Privacy Policy

Introduction

OFFUNIT ("we," "us," or "our") is a social networking platform built for nurses and healthcare professionals — for dating, friendship, and professional networking. This Privacy Policy explains what information we collect through the OFFUNIT mobile app, waitlist, and website, how we use it, who we share it with, and the rights and choices you have.

By creating an OFFUNIT account or joining the waitlist, you agree to the practices described here.

1. Information We Collect

Account & profile information you provide:

• Name, email address, and password (stored as a secure hash — we never see your plain-text password)
• Age / date of birth (to verify you are 18 or older)
• Profile photos and an optional featured GIF
• Bio, icebreaker prompts, and quiz answers (including your personality result)
• Professional details: nursing specialty and sub-specialty, years of experience, shift type, and certification status
• Your selected modes (dating, friends, networking) and matching preferences

If you sign in with Google or Apple: we receive your name, email address, and an account identifier from Google or Apple. We never receive your Google or Apple password.

If you verify your nursing license (optional): we collect your license number, license state, and expiration date, and the photo of your license you submit. See Section 4.

Location: with your permission, we use your device's location to place you in a city hub and show you nearby members. We use approximate, city-level location for matching — other users never see your precise coordinates.

Content you create: chat messages with your matches, posts, comments, and reactions on the OffFeed, badges you earn, and reports you submit.

Collected automatically:

• Device information, app version, and crash/diagnostic data
• Push notification tokens (so we can deliver notifications you've enabled)
• On the website only: general location, browser type, pages visited, IP address, and ad interaction data via Meta Pixel and TikTok Pixel

What we do not collect:

• Credit card or bank details — subscription payments are processed entirely by Apple's App Store or Google Play; we never see your payment credentials
• Protected Health Information (PHI) or any patient data — sharing it is prohibited (see Section 7)

2. How We Use Your Information

• Operate the platform: create your profile, suggest matches, deliver messages, and run the OffFeed
• Verify professional credentials for members who choose RN verification
• Keep the community safe: enforce our guidelines, review reports, and moderate content (see Section 3)
• Send notifications you've enabled (matches, messages, verification updates) and important account emails
• Manage subscriptions and unlock paid features
• Fix crashes and improve the app using diagnostic data
• For the waitlist: send launch announcements and prioritize which city hubs open first
• Measure the effectiveness of our website advertising (anonymized)
• Prevent fraud and abuse, and comply with legal obligations

3. Content Moderation & Safety

OFFUNIT uses a combination of automated systems and human review to keep the community safe:

• Automated screening: text and images you post may be automatically scanned by AI systems to detect patient-privacy violations (PHI) and other content that violates our guidelines. Photo metadata (such as embedded GPS data) is stripped from images you upload.
• Human review: when content or a profile is reported, our moderation team can review the reported content, the profiles involved, and — for reported conversations — the relevant messages.
• Enforcement records: if moderation action is taken (warning, content removal, or ban), we keep an internal record of the action and an evidence snapshot of the relevant content. These safety records may be retained even after an account is deleted, for as long as reasonably necessary for the safety of the community, dispute resolution, and legal compliance.

4. Nursing License Verification

Verification is optional and earns a verified badge. When you submit a photo of your nursing license, we use an AI service to extract the license details (number, state, expiration), and a human administrator reviews and confirms the result. Your license photo and details are used solely for verification and are never shown to other members — only the verified badge is visible.

5. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. Ever.

Other members: your profile (name, age, photos, GIF, bio, prompts, professional details, badges, and verified status) is visible to other OFFUNIT members as part of how the platform works. Your email, precise location, license details, and license photo are never shown to other members.

Service providers that process data on our behalf:

• Supabase — database, authentication, and photo storage (SOC 2 compliant)
• Railway — backend server hosting
• Expo — app updates and push notification delivery
• Anthropic — AI processing for content safety scanning and license-detail extraction
• Resend — transactional email delivery (password resets, verification decisions)
• Sentry — crash and error reporting
• RevenueCat — subscription management (receives purchase receipts from Apple/Google, not your payment details)
• GIPHY — GIF search (your search terms are sent to GIPHY to return results)
• Google / Apple — sign-in, if you choose social login
• Meta Pixel / TikTok Pixel — anonymized advertising measurement, website only

All service providers are contractually required to use your data only to provide services to us.

Legal requirements: We may disclose information if required by law, subpoena, or court order, or to protect the safety of users or the public — including reporting to authorities where we are legally obligated to do so.

Business transfer: If OFFUNIT is acquired or merges with another company, your data may be transferred. We will notify you before your information becomes subject to a different privacy policy.

6. Data Storage & Security

Your data is stored in the United States. We use encrypted connections (HTTPS/TLS) for all data in transit, passwords are stored as secure hashes, and access to production data is restricted.

Despite these measures, no system is perfectly secure. We cannot guarantee absolute security and encourage you to use a strong, unique password.

7. Patient Privacy (HIPAA Notice)

OFFUNIT is not a HIPAA covered entity and does not provide a HIPAA-compliant environment. The platform is a social and networking space — it is not intended for clinical communication or the storage of any patient information.

8. Data Retention & Account Deletion

We keep your account data for as long as your account is active. You can permanently delete your account at any time from inside the app (Settings → Delete Account). Deletion removes your profile, photos, matches, messages, posts, and comments from the platform.

Limited data may be retained after deletion where reasonably necessary: safety and moderation records (see Section 3), records we need to comply with legal obligations, and backups that roll off on a fixed schedule.

Waitlist data is retained until you request removal or you create an account at launch. To be removed from the waitlist, email contact@offunit.app and we will delete your data within 30 days.

9. Your Rights & Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information (most profile data can be edited directly in the app)
• Delete your account and data (in-app, or by emailing us)
• Disable push notifications (in your device settings) and opt out of emails at any time
• Revoke location permission in your device settings (matching will fall back to your selected city)

To exercise any of these rights, email contact@offunit.app. We will respond within 30 days.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — what personal information we collect and how we use it
• Right to delete — request deletion of your personal information
• Right to opt out of sale — we do not sell personal information
• Right to non-discrimination — we will not discriminate against you for exercising these rights

11. Age Requirement

OFFUNIT is intended for adults 18 years of age and older, and the app is rated 17+ in the app stores. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a minor, we will delete it promptly. If you believe a minor has created an account, contact us at contact@offunit.app.

12. Changes to This Policy

We may update this policy as the product evolves. When we make material changes, we will update the effective date at the top of this page and, for significant changes, notify you in the app or by email. Continued use of OFFUNIT after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions, concerns, or data requests:

• Email: contact@offunit.app
• Website: offunit.app

We're a small team and we actually read the emails.