Privacy Policy

Effective Date: April 23, 2026

The Short Version

Here's what actually matters, before the formal stuff.

• Your writing stays on your device. We cannot read your journal entries. They are stored locally and never uploaded.

• AI Insights is opt-in, always. If you enable it, your entry text is sent for analysis. It is off by default. You must turn it on yourself.

• We collect anonymous usage analytics. Things like which screens you open. Never your writing. Never your identity.

• We don't sell your data. No ads. No data brokers. No selling — ever.

• Delete the app, delete everything. Removing Unwritten from your phone removes all your data permanently.

1. Who We Are

Unwritten is a mobile journaling app that locks your phone until you complete a daily writing session.

This privacy policy applies to the Unwritten iOS app distributed through the Apple App Store.

Questions? Reach us at: privacy@getunwritten.app

2. What We Collect

What stays on your device

The following data never leaves your phone:

• Journal entries — your writing content, word counts, and timestamps

• App settings — your lock schedule, word goal, theme preference, and notification preferences

• Streak data — your writing streak history and milestones

This data is stored locally using on-device storage (MMKV). We have no access to it. If you delete the app, this data is permanently and immediately removed.

What goes to third-party services

Anonymous usage analytics

We collect anonymous analytics events using PostHog (hosted in the United States). These include actions like which screens you open, which features you use, and app lifecycle events such as launch, background, and foreground. Analytics events never include your writing content and are not linked to your identity. We use this data to understand how the app is used and to prioritize improvements.

Subscription data

If you subscribe to Unwritten+, your subscription is managed through RevenueCat. RevenueCat receives an anonymous app-specific identifier and purchase transaction data provided by Apple. We do not directly collect or store your payment information. Apple processes all payments.

AI Writing Insights (opt-in only)

If you choose to enable AI Writing Insights, your journal entry text is transmitted to our server infrastructure for analysis. This feature is off by default. See Section 4 for full details.

What we never collect

• Names, email addresses, or contact information

• Location data

• Photos, contacts, or other device data

• Browsing history

• Advertising identifiers

• Health or fitness data

3. How We Use Your Data

4. AI-Powered Features

Unwritten offers an optional AI Writing Insights feature that analyzes your journal entries to identify emotions, generate brief summaries, and extract topics.

How it works

1. You enable AI Writing Insights in Settings (off by default)

2. Before activation, we show you a clear disclosure explaining what data is transmitted

3. When you complete a writing session, your entry text is sent from your device to our server (hosted on Supabase, AWS US East) via HTTPS

4. Our server forwards your text to OpenRouter, which routes it to Anthropic's Claude language model for analysis

5. The AI returns a short analysis: 1–2 emotions, a brief summary, and 1–3 topics

6. The analysis is sent back to your device and stored locally

7. Your entry text is processed in memory — it is not permanently stored on any server

Third-party AI providers

• Supabase (supabase.com) — hosts our server-side function that processes your request. Your entry text passes through Supabase infrastructure during analysis. Supabase's data processing agreement: supabase.com/legal/dpa

• OpenRouter (openrouter.ai) — routes your text to the AI model. Privacy policy: openrouter.ai/privacy

• Anthropic (anthropic.com) — provides the Claude language model that performs the analysis. Privacy policy: anthropic.com/privacy

Your controls

• AI Writing Insights is off by default. You must explicitly enable it.

• You can disable it at any time in Settings. Disabling it stops all future text transmission immediately.

• The core app — writing, phone locking, journaling, streaks — works fully without AI Insights.

• Your writing is not used to train AI models. OpenRouter is configured with zero data retention for requests made through Unwritten.

5. Screen Time and Device Controls

Unwritten uses Apple's FamilyControls and ManagedSettings frameworks to apply and remove app restrictions on your device.

When you grant Screen Time authorization:

• The app applies shields (restrictions) to other apps at your chosen schedule

• The app removes those shields when you complete your daily writing session

• All enforcement happens entirely on your device through Apple's system frameworks

• The app uses opaque tokens provided by Apple — it never knows which specific apps are on your device or how you use them

• No Screen Time data, device activity data, or app usage data is collected or transmitted

You can revoke Screen Time authorization at any time through your device's Settings app.

6. Third-Party Services

We do not share your data with any other third parties. We do not sell your data — to anyone.

7. Data Retention

• On-device data — retained until you delete the app or clear app data. We have no access to this data.

• Analytics data — PostHog retains anonymous event data according to their standard retention policy.

• Subscription data — RevenueCat retains transaction records as required for subscription management and financial compliance.

• AI Insights text — processed in memory during analysis and not permanently stored on our servers. Analysis results are returned to your device and stored locally.

• Rate limiting records — we store an anonymous user identifier and a daily request count on Supabase to enforce usage limits for AI Insights. This contains no writing content.

8. Security

• All data transmitted from the app uses HTTPS (TLS 1.2 or higher)

• On-device data is stored using MMKV, which leverages iOS hardware encryption

• Our server infrastructure (Supabase) uses AES-256 encryption at rest

• AI Insights uses anonymous authentication — no personally identifiable credentials are stored

• Server-side API keys are stored as encrypted secrets and are never embedded in the app

9. Your Rights and Choices

All users

• Disable AI Writing Insights at any time in Settings

• Delete all your data by deleting the app

• Manage or cancel your subscription through Apple's subscription settings

Users in the European Economic Area (GDPR)

You have the right to access, correct, delete, restrict processing of, and port your personal data. You also have the right to withdraw consent for AI Insights processing at any time and to lodge a complaint with your local data protection authority.

Because your journal data is stored only on your device, most of these rights are exercised directly through the app. For analytics data, contact us at privacy@getunwritten.app.

Users in California (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the sale of personal information.

We do not sell personal information. To exercise your rights, contact us at privacy@getunwritten.app.

10. Children's Privacy

Unwritten is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@getunwritten.app.

11. International Data Transfers

If you use Unwritten outside the United States, your data may be transferred to and processed in the United States through our third-party service providers (PostHog, Supabase, OpenRouter, Anthropic). These transfers occur only for the purposes described in this policy.

12. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the effective date at the top of this page.

For significant changes, we will provide notice through an app update. We encourage you to review this policy periodically.

13. Contact Us

Have questions or concerns about this policy or our data practices? We'd genuinely like to hear from you.

privacy@getunwritten.app

This policy applies to the Unwritten iOS app distributed through the Apple App Store.