use analytics, crash reporting, advertising or tracking tools. We do not sell your information or share it for advertising.
2.5 Offly does not back up your data. If you delete the app or lose your phone, your Offly data is gone and we cannot recover it. You can export a copy at any time.
2.6 You can erase everything, on your phone and on our server, with Settings, then Delete all data.
3.0 INFORMATION WE COLLECT AND WHY
3.1 Most information never leaves your phone. A small amount is stored on our server, only if you use Flock or send an idea. Apple or Google handle your payment if you buy Offly Plus. This section explains each kind of information and why Offly uses it. Information kept on your phone is used only to run Offly for you there.
3.2 INFORMATION KEPT ON YOUR PHONE ONLY
(a) Your daily goal, your setup answers (such as what you want to change and your own estimate of your screen time before Offly) and your preferences, such as notification times, quiet hours, Calm mode, appearance and language.
(b) Your Shields: their names, schedules, limits, unlock settings and Strict Mode, and the apps, categories or websites you choose for them (see Section 4.0).
(c) Figures worked out on your phone from your usage, such as time won, pickups, hourly charts and your baseline.
(d) Your "Worth it?" reflections, activity tags and similar entries.
(e) Your unlock history: when you unlocked an app, for how long and how. If you type a reason to unlock, Offly keeps that text for up to 24 hours so it can show it back to you, then deletes it.
(f) Your Emergency pause history and weekly keys.
(g) Your game progress: Feathers, levels, your Moon streak, quests, Eggs, badges and the items you have earned for Olie's Nest.
(h) Your name or nickname and, if you add one, an avatar photo. The photo stays on your phone and is never uploaded.
(i) Your Trusted keeper code, if you set one up. Offly stores only a scrambled, salted form of it (a hash), never the code itself.
(j) A contact name and phone number, if you add them to a custom Shield screen. They are never included in exports and never shared.
(k) Your Offly Plus status as reported by the store, and whether a one-time reduced Lifetime price has been shown to you and when it ends.
(l) Your votes on the idea board in Help.
(m) A User ID: a random code created on your phone when you start using Offly. It is shown in Settings and added to the Contact us email, so we know we are talking about the same app. It does not identify you, and it is not stored on our server. Once you use Flock or send an idea, Settings also shows a Flock ID, which is the anonymous identity described in Section 5.1 (see Section 13.4).
3.3 INFORMATION ON OUR SERVER (ONLY IF YOU CHOOSE AN ONLINE FEATURE)
(a) A random anonymous identity, created the first time you turn on Flock or send an idea (see Section 5.1). No email address, phone number, Apple ID or Google account is involved.
(b) Your Flock information, if you turn on Flock (see Section 5.2).
(c) The ideas you send from Help (see Section 5.6).
(d) The technical information any internet service receives, such as your IP address, the type of device and the time of each request. Our server provider uses it to deliver and secure the service. It keeps it in short-lived logs, and its sign-in service keeps it with your anonymous identity while that identity exists.
3.4 PURCHASES
(a) Apple or Google process your payment. We do not receive your payment details (see Section 6.0).
3.5 SUPPORT EMAILS
(a) If you email us, we receive what you send, including your email address. We use it only to answer you.
(b) Contact us in the app (Settings, then "Hoot! Need a hand?", then Contact us) opens your email app with a draft that already includes the Offly version, your platform (iPhone or Android), your User ID and, if you have one, your Flock ID. You can read, change or delete these details before you send.
(c) We never add you to a mailing list.
3.6 OUR WEBSITE
(a) Our website is hosted on Google Sites. When you visit it, Google receives technical information such as your IP address and browser details, under Google's own privacy policy. We do not add analytics or advertising to the site.
3.7 INFORMATION WE DO NOT COLLECT
(a) Your email address or phone number (unless you email us)
(b) Your contacts
(c) Your location
(d) Your photos, camera images or microphone audio
(e) The names of the apps you use on iPhone, or the list of apps you use on Android
(f) Your advertising identifier
(g) Analytics or crash reports
4.0 SCREEN TIME AND USAGE ACCESS
4.1 Offly needs to know how you use your phone so it can guard the apps you choose and show you honest numbers. You grant this access in your phone's system settings, and you can withdraw it there at any time.
4.2 ON IPHONE
(a) Offly uses Apple's Screen Time framework (Family Controls, Managed Settings and Device Activity) with individual authorization. This means you authorise Offly for yourself, on your own iPhone.
(b) When you choose apps, categories or websites, Apple's picker gives Offly coded references (tokens) instead of their names. Offly uses these tokens to apply your Shields.
(c) Usage information is handled on your iPhone by Apple's frameworks and by Offly's extensions. The extension that draws your exact charts runs in a space Apple keeps closed, so it cannot send data out of your phone.
(d) Your Screen Time information never leaves your iPhone, except the Flock summary figures in Section 5.2, and only if you use Flock.
4.3 ON ANDROID
(a) Usage access (Android's usage statistics) tells Offly which app is open and how long apps are used.
(b) "Display over other apps" lets Offly show its Shield screen on top of an app you have chosen to guard.
(c) A foreground service, with an ongoing notification, keeps your Shields working while Offly is in the background. Offly starts it again after your phone restarts.
(d) To let you pick apps, Offly lists the apps you can open from your home screen. It does not use an Accessibility Service and does not ask to see every installed app.
(e) Usage information is processed on your phone and never leaves it, except the Flock summary figures in Section 5.2, and only if you use Flock.
4.4 ON BOTH PLATFORMS
(a) We never use your screen time or usage information for advertising, never sell it and never share it with anyone else.
(b) Shields are a soft block. You can always switch off Offly's access in your system settings, and Offly cannot prevent that.
(c) Offly is a self-help tool and does not promise any result.
5.0 FLOCK, IDEAS AND INVITE CODES
5.1 HOW YOU ARE IDENTIFIED
(a) Flock is optional and stays off until you agree to the Flock consent sheet ("Before you fly together").
(b) When you agree to it, or when you send an idea from Help, Offly signs in anonymously with our server provider. This creates a random identity on our server. Settings shows it at the bottom of the screen as your Flock ID. No email address, phone number, Apple ID or Google account is used.
(c) This identity lives only in Offly on your phone. It cannot be recovered after you delete the app or lose your phone.
(d) Our server provider also hosts other apps made by New Version Limited in the same project. Offly's information is kept in its own separate part of the database, marked as Offly's, and is never combined with theirs.
5.2 WHAT FLOCK SENDS AND WHO SEES IT
Only if you turn on Flock, the following is sent to our server:
(a) Your nickname (the name you gave Offly) and an avatar colour. Members of your flocks see them.
(b) For each day: the date, your percentage below your own baseline, whether it was a Moon Day (yes or no) and your offline minutes, which count towards flock quests. Members of your flocks see these figures.
(c) Your daily minutes of screen time, only while you switch on "Share my total" for a flock. It is off by default, and only the members of a flock where you switched it on see your minutes.
(d) The flocks you create (name, emoji, type and goal), your memberships, join codes and invites. If you add a name to an invite so you can follow it, that name is stored and members of the flock can see it.
(e) Cheers you send and receive.
(f) The Flock League, if you join it: your tier and weekly score. You are grouped with up to 29 other league members, who may be people you do not know. They see your nickname and your weekly percentage. If you choose to hide your percentage from flock mates, a flock mate in your league group sees your score only under your initial and without your flock's tag.
(g) Emergency Buddy requests: a reason picked from a fixed list, sent to the friend you choose, and their answer.
(h) Your own invite code and any friend's code you redeem.
(i) Reports you make about a member (a reason picked from a fixed list) and the members you block.
5.3 WHAT FLOCK NEVER SENDS
(a) The names of the apps you use, or your usage of any single app
(b) Your Shields, reflections or unlock reasons
(c) Your photos or contacts
(d) Your local User ID, your Trusted keeper code or your purchase details
(e) Anything else listed in Section 3.2 that is not named in Section 5.2
5.4 WHILE FLOCK IS ON
(a) Offly sends each finished day's figures after 2:00 in the morning, your local time, and, while you are in a flock, a provisional figure for today a few times a day.
(b) It keeps sending daily figures even when you are not in a flock at the moment, so they are ready for your flocks and the league.
(c) Leaving a flock removes you from that flock only. It does not delete your other Flock information and does not turn Flock off.
(d) To turn Flock off, use Settings, then Turn off Flock. This deletes your anonymous identity and all your Flock information and ideas from our server, removes you from every flock and stops all sending. If you own a flock, it passes to another member, or ends if you are the only member. Everything else stays on your phone. You can turn Flock on again later; you then start with a new identity.
(e) Settings, then Delete all data also turns Flock off and deletes the same information from our server, and erases Offly from your phone as well (see Section 14.0).
5.5 WHY WE USE FLOCK INFORMATION
(a) We use it only to run Flock for you: your flocks, scoreboards, quests, the league, cheers, invites, Emergency Buddy requests, reports and blocks, and to keep Flock safe and secure.
(b) Our legal bases are listed in Section 12.3.
5.6 IDEAS YOU SEND FROM HELP
(a) If you write an idea in Help ("Share an idea") and tap Send, Offly sends the text and the topic you picked, if any, to our server so our team can read it.
(b) It is stored with your anonymous identity and the time. Your nickname and the information in Section 3.2 are not sent with it.
(c) If you are offline, the idea waits on your phone and is sent the next time you open Help or send another idea.
(d) You can send up to five ideas a day.
(e) We use ideas only to improve Offly. We keep each one for 12 months and then delete it. Turn off Flock and Delete all data delete your ideas from our server straight away.
5.7 INVITE CODES
(a) A friend's code you type in Settings, then Enter a code, is checked on our server and stored with your Flock information. This works only while Flock is on; before that, Offly asks you to turn on Flock first and sends nothing.
(b) A code you type while setting up Offly is checked on your phone only.
5.8 WHO PROCESSES THIS INFORMATION FOR US
(a) Supabase, Inc. hosts our database and the anonymous sign-in as our service provider. Supabase processes the information only on our instructions, under its data processing terms. Supabase runs on Amazon Web Services. Our database is in the United States (AWS us-east-2, Ohio).
(b) We do not share Flock information or ideas with anyone else, except as described in Section 8.0.
5.9 INTERNATIONAL TRANSFERS
(a) We are based in New Zealand and Supabase is based in the United States, so your Flock information and ideas are processed outside the country where you live.
(b) New Zealand: we only send information to providers bound to protect it in ways comparable to the Privacy Act 2020 (Information Privacy Principle 12).
(c) European Economic Area, United Kingdom and Switzerland: New Zealand has an adequacy decision from the European Commission. Transfers to the United States are protected by the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum for UK data), or by another transfer mechanism the law recognises.
(d) Australia: we take reasonable steps so that overseas recipients handle your information in line with the Australian Privacy Principles.
5.10 HOW LONG WE KEEP IT
(a) See Section 9.0.
6.0 PURCHASES
6.1 Offly Plus is sold through the Apple App Store and Google Play. Apple or Google process your payment and hold your payment details.
6.2 We never receive your card number, name, address or store account details.
6.3 Offly receives from the store, on your phone, only the status of your purchase (for example, that Plus is active, which plan you have and when it renews or ends), whether you can have a free trial, and the prices for your country. Offly does not send any of this to our server, and we do not keep purchase records.
6.4 Apple and Google handle your purchase information under their own privacy policies.
6.5 TRIAL REMINDER
(a) On iPhone, if notifications are on, Offly schedules a reminder on your phone for 24 hours before a free trial ends.
(b) Google Play does not tell Offly when a free trial ends, so on Android Offly cannot send this reminder. You can see the date in Google Play.
7.0 CAMERA, PHOTOS AND NOTIFICATIONS
7.1 CAMERA
(a) Offly asks for camera access only when you choose a feature that needs it: a "Show Olie" photo unlock or the photo step of a Habit Shield, a Mirror moment, a Roost scan of a QR code you have placed somewhere, or scanning a flock's QR code to join it.
(b) Offly does not analyse, upload or keep these photos or camera images. "Show Olie" works on trust. Images are used in the moment and then discarded.
(c) Offly never records sound.
(d) On Android, QR codes are read on your phone using Google's ML Kit library. Google's terms say ML Kit may send Google technical information about how the library performs and is used. It does not send your camera images.
(e) You can refuse or withdraw camera access in your system settings. Offly then offers another way to unlock.
7.2 PHOTOS
(a) If you choose an avatar picture from your photo library, it stays on your phone and is never uploaded. Flock shows an avatar colour instead.
(b) Offly saves a card to your photo library only when you ask it to. It does not read your library.
(c) When you share a card, your phone's share sheet opens and you decide where it goes.
7.3 NOTIFICATIONS
(a) All of Offly's notifications, such as reminders, "Shield's back on" notices, Flock cheers and the trial reminder, are scheduled on your phone.
(b) Offly does not use push notifications in this version, so no notification token is sent to us.
(c) You can turn notifications off in Offly or in your system settings.
8.0 HOW WE SHARE INFORMATION
8.1 We share information only:
(a) With other Flock members, as described in Section 5.2, because you choose to take part.
(b) With Supabase, our service provider, as described in Section 5.8.
(c) With Apple or Google when you buy Offly Plus or use their stores, under their own policies.
(d) With our email provider, which stores the emails you send us.
(e) If the law requires it, or to protect someone's life or safety, or to protect our rights.
(f) If New Version Limited is sold or merged. The information we hold may then pass to the new owner under this policy, and we will tell you first.
8.2 WHAT WE NEVER DO
(a) We do not sell your personal information or share it for cross-context behavioural advertising.
(b) We do not show ads or use advertising identifiers. Offly does not ask for App Tracking Transparency permission, because it does not track you.
(c) We do not track you across other companies' apps or websites.
(d) We do not give or sell information to data brokers.
(e) We do not use analytics or crash reporting tools.
(f) We do not use your information for profiling or for automated decisions that have legal or similarly significant effects on you.
(g) We do not use your information to train artificial intelligence models.
9.0 HOW LONG WE KEEP INFORMATION
9.1 ON YOUR PHONE
(a) Information on your phone stays until you use Delete all data or delete the app.
(b) Offly does not back up your data to any server. The Offly database is excluded from iCloud backup, and on Android from cloud backup and device transfer.
(c) On iPhone, a small amount of information that Apple's Screen Time extensions need, such as your Shield settings and the coded app references, is kept in a shared area of the app. It may be included in your iPhone backup, which you control.
9.2 ON OUR SERVER
(a) Flock information: while you use Flock. Turn off Flock and Delete all data delete it straight away. If you have not used Flock for 12 months, we delete your Flock identity and everything linked to it.
(b) Daily figures: 21 days.
(c) Emergency Buddy requests: 1 day.
(d) Invites: they expire after 7 days and are deleted 30 days after they were made.
(e) Records of wrong join codes: 1 day.
(f) Ideas: 12 months.
(g) An anonymous identity with no Flock profile and no ideas left: 12 months after it was last used.
(h) Short-lived logs and any backups kept by our provider: deleted or overwritten on the provider's normal cycle, within a limited time.
9.3 If you delete the app without first using Turn off Flock or Delete all data, your Flock information stays on our server until the 12-month limit in Section 9.2(a), because nothing on our server links it to you. Section 13.0 explains how to ask us to delete it sooner.
9.4 SUPPORT EMAILS
(a) We keep support emails only as long as we need them to help you and to keep records the law requires, and then delete them. We delete them sooner if you ask.
9.5 PURCHASES
(a) Apple and Google keep their own records of your purchases under their own policies.
10.0 SECURITY
10.1 ON OUR SERVER
(a) Information travels between the app and our server over encrypted connections (TLS).
(b) Every table is protected by row-level security. The app can reach information only through controlled functions that check who is asking, so each person sees only the Flock information they are allowed to see.
(c) Server keys are never in the app.
(d) Access to our provider's dashboard is limited to the people at New Version Limited who need it.
10.2 ON YOUR PHONE
(a) Information on your phone is protected by your phone's own security, such as your passcode and the operating system's app sandbox.
(b) Offly does not add its own encryption on top, so anyone who can unlock your phone can open Offly. Please keep your phone locked and up to date.
(c) Your Trusted keeper code is stored only as a salted hash.
10.3 No system is perfectly secure, but we work to protect your information and to fix problems quickly.
10.4 IF SOMETHING GOES WRONG
(a) If a privacy breach is likely to cause serious harm, we will tell the Office of the Privacy Commissioner and the people affected as soon as practicable, as the New Zealand Privacy Act 2020 requires.
(b) Where the GDPR or UK GDPR applies, we will notify the relevant authority within 72 hours where required, and the people affected without undue delay.
(c) We will follow other local notification laws where they apply.
(d) Because Flock identities are anonymous, we may only be able to reach the people affected through the app.
11.0 CHILDREN
11.1 Offly is for people aged 13 and over.
11.2 To use Flock, you must be at least 16 if you live in the European Economic Area or the United Kingdom, and at least 13 everywhere else.
11.3 Offly is not directed to children under 13. It is a self-control tool for individuals, not a parental monitoring app.
11.4 If you believe a child under these ages has used Flock, email us with the details in Section 13.4 and we will delete their Flock information.
12.0 YOUR RIGHTS
12.1 WHEREVER YOU LIVE, YOU CAN:
(a) Get a copy of your information. Settings, then Export my data creates a file on your phone with what Offly keeps there, except your Trusted keeper code and any custom Shield screen contact. For information on our server, email us.
(b) Correct your information. Change your name on the Me tab, and your Flock nickname follows the next time Flock connects. You can also email us.
(c) Delete your information. Use Settings, then Delete all data, or follow https://sites.google.com/view/offly/delete-data.
(d) Withdraw your consent to Flock at any time with Settings, then Turn off Flock. It is as easy as giving it, and it deletes your Flock information from our server (see Section 5.4).
12.2 NEW ZEALAND
(a) Under the Privacy Act 2020 you can ask to access your personal information (Information Privacy Principle 6) and ask us to correct it (Information Privacy Principle 7).
(b) If you are not happy with how we handle your request or your information, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
12.3 EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND SWITZERLAND
(a) Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection you also have the right to restrict how we use your information, to object to processing based on our legitimate interests, to receive your information in a portable format, and to withdraw consent at any time without affecting earlier processing.
(b) Our legal bases are:
(i) Consent (Article 6(1)(a)): to take part in Flock, which you give on the Flock consent sheet, and for "Share my total".
(ii) Contract (Article 6(1)(b)): to provide the Flock features you ask for, and to answer your emails.
(iii) Legitimate interests (Article 6(1)(f)): to keep Flock safe, for example limits on wrong join codes and handling reports and blocks; to read the ideas you send so we can improve Offly; and to keep short server logs for security.
(c) You can complain to your local data protection authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In Switzerland it is the Federal Data Protection and Information Commissioner.
12.4 CALIFORNIA AND OTHER US STATES
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, we tell you the following:
(a) Categories we collect, only if you use Flock or send an idea: identifiers (the anonymous identity, your nickname and your IP address), and internet or other electronic network activity (the Flock figures and actions in Section 5.2, and the ideas you send).
(b) Sources: you and your device.
(c) Purposes: described in Section 5.0.
(d) We disclose this information only to our service provider Supabase, and to other Flock members as you choose.
(e) We do not sell or share your personal information (including for cross-context behavioural advertising), and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
(f) We do not collect sensitive personal information for the purpose of inferring characteristics about you.
(g) Your rights are to know, access, correct and delete your information, and not to be discriminated against for using these rights. You can use them in the app or by email. An authorised agent can ask for you with your signed permission.
(h) Retention: described in Section 9.0.
12.5 AUSTRALIA
(a) We handle personal information in line with the Australian Privacy Principles.
(b) You can ask for access or correction, and complain to us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
12.6 EVERYWHERE ELSE
(a) Wherever you live, you can ask us for access, correction or deletion, and we will help as far as we reasonably can.
13.0 HOW TO EXERCISE YOUR RIGHTS
13.1 IN THE APP
(a) Use Settings, then Export my data, Settings, then Turn off Flock, or Settings, then Delete all data.
(b) While Strict Mode is on, Delete all data waits until Strict Mode ends or you use Emergency pause.
13.2 BY EMAIL
(a) Write to offly.support@newversion.studio.
13.3 Information stored only on your phone is never held by us, so we cannot access, correct or delete it for you. Please use the tools in the app for that.
13.4 FINDING YOUR INFORMATION ON OUR SERVER
(a) Offly has no accounts, so we cannot find your information from your name or email address.
(b) Our server knows you only by your Flock ID, shown at the bottom of Settings once you use Flock or send an idea. It does not store the User ID shown above it. To help us find your record, please send as many of these as you can:
(i) The Flock ID from Settings, if you still have the app
(ii) Your Flock nickname
(iii) The name or join code of a flock you are in
(iv) Your invite code, from Settings, then Invite friends
(c) We may ask for more details to make sure the record is yours before we act.
(d) If we cannot find your record with confidence, it is still deleted automatically after 12 months without use (see Section 9.2).
13.5 TIMING
(a) We reply to privacy requests within 20 working days (New Zealand) or one month (European Economic Area and United Kingdom), or sooner where your local law requires.
(b) We do not charge for reasonable requests.
14.0 DELETING YOUR DATA
14.1 Settings, then Delete all data erases Offly from your phone and deletes your Flock information and ideas from our server. To delete only what is on our server and keep using Offly, use Settings, then Turn off Flock.
14.2 Both need an internet connection to reach our server. If you are offline, nothing is erased, so you can try again later.
14.3 Deleting your data does not cancel an Offly Plus subscription. You cancel it with Apple or Google.
14.4 Step-by-step instructions, including what to do if you no longer have the app, are at https://sites.google.com/view/offly/delete-data.
15.0 CHANGES TO THIS PRIVACY POLICY
15.1 We may update this policy when Offly or the law changes. We will update the dates at the top of this page.
15.2 If we make an important change, we will tell you in the app before it takes effect.
15.3 If a change needs your consent, for example a new kind of information sent through Flock, we will ask for it first.
16.0 CONTACT INFORMATION
16.1 PRIVACY QUESTIONS
Email: offly.support@newversion.studio
Support and FAQ: https://sites.google.com/view/offly/support
Delete Your Data: https://sites.google.com/view/offly/delete-data
16.2 BUSINESS INFORMATION
Operator: New Version Limited
Location: New Zealand
App: Offly (iPhone and Android)
16.3 We aim to reply within 2 business days (New Zealand time).
END OF PRIVACY POLICY
New Version Limited
13 October 2026