Unwind — Privacy Policy

Unwind — Privacy Policy

Unwind — Privacy Policy
Effective Date: 20.02.2026
Unwind (“we,” “our,” “us”) provides audio content to help users unwind and sleep. This Privacy Policy explains what we collect, how we use it, and your choices.
If you do not agree with this policy, please do not use the App.

1) Who We Are & How to Contact Us
Data Controller: Unwind 
Contact email: support.unwind@gmail.com
We do not currently publish a postal address.

2) What We Collect
Account & Identifiers
Email address, display name, profile photo (if provided)
Country (derived from device or profile)
Authentication identifiers (e.g., from Apple, Google, Facebook sign‑in)
Device identifiers and installation IDs (e.g., platform/device ID, Firebase/Expo installation ID if used)
Push notification identifiers (e.g., OneSignal player ID)
Advertising identifiers (IDFA/GAID) — not used for ads at this time
App Usage & Diagnostics
Listening activity (e.g., plays, session time, completion, timestamps)
App events (screens viewed, taps, features used)
Crash and performance data (e.g., error logs, stack traces)
Device and app metadata (OS version, device model, app version, timezone, language)
Communications
Email communications and support messages (sent via AWS SES or similar)
Sensitive/Health
We do not collect health or medical data.
No Contacts/Media Access
We do not access your contacts, photos, or microphone.

3) How We Use Your Information
Provide the Service: Authenticate you, play audio, sync across devices, maintain your account.
Operate & Secure the App: Debug, prevent fraud/abuse, fix crashes, and ensure performance.
Improve & Analyze: Understand feature usage to improve content and experience.
Communications: Transactional emails (account notices), support replies, and optional product updates.
Personalization (Future): If enabled later, recommend content based on listening history, time of day, device, and locale.
Legal/Compliance: Comply with law, enforce Terms, and protect rights and safety.

4) Legal Bases (where applicable, e.g., EU/UK)
Contract: To create and maintain your account and provide the App.
Legitimate Interests: App security, crash analytics, usage insights to improve the App (balanced against your privacy).
Consent: Push notifications, promotional emails, and (future) personalization/tracking where required.
Legal Obligation: Responding to lawful requests or claims.

5) Sharing & Processors (Vendors)
We share data with service providers only to operate the App, under contractual safeguards:
Supabase (authentication, database, storage)
OneSignal (push notifications & in‑app messages; device tokens/IDs, delivery analytics)
AWS SES (transactional emails)
Sign‑in providers: Apple, Google, Facebook (authentication)
Platform stores: Apple App Store / Google Play (for distribution, crash reports, store compliance)
Analytics/Crash (if enabled): Mobile platform diagnostics; we may use platform or framework crash reporting
We do not sell your personal data. We do not share data with third‑party ad networks at this time.
If we add ads, cross‑app tracking, or new vendors in the future, we will update this Policy and, where required, request consent.

6) Data Retention
Account data: Kept while your account is active. If you delete your account, we delete or irreversibly de‑identify personal data within 30 days, subject to legal/operational retention needs.
Crash logs & diagnostics: Typically retained 90 days (longer if needed for security/investigation).
Usage analytics: Typically retained up to 26 months in aggregated or de‑identified form.
Emails/support tickets: Typically retained up to 24 months for support and audit.
We may adjust retention periods as our systems evolve, but we apply data minimization and need‑to‑know principles.

7) Security
We use industry‑standard safeguards including:
Encryption in transit (TLS) and at rest where supported by our providers
Access controls and least‑privilege roles for our systems
Regular updates and vulnerability mitigation for frameworks and SDKs
No method of transmission or storage is 100% secure, but we work to protect your data.

8) Your Rights & Choices
Depending on your location, you may have rights to access, correct, delete, or object to/limit certain processing, and to withdraw consent where we rely on consent.
Access/Correction/Deletion: Email support.unwind@gmail.com from your registered email.
Account deletion: Request via the same email; we’ll verify and action within 30 days (or sooner where legally required).
Emails: You can opt out of non‑essential emails via the unsubscribe link.
Notifications: Control push notifications in your device settings and (when available) in‑app settings.
Personalization: If/when we enable personalization, we will offer controls or opt‑out.

9) Children’s Privacy
We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, contact support.unwind@gmail.com and we will delete it.

10) International Transfers
We may process data in multiple countries using cloud providers. Where required (e.g., EU/UK), we rely on appropriate safeguards such as standard contractual clauses or equivalent. You can contact us for more details.

11) Changes to this Policy
We may update this Privacy Policy. We will post changes with an updated Effective Date and provide additional notice for material changes when feasible. Continued use after the effective date indicates acceptance.

12) Contact
Questions or requests about privacy? support.unwind@gmail.com