Household privacy notice

Version household-1.7, 26 October 2026

Off it goes is run by Inference Works Pty Ltd ("we"). This notice covers your household's use of Off it goes. It says what we keep, why, who helps us run it and where, how long we keep it, and how to get a copy or have it deleted.

What we keep

The emails you forward to your household address, whole: the text, attachments, PDFs and pictures. School emails often name children, classes, teachers, schools, activities and other families. We don't ask for any of this; it comes with the emails you choose to forward.
What we find in them: dates, times, amounts, references and what to bring, and the calendar entries we make from them.
What you do on the review page: what you confirm, correct, add or turn down.
What you tell us about your household's people: your children's names and any other names they go by, their schools, year groups, teams, clubs and activities, and when those run, along with your answers to our questions about who something is for. Please only tell us about your own household.
A record of what your forwarded emails say: for example a school's term dates, a class, a club and its season, or which child a team is for. Each entry is linked to the email it came from. It counts only as what the email says until someone in your household confirms it. Other children and parents named in an email stay in that email: we don't record them as people. Nor do we record teachers, coaches or other adults outside your household.
Your household's details: its name, its time zone and its forwarding address, and the email addresses you ask us to send replies and reminders to.
Your sign-in records: the email address you sign in with, the name of each device you sign in on and its session, with when it started and ended (a session lasts 90 days from your last visit, unless you sign out), the codes we email you (kept only in a scrambled form that can't be read back), and, if you set one up, your passkey's name and public key. We never hold your passkey itself.
Your connected assistants: each assistant or key you connect, who in your household connected it, when, and when it was disconnected or its access ended (access ends after 90 days). The keys and codes an assistant uses are kept only in a scrambled form that can't be read back.
A custody record: when you agreed to this notice and which version, when a copy of your data was sent, and when your account was closed or reopened. Never the content of your emails.

This site uses a cookie to keep you signed in. If you connect an assistant while signed out, that same cookie holds the connect page for 15 minutes so you come back to it after signing in. It uses no analytics and no advertising trackers.

Why

To read the school emails you forward, put the dates in them on your household's calendar, and email you what we found and anything we need you to check. What you tell us about your household's people, and the record of what your emails say, let us ask you fewer questions over time: once you've told us that Rose plays hockey on Saturdays, the next hockey notice doesn't need to ask who it's for. They are used only for your household and are never shared with, or copied to, another household.

From time to time we count, across all households, how often we asked each kind of question and how it was answered, so we can improve the rules we use for everyone. Those counts never include anyone's name, email or details, and nothing one household tells us is ever used for another.

We don't use your household's emails for anything else. We don't sell them, we don't show you advertising, and we don't use them to train AI models.

How your emails are read

Our software reads each email. To find the dates in it, the email is sent to Anthropic, the company that makes the Claude AI model: its text, including who sent it and its subject, any pictures in it as they are (so a photo or screenshot is seen whole, including any faces or names in it), the entries already on your household's calendar, so a changed date can be matched to the one it replaces, and the details you've confirmed about your household's people, so the email can be matched to the right person and activity. Anthropic does not use any of it to train its models. Every date, time and amount we put on your calendar is checked against the words in your email first, and anything we can't check, and anything read from a picture, is asked of you before it goes on your calendar. The decision to add something to your calendar is made by our own rules, never by the AI model. Those rules use only details your household has confirmed, never something just because an email said it, and they never put a date, time or amount on your calendar from what we remember: those always come from the email itself or from your answer.

Who helps us, and where

Google Cloud, in Sydney, Australia: where everything above is stored. Our service's logs, which Google keeps for 30 days and may hold outside Australia, record what happened (for example, that an email arrived for your household and what we did with it), never the content of your emails, your addresses or your household's links.
Postmark, in the United States: receives the emails you forward and sends our emails to you, so they pass through Postmark's systems. Postmark keeps a copy of each message for 45 days.
Anthropic, in the United States: reads your emails and their pictures, as above.
GitHub, in the United States, which hosts our code: while we set your household up by hand, your household's name and the email addresses you give us pass through GitHub's systems once, and our record of that step is deleted within two days.
Stripe, if you pay for Off it goes: takes the payment and keeps the payment record.

Some of your information is therefore handled outside Australia, in the United States.

Who at Off it goes sees it

Your household's emails are handled by our software. Someone at Inference Works looks at a household's emails only when needed to fix a problem with them or to keep the service working, and never to read them for any other reason.

Connecting ChatGPT, Claude or another assistant

Nothing is shared with an assistant unless an adult in your household connects one. To connect one, you sign in to Off it goes from the assistant and choose Allow. The assistant can then read your household's calendar, the questions waiting for your answer, and your recent notices, including the lines of each email an item was read from. It can't change anything, answer a question for you, or see any other household. What it reads, and what you say to it, is then handled by the company that runs the assistant (for example OpenAI for ChatGPT, or Anthropic for Claude) under its own terms and privacy policy, possibly outside Australia. Under Household, "Connected assistants" lists what's connected, and Disconnect stops it straight away. Access also ends after 90 days, and when your household is erased.

Remembering your household

Remembering is part of how Off it goes works, for every household. From the notices you forward and your answers to our questions, we remember your household's people, their year groups and classes, and their clubs and activities, so we ask you fewer questions over time. Under Household, "What we remember" lists the details your household has confirmed. You can change the wording of a detail, such as the name of a club, team or activity, and you can forget any detail: we stop using a forgotten detail straight away. Some details, such as a person, a day of the week or a time, can be forgotten but not changed there; to correct one, forget it, and our next question or your next forwarded notice sets it again. We keep the record of it, marked as forgotten, until your whole household is erased, so it isn't used again by mistake and so your history stays complete. What your forwarded emails said, before anyone confirmed it, isn't listed on that page; it is in the copy of your data you can ask for below. You can also have your whole household erased at any time, as below.

How long we keep it

As long as your household uses Off it goes. The record of what your emails say, including details you've forgotten, is kept with your household's emails and goes when your household is erased. If you close your account, everything is deleted 30 days later, unless you reopen it before then. If nothing arrives from your household for 12 months, we email you twice, and delete everything 30 days after the first email unless you forward something in the meantime.

A copy, or deleting it

Email privacy@offitgoes.com:

To get a copy of your household's data, including your sign-in records (never a code or anything that would let someone sign in as you). We send it to the reply addresses you've registered with us.
To have it deleted. Deleting removes your household's emails, what we found in them, what you've told us about your household's people, the record of what your emails say, your calendar entries, your review history, your connected assistants, your addresses and your custody record. What deleting can't reach: our database backups, which age out within 15 days; Postmark's copies, until their 45 days end; Anthropic's copies, under its terms; copies kept by an assistant you connected, under its terms; entries already copied into your own calendar app, and emails we've already sent you; and payment records, which the law requires us to keep for five years.
To correct anything we hold about you.

Changes

If we change this notice, we'll give it a new version and tell you what changed. If a change means we would use your household's information in a new way, we'll ask you to agree before it applies to your household.

Questions or complaints

Email privacy@offitgoes.com and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.