← Mental Offload

Privacy Policy

Effective date: 9 March 2026 · Last updated: 9 March 2026 · Version 1.0

Mental Offload ("the App", "we", "us", "our") is a task and household responsibility management app for couples. This Privacy Policy explains what personal data we collect, why we collect it, how we process it, and what rights you have.

We are committed to protecting your privacy. The App is designed with a local-first architecture: your data is stored on your device by default, and cloud features are optional.

1. Data Controller

Name: Adam Khelifi
Location: Denmark
Contact email: adam.khelifi1994@gmail.com

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at the email address above.

2. What Data We Collect

2.1 Data Stored Locally on Your Device

When you use the App without cloud sync, all data stays on your device in a local database (Apple SwiftData / SQLite). We do not have access to this data.

DataPurposeExamples
Your namePersonalize the app and label ownership of tasksFirst name entered in Settings
Partner's nameLabel your partner's tasks and responsibilitiesFirst name entered in Settings
TasksTrack household actions you need to completeTitle, description, due date, status, owner, work type, time estimates, completion date
ResponsibilitiesTrack ongoing ownership areas in your householdTitle, description, category, owners, active/archived status
RoutinesModel recurring time-blocked household activitiesRoutine name, active days of week, archive status
Routine blocksIndividual activities within a routineTitle, start time, duration, owner, notes
Offload itemsQuick-capture thoughts before they are fully scopedTitle, notes, item type, queue status
Task draftsStructured metadata for offload items being scoped into tasksWork type, owner, recurrence settings, due date, linked responsibility
CategoriesOrganize responsibilities and tasksCategory name (some are system defaults)
Recurrence rulesDefine repeating schedules for tasksFrequency, day selections, monthly patterns
SubtasksBreak tasks into smaller stepsTitle, completion status, order
App preferencesRemember your settingsLanguage, appearance, task view mode, default task owner

2.2 Data Collected When Cloud Sync Is Enabled

Cloud sync is an optional feature. When you enable it and create an account, the following additional data is collected and stored on our cloud servers (hosted by Supabase):

DataPurpose
Email addressAccount authentication and couple invitations
User IDUnique account identifier
Authentication tokensMaintain your signed-in session (stored in your device's Keychain)
All local data listed in Section 2.1Sync between your devices and share with your partner
Couple membershipLink two partners in a shared household
Invite tokensSecurely invite your partner to join your couple

2.3 Data Collected When You Subscribe (Billing)

If you purchase a subscription through the Apple App Store:

DataPurpose
Apple transaction IDVerify your purchase and activate your subscription
Subscription plan and statusDetermine which features you can access
Billing account recordLink your subscription to your couple

We do not collect or store your payment card details, Apple ID, or Apple account credentials. All payment processing is handled by Apple.

2.4 Data Collected by the Voice Feature (YAP) — Currently Inactive

The YAP voice capture feature is currently not available in the App. When it is reactivated in a future update, the following will apply:

DataPurpose
Audio recordingTemporarily recorded on your device, then sent to OpenAI for transcription
Transcript textText version of what you said, used to extract task details
Responsibility titlesSent alongside the transcript so the AI can match tasks to your existing responsibilities

Audio recordings are deleted from your device immediately after processing. We do not store audio recordings on our servers.

2.5 Data We Do NOT Collect

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

Processing ActivityLegal BasisExplanation
Storing tasks, routines, responsibilities locallyContract performance (Art. 6(1)(b))Necessary to provide the core app functionality you requested
Storing your name and partner's nameContract performance (Art. 6(1)(b))Necessary to personalize the app and label task ownership
Cloud sync of data to SupabaseConsent (Art. 6(1)(a))You actively choose to enable cloud sync and create an account
Couple invite emailsLegitimate interest (Art. 6(1)(f))You request that we send an invitation to your partner
Subscription billing verificationContract performance (Art. 6(1)(b))Necessary to verify your purchase and provide the subscribed features
Voice processing via OpenAI (when active)Consent (Art. 6(1)(a))You actively choose to use the voice feature and grant microphone access
App preferences storageContract performance (Art. 6(1)(b))Necessary to remember your settings between sessions

4. How We Share Your Data — Third-Party Processors

We share personal data with the following third-party service providers (sub-processors), each of which processes data on our behalf:

4.1 Supabase (Cloud Database and Authentication)

4.2 Apple

Apple acts as an independent controller for payment processing. We receive only the transaction ID and subscription status from Apple, not your payment details.

4.3 OpenAI (When YAP Voice Feature Is Active — Currently Inactive)

4.4 Resend (Email Delivery)

We do not sell, rent, or trade your personal data to any third party.

5. International Data Transfers

The App is operated from Denmark (EU). When cloud features are enabled, your data may be transferred to countries outside the European Economic Area (EEA):

RecipientCountryTransfer Mechanism
SupabaseEU (AWS eu-west-1, Ireland)EU hosting — no cross-border transfer required
AppleUnited StatesEU-US Data Privacy Framework
OpenAI (when active)United StatesStandard Contractual Clauses (to be executed when YAP is reactivated)
ResendUnited StatesStandard Contractual Clauses (to be executed)

6. Data Retention

Data CategoryRetention Period
Local data (on device)Retained until you delete it through the App or delete the App from your device
Cloud-synced data (active)Retained as long as your account is active
Cloud-synced data (soft-deleted)Purged 45 days after deletion
Couple invite tokensExpire after 72 hours. Expired invites are marked as expired but not immediately deleted.
Billing eventsRetained for the lifetime of your account for subscription management and dispute resolution
Data exportsAutomatically deleted from your device after 7 days
Voice recordings (when YAP is active)Deleted from your device immediately after processing. Not stored on our servers.
Authentication sessionsCleared when you sign out or delete your account

7. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

7.1 Right of Access (Article 15)

You can request a copy of all personal data we hold about you. In the App, go to Settings > Export My Data (JSON) to download a machine-readable export of all locally stored data.

If cloud sync is enabled, contact us at adam.khelifi1994@gmail.com to request a complete export including cloud-stored data.

7.2 Right of Rectification (Article 16)

You can correct any inaccurate personal data directly in the App. Edit your name, partner's name, tasks, responsibilities, routines, and all other data through the relevant screens.

7.3 Right of Erasure (Article 17)

You can delete your data in the following ways:

7.4 Right to Data Portability (Article 20)

You can export your data in a structured, machine-readable format (JSON) via Settings > Export My Data (JSON). The export includes all tasks, responsibilities, routines, preferences, and related data.

7.5 Right to Restrict Processing (Article 18)

You can restrict processing by disabling cloud sync (using the App in local-only mode). Contact us at adam.khelifi1994@gmail.com if you need to restrict processing of specific data categories.

7.6 Right to Object (Article 21)

You can object to processing based on legitimate interest by contacting us at adam.khelifi1994@gmail.com. For couple invite emails, you can ask us not to send further invitations.

7.7 Right to Withdraw Consent (Article 7(3))

Where processing is based on consent (cloud sync, voice processing), you can withdraw consent at any time by:

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

7.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

8. Data Security

We implement the following security measures to protect your personal data:

9. Children's Privacy

Mental Offload is designed for adults managing household responsibilities as a couple. The App is intended for users aged 18 and older.

We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us at adam.khelifi1994@gmail.com and we will delete it.

10. Information for United States Residents

10.1 California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Categories of personal information collected (as defined by CCPA):

CCPA CategoryData ElementsBusiness Purpose
IdentifiersName, email address, user IDAccount creation, app personalization
Commercial informationSubscription plan, transaction IDBilling and subscription management
Internet or electronic network activityN/AN/A
Audio informationVoice recordings (when YAP is active — currently inactive)Voice-to-task conversion
InferencesTask ownership patterns, responsibility distributionApp functionality (summary/analytics shown to the user)

How to submit a request: Email adam.khelifi1994@gmail.com or use the in-app data export and deletion features described in Section 7.

10.2 Other US State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with consumer privacy laws have similar rights to access, delete, and opt out of data sales. We honor these rights as described in Section 7. We do not sell personal data or use it for targeted advertising.

11. Information for United Kingdom Residents

If you are in the United Kingdom, your data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Your rights under Section 7 apply equally under UK law. The Information Commissioner's Office (ICO) is your supervisory authority: ico.org.uk.

12. Information for Canadian Residents

If you are in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you are in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).

13. Information for Australian Residents

If you are in Australia, your personal information is protected under the Privacy Act 1988 and the Australian Privacy Principles (APPs). Your rights under Section 7 apply. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Information for Swiss Residents

If you are in Switzerland, your data is protected under the revised Federal Act on Data Protection (revFADP). Your rights under Section 7 apply. The Federal Data Protection and Information Commissioner (FDPIC) is your supervisory authority: edoeb.admin.ch.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes (such as collecting new categories of data, adding new third-party processors, or changing the legal basis for processing), we will notify you through the App before the changes take effect and, where required, seek your renewed consent.

The "Last updated" date at the top of this document indicates when the most recent changes were made.

16. How to Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a concern:

Email: adam.khelifi1994@gmail.com
Location: Denmark

We aim to respond to all data rights requests within 30 days.