Privacy Policy

Draft — not yet finalized

Placeholder notice: this is a boilerplate draft standing in until Offmat's actual Privacy Policy — provided by the Offmat team's own legal counsel — replaces it. It has not been reviewed by a lawyer, and does not attempt to address every jurisdiction's specific disclosure requirements (e.g. CCPA, GDPR). Don't treat it as final.

1. Overview

This policy describes what information Offmat collects, why, and how it's used. Offmat is a yoga community and personal-practice app currently operating in the Denver & Boulder area, in an invite-only beta.

2. Information We Collect

Account & profile information

Data	Why we collect it
Email & password	Account creation and login (via Supabase Auth)
Bio, practice styles, experience level, hobbies, intent	Building your profile and matching you with relevant people/community
Home & practice city, home studio	Local/regional matching and studio pages
Birth date	Deriving the sun/moon sign shown on your Journal entries — used once at onboarding, not used for any other purpose
Profile photos	Displayed on your Yogi Card / profile
Push notification token	Delivering notifications you haven't muted

Content you create

Journal entries, practice logs, messages, Circle posts, badges given/received. Journal entries and practice logs are private to you unless a feature explicitly says otherwise.

Payment information

If you subscribe to a paid tier, payment is processed by Stripe — Offmat does not store your full card number.

3. How We Use Information

To operate the Service: authentication, matching, messaging, notifications, billing.
To enforce these policies and the Terms of Service (e.g. rate limits, beta invite gating).
To improve the Service, including using feedback from beta users.

We do not sell your personal information.

4. Who We Share Information With

Supabase — our database, authentication, and file storage provider. Row-level security policies control which data any given user can access.
Stripe — payment processing for paid tiers.
Expo — push notification delivery.
Other users, to the extent your profile visibility settings ("The Door") allow — e.g. an open profile is visible to other users per the app's matching/discovery features; a connections-only profile is restricted accordingly.

We don't share your information with advertisers or data brokers.

5. Your Choices

You can edit or delete most profile information directly in the app.
You can control notification categories in Settings.
You can request account deletion by contacting us — this removes your account and associated personal data, subject to what we're required to retain by law (e.g. payment records).

6. Data Retention

We keep your information for as long as your account is active, plus a reasonable period afterward for backup and legal-compliance purposes, unless you request earlier deletion.

7. Children's Privacy

Offmat is for users 18 and older. We don't knowingly collect information from anyone under 18. If we learn we have, we'll delete it.

8. Security

We use industry-standard practices to protect your data (encrypted connections, row-level access controls, secrets never stored in application source code), but no system is perfectly secure — we can't guarantee absolute security.

9. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be flagged in the app.

10. Contact

Questions about this policy, or to request account deletion: hello@offmat.com [placeholder contact].