Last updated: 3 September 2026
Off the Record is a voice-note app for a small circle of people who already know each other. It has no feed, no recommendations, no advertising and no strangers. This policy explains what it stores, why, and how to get rid of it.
Off the Record is made and operated by Dominique Persson and Nils Abraham Elmgren, two individuals in Sweden, who are the data controllers for the purposes of the GDPR. It is published on the App Store under Nils Abraham Elmgren. Questions, requests and complaints, to either of us: off.the.record.apps@gmail.com.
Your account. Your email address, a display name, a handle, an optional avatar choice (one of a fixed set of pictures that ship inside the app — no photo is uploaded), and an optional intro sound you record. The email address identifies your account and is how you reset a password. It is never shown to other people in the app.
Your voice notes. The audio you record and send, along with its length, the time it was sent, and who it was sent to. Audio is stored so the people you sent it to can play it.
Who you are connected to. Your connections, any pending friend requests, your groups and their membership, your invite token, and anyone you have blocked.
Listen receipts. Whether you have played a note you received. Senders can see how many of their recipients have played a note.
Reports. If you report a take, we store what you reported, who sent it, the reason you chose and when. Reports are read by one of us.
Push token. If you allow notifications, a device token so the app can tell you a tape arrived. Nothing else about your device is collected.
On your phone only. Drafts, unsent takes, your recorded intro, cached audio for tapes on your shelf, and where you stopped in each tape. These live on the device and are deleted when you discard them or delete the app.
We do not collect location, contacts, advertising identifiers, analytics or crash telemetry, and there is no third-party tracking in the app.
We do not sell your data, share it with advertisers, use it to train anything, or listen to your voice notes — except the single take named in a report, when a report has been filed about it.
Nobody can find you unless you let them: profiles are readable only by people you are connected to, people you share a group with, people with a live friend request between you, and people you have exchanged a note with. A note can only be delivered to someone you are connected to, or to a group you are both in. Blocking someone ends both.
Data is stored with Supabase (Postgres and object storage) and push notifications are delivered via Expo, which passes them to Apple and Google. These providers process data on our behalf. Audio and database contents are stored in the region configured for the Supabase project.
Notes you have fully listened to are deleted automatically about a week after you have heard them. A note you delete is removed for everyone who received it. A tape you clear disappears for you and stays with the others. Reports and their associated records are kept while the report is open and for a reasonable period after it is resolved.
Everything else lives until you delete it.
Me → Delete my account, inside the app. It removes your profile, your handle, your notes and their audio from every shelf they reached, your connections, requests, blocks, group memberships and your login. Groups you created are removed; the tapes other people already received survive, because they were delivered to them, though they lose the group’s name. This is immediate and cannot be undone.
If you cannot get into the app to do this, write to off.the.record.apps@gmail.com and we will do it for you.
Under the GDPR, and under similar laws elsewhere, you have the right to access, correct, export or erase your data, to object to processing, and to complain to a supervisory authority — in Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se.
The app already covers access — everything held about you is visible inside it — and erasure, above. For anything else, write to off.the.record.apps@gmail.com and we will answer within 30 days.
Off the Record is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, write to off.the.record.apps@gmail.com and we will remove it.
Access to every row is enforced by the database itself rather than by the app, so a modified client cannot read what it is not entitled to. Audio is served through short-lived signed URLs. No system is perfect; if you find a hole, please tell us at off.the.record.apps@gmail.com before telling anyone else.
If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top always reflects the current version.
Dominique Persson and Nils Abraham Elmgren off.the.record.apps@gmail.com
Off the Record is run by two people, not a company. Email is the way to reach us, and we answer within 30 days — usually the same week.
This policy is governed by the laws of Sweden.