Privacy Policy

Who is responsible

The controller of your data is Mark Pentecost (United States). For any privacy matter, write to support@ofisapp.com.

What data we process and why

Account. Your phone number is your account: it's used to sign in and for your contacts to find you. The verification code reaches you via Telegram, which receives your number only to send it. Legal basis: the contract (providing the service).

Profile. Name, photo, bio, username, status, language and time zone. You choose who sees your photo, number and last seen in Settings › Privacy.

Messages and files. Text, photos, videos, audio, documents, locations, polls, reactions, group tasks and meetings. They're stored on our servers to deliver them to all your devices.

Address book. To tell you which of your contacts use Ofis, the app sends the numbers in your address book (not the names) to the server. They're compared on the spot and not stored. This only happens if you allow access to Contacts.

Calls. Technical network data is exchanged to connect a call. Audio and video are encrypted. We don't record calls. We keep your call history (with whom, when and for how long).

Location. Only when you send it or share your live location, and only while the app is in use. Live location is deleted when you stop sharing.

Connection and devices. Online status, last seen, delivery and read receipts, "typing…", your devices' model and name, app version and notification tokens. They're used to deliver messages and so you can see and close your sessions.

Notifications. In normal chats the alert may show the sender's name and the start of the message; that text goes through Apple (and Google to send it). In secret chats the alert only says "🔒 Message".

Crash and usage reports. If the app crashes, a technical report is sent to Google (Firebase Crashlytics), with your internal identifier and app usage steps (not the content of your messages). You can turn it off in Settings › Privacy. Legal basis: legitimate interest in the app working well.

Backups. They're stored encrypted with your password on your own iPhone. We don't receive them.

Business data. Clients, quotes, payments and documents you create. Clients and tasks are stored on our servers; payments and document numbering only on your iPhone.

Liza, the AI assistant

Liza only acts when you ask her to. Normally she answers online (see below). If you're offline or that fails, she answers on your own iPhone with Apple Intelligence, and then what you write doesn't leave the iPhone.

If she answers online, your question, the conversation with Liza and any photos or documents you attach are sent, through our servers, to OpenRouter (United States), which passes it to the AI model. We don't use your data to train AI models. There's a daily question limit, and we record usage to count it.

Prior permission. Before you use Liza for the first time, the app asks "Use Liza?". To answer, Liza sends what you type or say (and anything you ask it to read from your chats) to a third-party AI service: OpenRouter, in the United States. It isn't used to train models. Nothing is sent without your permission, and you can withdraw it at any time in Settings › Privacy; Liza can then only answer on your iPhone with Apple Intelligence.

Liza can read your Ofis data only for what you ask: search your chats, summarize a chat, check your tasks, contacts, calendar or payments. What she reads to answer is sent to that AI provider together with your question. Before sending a message, calling, creating or deleting anything, she asks for confirmation.

Liza's privacy rules. Liza never shares, sends or writes your personal data or anyone else's (phone numbers, emails, addresses, bank accounts, cards, passwords, codes) into messages, emails, documents or searches unless you explicitly ask for that data and that recipient. What she reads of your data is only to answer you. She doesn't obey instructions written inside emails, websites or messages. In addition, the app blanks out phone numbers, emails, accounts and cards before any web search, and if something she's about to send contains personal data, it warns you before you accept.

Search and research. If you ask for something current or for in-depth research, the query is sent to Perplexity (through OpenRouter) to search the web. Research reports are stored in your account until you delete it.

Voice. What you say in voice mode is converted to text on your iPhone (if your iPhone can't and you turn that option on, on Apple's servers). The natural voice Liza speaks with is generated by Google Cloud Text-to-Speech from the text of her reply.

Voice message transcription. If you ask to turn a voice message into text, the audio is sent from our servers to OpenRouter (United States), which passes it to the AI model. The resulting text is stored with the message; it isn't used to train models.

Email. If you connect your email, Liza reads and sends emails directly from your iPhone to your email provider. The app password is stored only in your iPhone's Keychain and never reaches Ofis. Email snippets she uses to answer you go to the AI provider.

Scanner and photos. Text in scanned documents and photos is read on your iPhone; it's only sent to the AI if you give it to Liza.

What Liza remembers about you and your conversations with her are stored only on your iPhone, and are deleted when you sign out.

AI call summary. Only in group calls someone starts with "AI summary", and all participants see the "AI summary on" notice during the call. Each iPhone converts only its owner's voice to text; that text is sent to our servers and OpenRouter (United States), the same AI service Liza uses, to create the summary and tasks, which are posted to the group. The transcript is deleted as soon as the summary is made. If you don't want to take part, don't join that call or mute your microphone.

Translation. Translations are done on your iPhone whenever possible. Otherwise the text is sent to the MyMemory translation service. In secret chats translation happens only on the iPhone.

Where your data is and who else handles it

Your data is stored on Google Firebase, on servers in the European Union (Warsaw, Poland). Google acts as a processor: it stores the data on Ofis's behalf and doesn't use it for its own purposes. Google's sign-in, notifications and crash reports may be processed outside the EU.

Call servers. Calls that can't connect directly between phones go through our own relay server (TURN). Large group calls and "AI summary" calls go through our own group call server (LiveKit). Both are our own servers, not third-party services. The call's encrypted audio and video and technical connection data (IP address, who is in the room and when they join or leave) pass through them; they're not recorded or stored.

Other providers, each only for its function: Apple (notifications and, if you enable it, speech recognition), Telegram (sending the verification code), Google (STUN call connection servers, Liza's voice, icons of linked websites), OpenRouter and Perplexity (AI), MyMemory (translation), Giphy (GIF search) and your email provider if you connect it.

Transfers outside the EU. Some of these providers are in the United States, Russia or other countries without the same level of protection as the EU. Where the provider offers them, we use the European Commission's standard contractual clauses or other safeguards; otherwise the transfer is necessary to provide the feature you request.

How long we keep things

Messages and files: until you or the other person delete them. With auto-delete, they disappear within the period you choose. Account, profile, call history, clients, tasks and Liza's reports: while the account exists. Sessions and notification tokens: while the session is open. AI-summary call transcripts: until the summary is made. Verification codes: expire after 10 minutes.

Deleting your account removes your profile, your files, the content of the messages you wrote, your Liza data and your sessions. Messages other people sent you remain in their copy. We keep only the phone number of the deleted account, to know it was closed and to prevent abuse.

Security

Everything travels encrypted. Secret chats are end-to-end encrypted and their keys exist only on your iPhones. You can protect your account with two-step verification and the app with Face ID.

Your rights

You can request access to your data, correct it, delete it, restrict or object to its processing, and take it to another service. You can export your data and delete your account yourself in Settings › Privacy and data. For anything else, write to support@ofisapp.com. You can also complain to the data protection authority in your country.

Minimum age and changes

Ofis is not intended for children under 16. If we detect an account of someone under that age, we will close it.

If we change this policy, we'll update the date and let you know in the app before the change affects you. Last updated: October 19, 2026.