Privacy Policy

1. Information We Collect

Account Information

• Email address — used to create and manage your account.
• Name — optional, used for personalisation and greetings.
• Authentication data — securely managed by our backend provider.

Journal & Engagement Data

• Journal entries — the text you write in response to prompts. These are private to your account.
• Engagement metadata — which prompts you have completed, your current progress, and streak counts.
• Completed days — a record of the sequence days you have engaged with.

Preferences & Settings

• Notification preferences — whether you have enabled email or push notifications, and your chosen delivery time.
• Journal PIN — an optional PIN you set to lock access to your journal entries within the app.
• Streak tracking preference — whether you have opted in to streak counting.

Device & Technical Data

• Push notification tokens — device tokens used to deliver push notifications (if enabled).
• Platform information — whether you are on iOS or Android, used to route notifications correctly.

Payment Information

We do not store your full payment card details. Payment processing is handled by our third-party payment providers (see Section 4). We retain records of your transactions (such as plan type and purchase date) to manage your subscription.

2. How We Use Your Information

• To create and manage your account.
• To deliver daily prompts and track your progress through the 365-day journey.
• To store and display your private journal entries.
• To send you email and push notifications you have opted in to receive.
• To process subscription and one-time payments and manage your access.
• To personalise your experience, such as greetings and volume recommendations.
• To maintain streak counts and engagement records where you have enabled them.
• To provide customer support and respond to your enquiries.

3. How We Store Your Data

Your data is stored securely on our backend infrastructure provided by Base44, our platform provider. Journal entries are protected by row-level access controls so that only you can read, edit, or delete your own entries. Your journal PIN, where set, adds an additional layer of access protection within the app on your device.

Voice recordings made through the "Speak" feature are not uploaded to our servers — they remain on your device in your device's native voice memo application.

4. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Base44 — backend infrastructure, authentication, and data storage.
• Stripe / Wix Payments — payment processing for subscriptions and shop purchases.
• Apple In-App Purchase and Google Play Billing — for in-app subscription purchases on mobile.
• Firebase Cloud Messaging — for delivering push notifications to Android devices.
• Apple Push Notification service (APNs) — for delivering push notifications to iOS devices.

We do not sell your personal data to any third party.

5. Data Sharing

We do not share your personal data with third parties except: (a) with our service providers who help us operate UNBOUND (as listed in Section 4); (b) where required by law or legal process; or (c) with your consent. Your journal entries are never shared — they are visible only to you.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from within the app's Settings screen, or by contacting us at hello@unboundjournal.com. Account deletion is permanent and cannot be undone.

7. Your Rights

Depending on your jurisdiction (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data. You can exercise most of these rights directly within the app, or by contacting us at hello@unboundjournal.com.

8. Children's Privacy

UNBOUND is intended for adults and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

We take reasonable measures to protect your data using industry-standard practices, including encrypted data transmission and row-level access controls on your journal entries. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: