Last updated: October 24, 2026
OffShelf ("we", "our", the "App") helps users track what they're learning. This document explains what data we collect, why we collect it, how long we keep it, who we share it with, and the rights you have over it. It is written to satisfy the Google Play Data Safety section and general GDPR / CCPA obligations.
com.offshelf.offshelf| Data | Source | Purpose |
|---|---|---|
| Name (display name) | Google account, editable in app | Display in profile and leaderboard |
| Email address | Google account | Account identifier, login, support replies |
| Profile photo (URL) | Google account | Avatar in profile and leaderboard |
| Short bio (optional) | You type it | Display on your profile |
| Topics you want to learn | You type them | Build your personal "shelf" |
| Study-session entries | Generated as you use the app | Calculate hours, streaks, milestones |
| Notes (rich-text notebook) | You type them | Private notebook per topic |
| Notification preferences | Settings screen | Control reminders |
| Community messages (text, replies, and your friend code if you choose to share it) | You write them in Community | Shown to other learners in that day's Community room |
| Poll votes | You choose them | Count the results of polls from the OffShelf team |
| Reports and blocks | You file or choose them | Keep Community safe; hide people you blocked from you |
When you use the App, Firebase (our backend provider) automatically records:
These are used solely to operate the service. They are not combined with advertising data.
| Purpose | Legal basis |
|---|---|
| Creating and maintaining your account | Contract (Art. 6(1)(b) GDPR) |
| Showing your profile/leaderboard entry | Contract + your action of enabling it |
| Running Community and moderating it (filtering, reports, blocks, bans) | Contract + legitimate interest in keeping it safe (Art. 6(1)(f)) |
| Sending you reminders & weekly AI insights | Consent (revocable in Settings) |
| Security, fraud prevention, crash diagnostics | Legitimate interest (Art. 6(1)(f)) |
| Responding to your support emails | Contract / legitimate interest |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
Your data is stored on Google Firebase infrastructure (Firestore, Firebase Auth, Firebase Cloud Messaging). Data may be processed in the United States and other countries where Google operates data centers. Google provides standard contractual clauses and other safeguards required for international transfers.
Notifications are delivered via Firebase Cloud Messaging and the operating system's notification system.
We share data only with:
We do not sell personal data. We do not share data with advertisers.
The following fields are visible to other OffShelf users on the leaderboard if and only if you have opted in by completing onboarding and have at least one study session:
Your email, bio, topics, sessions, and notes are private and visible only to you.
Community is one chat room shared by OffShelf learners. When you write there, every signed-in learner can see your message together with your display name and mascot. Your friend code appears only on a card you choose to share; anyone who sees it can send you a study companion request or a Weekly Competition invitation.
When you delete your account (see §7), all of the above is removed within 30 days from our live database and within 90 days from encrypted backups.
You can exercise all of the following rights directly inside the app or by emailing us:
| Right | How to exercise |
|---|---|
| Access the data we hold about you | Email us and we'll export it as JSON within 30 days |
| Correct your profile data | Settings → Edit Profile |
| Reset your learning data | Settings → Account → Reset my progress |
| Delete your account and all data | Settings → Account → Delete account |
| Withdraw notification consent | Settings → Notifications |
| Delete a Community message you sent | Hold the message → Delete |
| Block or report someone in Community | Hold their message → Block or Report |
| Complain to a data protection authority | Contact your local authority (EU: your country's DPA) |
Open the app → tap the trophy/settings icon → Account → Delete account → type DELETE to confirm. You may be asked to sign in with Google again to prove it's you. All of your data and your auth account are then removed.
If you cannot use the app to delete your account (for example, you uninstalled it or lost access), see the public Delete your OffShelf account page, or email basheer20599@gmail.com from the email address tied to your account with the subject line Delete my OffShelf account. We will verify your identity and delete all of your data within 30 days.
OffShelf is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has created an account, email us and we will delete it.
allowBackup=false on Android so auth tokens are not copied to Google Drive backups or transferred to another deviceNo system is 100% secure. If a breach affecting your personal data occurs, we will notify you and the relevant authorities as required by law.
We may update this Privacy Policy from time to time. Material changes will be announced inside the app at least 7 days before they take effect. The "Last updated" date at the top always reflects the current version.
If you have any question about this policy or how we handle your data: