Privacy Policy

Last updated: 10 April 2026

1. The Short Version

Your journal entries never leave your device unless you explicitly enable sync. We don't collect, store, or have access to your personal thoughts. When you use optional sync, your data is end-to-end encrypted - we couldn't read it even if we wanted to.

2. Data We DON'T Collect

• Your journal entries
• Your mood data
• Your questionnaire responses
• Location data

3. Data Storage

Local Storage (Default)

All your data is stored locally on your device using the app's database. This includes:

• Journal entries
• Mood records
• Questionnaire results
• Settings and preferences
• Learning progress

This data is included in your device's standard backup system (iCloud). If you use iCloud backups, your Unwindly data is included and subject to Apple's privacy policy. You can disable iCloud backup for this app in your device settings.

Optional Cloud Sync

If you enable sync, your data is:

• Encrypted on your device before transmission
• Stored encrypted on our servers
• Decrypted only on your devices

End-to-end encryption means we cannot read your data. Your encryption key is derived from your account credentials and never transmitted to our servers.

4. Account Information

If you create an account for multi-device sync, we store:

• Email address (for account recovery)
• Hashed password (we never store plain text passwords)
• Subscription status

An account is not required to use the app. All features except multi-device sync work without an account.

5. Optional Anonymous Analytics

During onboarding, we ask whether you'd like to share anonymous usage data to help us improve the app. This is entirely optional and disabled by default.

If you opt in, we collect:

• Which screens and features you use
• How often you open the app
• App lifecycle events (installs, updates, opens)
• Exercise and journal session counts (not content)
• Whether your mood improved after an exercise or journal entry (yes/no only — no numeric values)
• An anonymous, resettable device identifier

We never collect:

• Journal content, mood values, or emotions
• Names, email addresses, or any personal text
• Questionnaire answers or scores

Analytics data is processed by PostHog Inc. on EU-hosted infrastructure under a Data Processing Agreement. Analytics data is retained for 12 months, then automatically deleted. No analytics data is shared with advertisers or other third parties. No data is transferred outside the EEA.

Legal basis: Your explicit consent (Art. 6(1)(a) GDPR, TTDSG Section 25). You can withdraw consent at any time in Settings — no new data will be collected and your anonymous identifier is reset. Previously collected analytics data remains until the retention period expires, then is automatically deleted. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Third-Party Services

We use minimal third-party services:

• App Store: For purchases and subscriptions (governed by Apple's privacy policies)
• RevenueCat: For subscription management. Receives anonymized purchase identifiers, transaction data, and device metadata. Does not receive journal content or personal health data. Processed under a Data Processing Agreement. See RevenueCat's privacy policy
• PostHog: For anonymous usage analytics, only if you opt in (EU-hosted, no access to journal data)

We do not use advertising networks or tracking pixels.

7. Data Deletion

You can delete your data at any time:

• Local data: Delete from Settings > Delete All Data, or uninstall the app
• Cloud data (if using sync): Delete from Settings > Account > Delete Account

When you delete your account, all synced data is permanently removed from our servers within 30 days.

8. Data Export

You can export all your data at any time in JSON or CSV format from Settings > Export Data. Your data belongs to you.

9. What Happens If You Cancel

Your journal entries stay on your device forever. Cancelling your subscription restricts access to premium features but never deletes your local data. Your entries, mood records, and questionnaire results remain exactly where they are — on your device, under your control. You can always export your data in JSON or CSV format from Settings, even without an active subscription.

If you used cloud sync, your encrypted data on our servers is retained for 90 days after cancellation in case you resubscribe. After that, it is permanently deleted. Your local data is never affected.

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access (Art. 15) — Request a copy of the data we hold about you
• Rectification (Art. 16) — Request correction of inaccurate data
• Erasure (Art. 17) — Request deletion of your data
• Restriction (Art. 18) — Request restricted processing of your data
• Data portability (Art. 20) — Export your data in a machine-readable format (available in Settings > Export Data)
• Objection (Art. 21) — Object to processing of your data
• Withdraw consent (Art. 7(3)) — Withdraw analytics consent at any time in Settings

To exercise these rights, contact privacy@unwindly.app. You also have the right to lodge a complaint with the competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Children's Privacy

Unwindly is not directed at children under 16 in Europe (GDPR Art. 8) or under 13 in the United States (COPPA). We do not knowingly collect information from children under these ages.

12. Changes to This Policy

We may update this policy occasionally. Significant changes will be communicated through the app. Where changes affect consent-based processing, we will seek your renewed consent.

13. Contact

Questions about privacy? Contact us at privacy@unwindly.app

Data Controller:
Nikolay Kopylov
Lehrer-Wirth-Straße 42
81829 München
Germany