Privacy policy

Last updated September 15, 2026

This policy explains what OfferFlow collects, why, and what we do with it. It is written in plain English on purpose. If anything here is unclear, email us (see the end of this page) and we will answer directly.

What OfferFlow is

OfferFlow is a mobile app that helps a college student run a job search: find people worth emailing at the firms you are targeting, write the email in your own voice, send it from your Gmail with one tap, follow up once if there is no reply, and book the call when someone answers. "We", "us", and "OfferFlow" in this policy mean the people who build and run the app.

What we collect

When you sign in with Google or Apple

We receive your name, your email address, and (with Google) your profile photo. That is what the sign-in itself asks for. We use it to create your account and to put your name on the emails the app drafts.

Your Gmail (only if you connect it)

Connecting Gmail is a separate step after sign-in, and you can skip it until you are ready to send. When you connect, we ask Google for two permissions:

• Send email. The app sends an email from your Gmail address only when you tap Send on that specific email, after you have seen the full text. There is no auto-send, no scheduled send, and no bulk send. Every email is one tap.
• Read email. We use this to notice when someone replies. The app reads only the replies on threads it sent for you, so it can tell you a reply arrived, understand whether it proposes a time, and pull a phone number from the signature onto that contact. We do not read your other mail, and we do not build any picture of your inbox.

To do this, Google gives the app a token that lets it act on your account. That token is stored encrypted on our servers, is never stored on your phone, and is never shared with anyone. You can revoke it at any time from your Google account's third-party access page; the app then stops being able to send or read anything.

Your Google Calendar (only if you connect it)

With the same connection, we ask for two calendar permissions: to read your calendar and to create events. We read it to find your free time when someone asks when you are available, so the app can offer real open windows instead of guesses. We create an event only when you tap to create the invite for a call you have agreed to; that invite goes to you and to the person you are meeting. We never add, move, or delete anything else on your calendar.

Your resume

You upload a PDF of your resume. We store the file and a text copy of it so the app can attach it to the emails you send and use facts from it (your school, graduation year, major, past employers, programs) to write emails that sound like you. It is attached to an email only when the email's template attaches one and only when you tap Send.

Your LinkedIn connections file

Optionally, you can export your own connections from LinkedIn (a CSV file LinkedIn creates for you) and upload it. We store the file and the rows in it (names, companies, titles, the date you connected) to show you which of your own connections work at the firms you are targeting. We only ever use the file you upload; the app does not log in to LinkedIn, does not scrape LinkedIn, and does not see anyone's connections but your own. Skipping this step does not limit the app.

Your targets, settings, and voice samples

The cities and fields you are targeting, your graduation year, your settings (call length, how many days until a follow-up, whether the resume attaches, and so on), and, optionally, two emails you have written before, which the app uses to match your writing voice.

The people you contact

The contacts you add or choose from search results (name, title, company, city, email address once it is verified, and any notes you write about them), the emails you send them, the replies they send back, and the calls you book. Your notes on a contact are yours: you can edit them at any time and they are never shown to anyone else.

Usage and cost records

We keep a log of each call the app makes to the paid services below on your behalf (which service, when, how much it cost), so we can watch our own costs and enforce daily limits. These records do not include the text of your emails.

How we use your information

• To find people worth emailing at the firms you are targeting and rank them for you.
• To write email drafts in your voice that you review, edit, and choose whether to send.
• To send the emails you tap Send on, and to attach your resume when the template calls for it.
• To notice replies, tell you about them, and help you book the call.
• To improve the email templates over time using aggregate reply rates. Aggregate means counts and percentages; we do not read your emails to do this, and we never publish anything that identifies you or a contact.
• To keep the service running, enforce limits, and fix problems.

What we never do

• We never sell your data, and we never share it with advertisers.
• We never send an email, create an invite, or take any action on your accounts automatically. Every send is one explicit tap by you.
• We never send to an email address that has not been verified.
• We never track whether your emails were opened. No tracking pixels, no tracked links, no read receipts. Replies are the only signal we use.
• We never scrape LinkedIn or any other site.
• We never use your data to train AI models, and we do not allow our providers to.

The services we rely on

OfferFlow is built on a small number of outside services. Each one receives only what it needs for its job.

• Anthropic (Claude). Writes the drafts. To write an email, the app sends Anthropic the facts it needs: your name, school, resume text, the emails you gave as voice samples, the contact's name, title, and company, the reason you chose for contacting them, and, for a thank-you, your notes from the call. Anthropic's terms for API customers state that they do not use this data to train their models.
• Apollo. Powers people search. The app sends Apollo the firm, job titles, and cities you are searching for and receives names, titles, companies, and locations back. When you open a person found this way, the app asks Apollo for their full name and a suggested email address. Apollo does not receive your resume, your emails, or your connections file.
• Kickbox or ZeroBounce. Checks that an email address exists before the app lets you send to it. They receive only the candidate email address being checked.
• Google. Sign-in, Gmail, and Calendar, as described above.
• Supabase. Hosts our database, file storage, and server code in the United States.
• Apple and Expo. Distribute the app to your phone.

Google API Services User Data Policy

OfferFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use your Gmail and Calendar data only to provide the features described on this page, we do not use it for advertising, we do not sell it, and humans do not read it except when you ask us for help, when it is needed for security, or when the law requires it.

How long we keep things, and how to delete them

We keep your data for as long as you have an account. You can delete individual contacts and their notes in the app at any time.

Deleting your account. You can delete your whole account and everything in it — your resume, your connections file, your contacts, the emails and replies on your threads, your calls and applications, your notes, your settings, and your Google connection — from inside the app, in Settings → Account. Deletion can be completed in the app without contacting us. It is permanent and takes effect promptly. If you would rather we do it for you, email the address below and we will delete your account and confirm when it is done.

Two gentler options, shown right beside Delete. If you are not sure you want to delete:

• Pause your account. One tap stops all follow-up nudges, reply polling, and notifications, and keeps your data exactly as it is. One tap turns it back on.
• Export your data. Download your contacts, threads, notes, calls, and applications as a file you can keep — before you delete, or at any time.

Disconnecting Gmail and Calendar from your Google account's third-party access page cuts off the app's access immediately, whether or not you delete your account.

Security

Data travels encrypted between your phone and our servers. Your Google token lives only on our servers, where the app's own code and no user can read it. Each user's data is walled off from every other user's at the database level. No system is perfectly secure; if we ever learn of a breach affecting your data, we will tell you.

Children

OfferFlow is built for college students and is not directed to children under 13. We do not knowingly collect data from anyone under 13.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.

Contact

Questions, requests, or deletions: email us at offerflow.support@gmail.com.