1. Information we collect
When you register, we collect your name, email address, authentication details, and account preferences. We store the thoughts, tasks, plans, steps, and progress you choose to save. A contact request includes your name, email, topic, and message. We also process basic technical information needed for sign-in, security, and service operation.
If you use speech input, your browser may turn audio into text; text you submit can become a saved capture. Please avoid putting sensitive information into AI requests unless you are comfortable with the processing described below.
2. How we use it
We use account and workspace information to deliver the features you request, keep your work available, secure accounts, respond to support requests, and meet legal obligations. When you request an AI draft or smaller steps, relevant text is sent through our AI service to OpenRouter and the selected model provider to produce a suggestion. You decide whether to accept a suggestion.
With your consent, we use PostHog to measure selected product actions with event names, limited counts or fixed labels, an account ID, and basic browser data. We do not intentionally send note or task text, automatic page views, click recordings, or session recordings to PostHog. You can refuse or withdraw analytics consent through Cookie settings.
3. Legal grounds where applicable
Where laws such as the GDPR require a legal basis, we rely on performance of our agreement to provide account and workspace features; legitimate interests to maintain security, understand support requests, and improve reliability; consent for optional analytics; and legal obligations for records we must keep. You can object to processing based on legitimate interests where applicable.
4. Who receives information
Supabase provides authentication and database hosting. OpenRouter and the selected AI model provider process text for AI requests. PostHog receives optional analytics data only after consent. Paddle may process billing and payment information if you use a paid checkout. These providers process data under their own terms and applicable agreements. We may disclose information where law requires it or to protect rights and safety. We do not currently sell personal information or use it for cross-context behavioral advertising.
5. Storage, transfers, and retention
Our providers may process data in different countries. Applicable transfer safeguards and the hosting region need confirmation for the deployed service. We keep account and workspace information while your account is active, and then only as long as needed for legitimate operational or legal purposes. Contact messages and billing records are kept according to their purpose and applicable law. Exact periods and deletion procedures are being finalized.
6. Your choices and rights
You can update account details and edit or remove content in supported app flows. You can delete your account and saved workspace data from Account settings; an active subscription is canceled immediately. Paddle may retain financial records it is required to keep. Account-wide export is not yet available in the app. You can request access, correction, deletion, a copy of your data, or another right available where you live by emailing admin@unbog.app or using Contact. We may need to verify your identity before fulfilling a request. You may also have the right to complain to a privacy regulator.
7. Security, children, and updates
We use authentication and account-based access controls to protect saved work; see Security. No online service can promise absolute security. unbog is not intended for children who cannot legally consent to online services in their location. If this policy changes materially, we will update this page and provide additional notice where required.