Off DutySign in

Privacy policy

Last updated October 26, 2026

Off Duty helps friends turn an intention to get together into a confirmed plan on their calendars. This policy explains what we collect, why, and the choices you have. We collect the minimum needed to coordinate plans, and we don't sell your data or use it for advertising.

What we collect

  • Account: your name, email address, and profile photo from Google sign-in, and your time zone.
  • Plans: what you're planning, who's invited (names, and email addresses if the organizer adds them), date ranges, preferences, each person's yes/no answers, and the confirmed time.
  • Availability: free times you enter by hand, or, if you connect Google Calendar, busy/free blocks for the period being planned.
  • Calendar connection: encrypted Google access tokens, the list of your calendars (names only) so you can choose which count as busy, and identifiers of the events we create for your plans.
  • Assistant connections: if you connect an AI assistant, a hashed access token and the permissions you gave it. Text an assistant passes when starting a plan is used for that request and not stored.
  • Operational records: an audit log of plan actions (who confirmed what, and whether by tap or by an assistant you authorized), delivery status of emails we send you, and server logs.

Google user data

If you choose to connect Google Calendar, we request these permissions:

  • See the availability on your calendars (calendar.events.freebusy): to find times when everyone is free. We receive only busy/free time ranges, never event titles, descriptions, locations, or attendees.
  • See the list of your calendars (calendar.calendarlist.readonly): so you can choose which calendars, such as a work-shift calendar, count toward your availability.
  • Manage events on calendars you own (calendar.events.owned): to add a confirmed plan to your calendar, move it if it's rescheduled, and remove it if it's called off. We only ever create, change, or delete events that Off Duty created for your plans.

We never show your busy times or calendar contents to other people. Others see only whether a proposed time works for the group, for example "3 of 3 are free".

Off Duty's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the scheduling features described here. We do not use it for advertising, do not sell it, do not use it to train AI models, and do not let people read it except with your permission, for security, or where required by law.

Who we share data with

  • People in your plans see your name, whether you're in, and your answers, but not your calendar or availability.
  • Service providers that run the app for us: Vercel (hosting), Neon (database), Resend (email delivery), Cloudflare (DNS and scheduled tasks), and Google (sign-in and Calendar). They process data only to provide their services to us.
  • AI assistants you connect can see and do only what you allowed when you created their access, and you can revoke it in Settings.
  • We may disclose information if required by law or to protect people's safety.

Security and retention

Google tokens are encrypted at rest, and invite links and assistant tokens are stored only as hashes. Data is sent over HTTPS. We keep plan data while your account exists so your plans and history work. Busy/free data from Google is used when finding or confirming a time and is not stored.

Your choices

  • Disconnect Google Calendar any time in Settings. This revokes our access. You can also remove access at myaccount.google.com/permissions.
  • Turn off email updates in Settings.
  • Delete your account in Settings. We call off plans you organize, remove you from others, delete the calendar events we created for you, revoke Google access, and delete your account data. Backups are overwritten within 30 days.

Children

Off Duty isn't intended for children under 13, and we don't knowingly collect their data.

Changes and contact

If we change this policy we'll update the date above, and tell you in the app for significant changes. Questions or requests: support@dapreedoyle.com.