Who we are

offa is a mobile app that connects consumers with local businesses offering time-limited deals. The app is operated by the team at offa.

If you have any questions about this policy, contact us at: jack@offa-advertising.com

What data we collect and why

Account information

When you register, we collect your first name, last name, and email address. This is used to create and manage your account. Your password is stored in hashed form and is never readable by us.

Location data

offa is a location-based service. We collect your location in the following ways depending on how you use the app:

• Active scanning — when you activate deal scanning, we collect your precise location approximately every 15 seconds to identify nearby deals. This stops when you deactivate scanning.

• Always-on mode — if you enable always-on mode, we collect your location in the background approximately every 5 minutes, even when the app is closed. A persistent notification will always be visible when this mode is active. You can disable it at any time in the app.

Location data is used solely to match you with nearby deals and send relevant notifications. Your last known location is stored on our servers and updated each time your device syncs.

Usage and engagement data

When you receive, redeem, or interact with a deal, we record this activity. This includes whether you redeemed a deal, whether you confirmed a visit to the business, your optional spend amount, your optional star rating, and any optional feedback you provide. This data is used to improve deal relevance and provide businesses with anonymised performance insights.

Business information

If you register a business, we collect your business name, type, address (including precise coordinates), website, and optional social media handles. This information is used to display your business and deals to nearby consumers.

Team and invite data

If you invite team members to your business, we store their email addresses and role until the invite is accepted or removed. Team members can see each other's names and roles within the business.

Device data

We store a push notification token for your device to deliver deal notifications. This is cleared when you delete your account or disable notifications.

Subscription data

If you subscribe to a paid plan, your subscription status and tier are stored. Payment is processed entirely by Stripe — we do not store card details.

Who we share your data with

Stripe

Used for subscription payment processing. When you initiate a checkout, your user ID and selected plan are shared with Stripe to create a secure checkout session. Stripe manages all payment card data directly. Stripe's privacy policy: stripe.com/privacy

Mapbox

Used for address geocoding and map display. When a business registers or updates their address, the postcode is sent to Mapbox to retrieve coordinates. Mapbox's privacy policy: mapbox.com/legal/privacy

Expo

Used to deliver push notifications. Your push notification token and the title and type of deals are sent to Expo's notification service when deals are available nearby. Expo's privacy policy: expo.dev/privacy

OpenAI

Used to power optional AI features. If you use the AI deal summary feature, your anonymised redemption history (deal titles only) is sent to OpenAI to generate a summary. If a business uses the AI deal creation feature, their deal history and business type are sent to OpenAI to generate suggestions. OpenAI's data usage policy: openai.com/policies/api-data-usage-policies

Azure

Our backend infrastructure is hosted on Microsoft Azure in the UK South region. Your data is stored and processed on Azure servers. Microsoft's privacy policy: privacy.microsoft.com

We do not sell your data to any third party. We do not use any third-party analytics or advertising tracking tools.

How long we keep your data

We retain your data for as long as your account is active. If you close your account, your personal details (name, email, phone number) are anonymised immediately and your account becomes permanently inaccessible. Historical deal engagement records are retained in anonymised form for reporting purposes.

Push notification tokens are cleared on account closure. Business data is deleted when a business is removed from the platform.

If you would like your data reviewed or removed, contact us at jack@offa-advertising.com

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate personal data

•   Delete your account and personal data (via Settings → Close Account, or by contacting us)

•   Restrict how we process your data in certain circumstances

•   Object to processing based on legitimate interests

•   Data portability — receive a copy of your data in a machine-readable format

To exercise any of these rights, contact us at jack@offa-advertising.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Legal basis for processing

Account registration data — Contract: necessary to provide the service

Location data — Consent: you explicitly activate location features

Deal engagement data — Legitimate interests: improving deal relevance and business insights

Push notification token — Consent: you grant notification permission

Business registration data — Contract: necessary to provide the business service

Subscription data — Contract: necessary to manage your subscription

Children

offa is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at jack@offa-advertising.com and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you via the app or by email. The date at the top of this page always reflects the most recent version.

Contact

Jack

jack@offa-advertising.com