Privacy Policy
1. What Log Off collects
Log Off does not require an account, sign-in, email address, or name. On first launch, the app creates an encrypted local database on your device. The following is stored exclusively on your device and never transmitted to Deployd's servers:
- Journal entries & check-ins — your daily logs, notes, and mood tags
- Streak & gamification progress — your quit date, resets, XP, level, and badges
- AI companion chat history — your conversation with the companion
- Goals & settings — your companion tone, recovery goal, notification preferences, and similar settings
We do not collect your location, contacts, camera or microphone access, advertising identifiers, or biometric data.
2. AI companion & chat data
Log Off's AI companion is powered by Anthropic's Claude models.
- What is sent — only the messages you type to the companion, together with a system prompt that includes your companion-tone preference, are transmitted to Anthropic's API to generate a response.
- What is never sent — your journal entries and check-ins and your recovery-goal settings are never transmitted to Anthropic or any other AI provider.
- No training data — per Anthropic's API terms, your conversation data is not used to train their models.
If a message doesn't match any on-device safety keyword but is longer than 20 characters, a short, automated classification request — containing only that message — may also be sent to Anthropic to check for signs of crisis. This classification result is not stored by Deployd.
3. Crisis detection & emergency data
Log Off uses a two-layer, privacy-preserving safety system: an on-device keyword scan runs first, and only ambiguous messages are passed to the AI classifier described in Section 2. If either layer detects a potential crisis, the app shows a Crisis screen with region-appropriate crisis hotlines.
No data about a crisis detection — including the message that triggered it, your location, or your identity — is logged to Deployd's servers or any third party. The hotline directory is bundled with the app and selected based on your device's locale — no location data is transmitted.
4. Analytics & crash reporting
Log Off uses Firebase Analytics and Firebase Crashlytics to understand app usage and diagnose crashes. Tracked events include things like app launches, streak starts and resets, journal entries saved (count only), the Crisis screen being shown, and subscription events (paywall shown, subscription started).
Strict privacy guarantee: analytics and crash reports never include your chat messages, journal content, crisis classification results, or any other personally identifiable information.
5. Third-party providers
Anthropic
Purpose: AI companion responses & crisis-message classification
Data shared: The text of messages you send to the companion, plus a system prompt (see Section 2)
RevenueCat
Purpose: Subscription management
Data shared: An anonymous device identifier and subscription status — never your payment details
Firebase Analytics (Google)
Purpose: Anonymous usage analytics
Data shared: Event names and counts only — no PII, chat, or journal content
Firebase Crashlytics (Google)
Purpose: Crash reporting
Data shared: Anonymised stack traces and breadcrumb logs — no message or journal content
Expo
Purpose: Over-the-air app updates
Data shared: App version and update channel — no personal data
6. Data retention & deletion
Because Log Off has no account system, all of your data lives on your device. Use Settings → Privacy → Delete all data to permanently and immediately erase your streak, journal, check-ins, and chat history — this cannot be undone.
If you enable auto-backup or tap "Backup now," Log Off keeps up to 7 days of local backup files (encrypted with your Backup PIN if you've set one). Uninstalling the app removes the local database but not previously exported or shared backup files, which remain wherever you saved them.
7. Your rights
Because Log Off stores your sensitive data locally rather than on our servers, the most direct way to exercise access, correction, and deletion rights is the in-app Delete all data option, which is immediate and complete.
If you have questions about data shared with the third parties listed in Section 5, or you are located in the EU/UK, California, or another jurisdiction with statutory privacy rights, contact us using the details in Section 10 and we will respond within 30 days. EU/UK users may also lodge a complaint with their local data protection authority.
8. Security
- Local database — encrypted with SQLCipher (AES-256); the encryption key is generated on-device and stored in the Android Keystore or iOS Keychain via
react-native-keychain. - Backups — if you set a Backup PIN, exported and local backup files are encrypted with AES-256 using a key derived from your PIN via PBKDF2 (100,000 iterations).
- In transit — all communication with Anthropic, RevenueCat, and Firebase uses TLS encryption.
No security system is perfect, but because nearly all of your data never leaves your device, the practical risk of a server-side breach affecting your journal or chat history is minimal.
9. Children's privacy
Log Off is intended for mature users (17+) and is not directed at children. We do not knowingly collect personal data from children.
10. Questions?
Settings → About → Privacy policy or email support@deployd.in