This policy explains in plain words what Unsent does and doesn't do with your information.
The short version: your letters, your reasons, their name, your check-ins and your streak are stored on your phone. We can't read any of it. We don't have accounts, we don't run ads, and we don't sell or share data. From version 1.1 the app also sends anonymous usage counts (like "a letter was sealed", never what it said), and you can choose to give us an email address or turn on an encrypted backup that only you can unlock.
Who we are
Unsent is made and operated by Deepanshu Udhwani, an independent developer based in India ("we", "us"). Contact: deepanshu1422+unsent@gmail.com.
What stays on your device
Everything you put into Unsent is saved in local storage on your phone (an on-device database). That includes:
- messages you write in the unsent chat and your vault
- the first name you enter for your ex
- your "remember why" reasons
- daily check-ins and moods
- your no-contact streak, milestones and settings, including your reminder time
We never receive this content in a form we can read. It only leaves your phone if you turn on encrypted backup (see below), and then only locked with your recovery code. Your phone's own system backups (for example iCloud or Google device backup), if you have them turned on, are controlled by you and Apple or Google, not by us.
What leaves your device
Purchases (RevenueCat, Apple, Google)
Subscriptions are sold through the Apple App Store and Google Play. Your payment details are handled by Apple or Google; we never see your card. We use RevenueCat to check whether you have an active subscription. RevenueCat receives an anonymous, randomly generated app user ID, purchase receipts and basic transaction details (product, price, date, store country). This ID is not linked to your name, email or anything you write in the app.
Anonymous usage events (version 1.1 and later)
To see which parts of the app help and where people get stuck, the app sends small usage events to our server, such as "app opened", "onboarding step 3", "paywall shown", "letter sealed (2 texts)" or "check-in (mood 3)". Each event has a name, a time, a few numbers or short labels, your platform and app version, and the same anonymous app user ID that RevenueCat uses. Events never include anything you type: no letter text, no names, no reasons. We keep events for up to 18 months and use them only to improve Unsent.
Email, only if you give it to us
The app may ask if you'd like a short weekly note by email. If you enter your email, we store it with the anonymous app user ID and where you signed up. We use it only to send those notes. You can stop them in the app (Settings → Email → Stop the emails), from the link in any email, or by writing to us. We never sell or share your email.
Encrypted backup, only if you turn it on (Pro)
If you turn on backup, your letters, reasons, their name, check-ins and streak are encrypted on your phone with a key made from a recovery code that only you see. We store the encrypted file, its size and when it was updated. We cannot decrypt it, and we cannot recover it if you lose the code. You can delete the backup at any time in Settings, and "Delete all my data" deletes it too.
Reminders
Reminders are local notifications scheduled on your phone. We do not run a push notification server and do not collect a push token.
If you use AI replies
Unsent may offer an optional "comfort reply" feature. Only if you choose to tap it for a specific message, the text of that message is sent to an AI provider to generate a reply, and the reply is shown to you. Nothing is sent unless you tap it. We will name the provider in the app before you use it and ask the provider not to use your text for training where that option exists. If you never use AI replies, none of your writing ever leaves your phone.
This website
This website does not use cookies, analytics or tracking scripts. Our hosting provider may keep standard server logs (such as IP address, time and page requested) for security and reliability for a short period. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
What we don't do
- No account, login, email or phone number required. Email is optional.
- No advertising and no advertising IDs.
- No third-party analytics or tracking SDKs in the app. Our own usage events never include what you write.
- No selling, renting or sharing of personal data.
Your choices and rights
Because your content lives only on your device, you are in full control of it. You can delete everything at any time using Settings → Delete all my data in the app, or by deleting the app. See how to delete your data. Depending on where you live (for example under the GDPR, UK GDPR, India's DPDP Act or US state laws), you may have rights to access, correct or delete personal data we hold. Outside your phone we hold only the anonymous purchase record (RevenueCat and the store), anonymous usage events, and, if you chose them, your email and an encrypted backup we cannot read. Write to deepanshu1422+unsent@gmail.com with your app user ID (Settings) or email and we will help with any request.
Children
Unsent is intended for people aged 17 and over. We do not knowingly collect data from children.
Security
Your data is protected by your phone's own security (passcode, Face ID, fingerprint and device encryption). Anyone who can unlock your phone can open the app, so keep your phone locked.
Changes
If we change how the app handles data, we will update this page and tell you in the app before anything changes for you.
Contact
Questions about privacy: deepanshu1422+unsent@gmail.com.