Privacy Policy

1. Introduction

Welcome to UnveilR (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at unveilrapp.com or our mobile application.

If you have any questions about this policy, please contact us at aleksander22@gmail.com.

2. Information We Collect

2.1 Information You Provide

• Account information: name (optional), email address, and password
• Profile data: display name and account preferences
• User-generated content: journal entries, rebirth letter, mantras, and chat messages
• Exercise completion and stage progress
• Payment information (processed securely by Stripe — we do not store card details)

2.2 Information Collected Automatically

• Usage data: pages visited, features used, and session duration
• Device information: browser type, operating system, and device type
• IP address and approximate geographic location
• Cookies and similar tracking technologies
• Analytics events (via Google Analytics, if enabled)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide and improve the UnveilR program experience
• Save and sync your progress across devices
• Process payments and manage subscriptions
• Send transactional emails (password reset, receipts)
• Power the AI coach feature with your conversation context
• Analyze usage patterns to improve our product
• Ensure the security and integrity of our services
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your journal entries, chat messages, or personal content for AI model training.

4. Data Storage and Security

Your data is stored using Google Firebase (Firestore database and Firebase Authentication), which provides enterprise-grade security including encryption at rest and in transit.

We implement appropriate technical and organizational measures to protect your personal information, including:

• TLS/HTTPS encryption for all data in transit
• Firestore security rules that restrict access to your own data only
• HTTP-only session cookies to prevent XSS attacks
• No storage of payment card details (handled entirely by Stripe)

While we take security seriously, no system is 100% secure. If you discover a security vulnerability, please report it to aleksander22@gmail.com.

5. Third-Party Services

We use the following third-party services to operate UnveilR:

• Google Firebase — Authentication and database. Governed by Firebase Privacy Policy.
• Stripe — Payment processing. Governed by Stripe Privacy Policy.
• Anthropic— AI chat feature (Claude model). Your chat messages are sent to Anthropic's API for processing. Governed by Anthropic Privacy Policy.
• Google Analytics (optional, if enabled) — Usage analytics. You can opt out via browser settings or the Google Analytics opt-out tool.
• Vercel — Web hosting and edge functions. Governed by Vercel Privacy Policy.
• RevenueCat (mobile app only) — In-app purchase management. Governed by RevenueCat Privacy Policy.

6. Cookies

We use the following cookies:

• session (httpOnly, secure) — Keeps you signed in. Expires after 5 days.
• Analytics cookies (Google Analytics, if enabled) — Used to understand usage patterns. You can disable these in your browser settings.

We do not use advertising or tracking cookies. You can control cookies through your browser settings, though disabling the session cookie will prevent you from staying signed in.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your account and data
• Portability — Request your data in a machine-readable format
• Objection — Object to certain processing activities
• Restriction — Request we restrict processing of your data

To exercise any of these rights, please email aleksander22@gmail.com with your request. We will respond within 30 days.

To delete your account and all associated data, go to Settings → Delete Account within the app, or contact us directly.

8. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law (e.g., payment records for tax purposes, which are retained for 7 years as required by applicable law).

9. Children's Privacy

UnveilR is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. International Data Transfers

UnveilR is operated from Europe and uses services (Firebase, Stripe, Anthropic, Vercel) that may process data in the United States and other countries. These transfers are conducted in accordance with applicable data protection laws, including the GDPR Standard Contractual Clauses where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email (to the address associated with your account) or by posting a prominent notice on our website. The “Last updated” date at the top of this page indicates when it was last revised.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: