Privacy Policy
Last updated 5 August 2026
1. Who we are
This policy is issued by Offwatch Social Ltd ("OffWatch", "we", "us", or "our"), the company developing the OffWatch mobile application. Offwatch Social Ltd is registered in England and Wales under company number 17242018, with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
2. Scope of this policy
This policy covers this website (off-watch.com) and, once launched, the OffWatch mobile application. It does not cover third-party websites or services we link to.
3. Data we collect
The categories of personal data OffWatch is currently designed to process are:
- Account and profile data — information you provide to create and maintain a profile, such as a display name, profile details, and profile photo.
- Verification status metadata — a record of whether identity/age verification has been completed via our third-party verification provider. We do not receive or store the identity documents themselves; those are processed directly by the verification provider.
- Communications data — messages and related content sent through the app, and reports submitted for moderation purposes.
- Presence and activity data — limited technical data used to support in-app functionality, such as connection state between users.
- Device and push notification data — a device token used to deliver notifications, and basic device/platform information.
- Subscription data — entitlement and subscription status, handled via our subscription management provider and the relevant app store, not raw payment card data.
- Website usage data — this website does not currently use analytics or tracking cookies. If that changes, this policy and an appropriate consent mechanism will be updated first.
4. How we use your data
- To create and operate your account and provide the core functionality of the app.
- To verify identity/age where required, via our verification provider.
- To enable communication between users and to act on reports for trust and safety purposes.
- To deliver push notifications you have enabled.
- To manage subscriptions and entitlements.
- To maintain the security and integrity of the service.
5. Legal basis for processing
We rely on the following legal bases under UK GDPR for the processing described above:
- Performance of a contract — for account creation, core app functionality, communications between users, and subscription management.
- Legal obligation — for identity/age verification, where required by law or app store policy.
- Legitimate interests — for security, fraud prevention, and acting on reports for trust and safety purposes, balanced against your rights and freedoms.
6. Who we share data with
We use a small number of third-party service providers to operate OffWatch, each acting as a data processor under contract:
- Supabase — our backend/database hosting provider, for storing application data.
- Stripe Identity — our identity/age verification provider.
- Firebase Cloud Messaging (Google) — our push notification delivery provider.
- RevenueCat, alongside the Apple App Store / Google Play — for subscription and in-app-purchase management and billing.
We do not sell personal data to third parties.
7. International data transfers
Some of the providers listed above may process data outside the UK/EEA, including in the United States. Where this occurs, we rely on the safeguards those providers offer under UK GDPR — such as Standard Contractual Clauses or an equivalent adequacy mechanism — as part of our agreement with them.
8. Data retention
We retain account and profile data for as long as your account remains active, and generally delete it within 30 days of account deletion. Messages and reports may be retained for a limited period after that for trust and safety purposes. We may retain certain records for longer where required to comply with a legal obligation, resolve a dispute, or enforce our agreements.
9. Your rights
Subject to applicable law, you generally have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. Once the app has launched, this section will describe exactly how to exercise these rights in-app and via our support contact.
10. Children's privacy
OffWatch is intended for adults working in maritime and offshore industries. It is not directed at children, and we do not knowingly collect personal data from children.
11. Security
We intend to apply industry-standard technical and organisational measures — including access controls and encryption in transit — to protect the data described above. No system can be guaranteed 100% secure.
12. Changes to this policy
As OffWatch moves from development towards public launch, this policy will be revised — most significantly once legal review is complete. Material changes will be dated and, once the app has launched, notified to users through the app.
13. Contact us
Questions about this policy can be sent to the contact details on our Contact page.