Privacy Policy

1. Information We Collect

We collect information you provide directly, including your email address, display name, phone number (if you choose to add one), and any content you create within the app (journal entries, missions, routines, vision boards, etc.). If you sign in with Google, we receive only your name, email address and profile picture from Google, and use them only to create your account and sign you in; we do not access your Gmail, Drive, contacts or any other Google data. If you sign in with Apple, we receive only the name and email (or Apple's private relay email) you choose to share. We also collect usage data — such as which features you use and when — through PostHog, our product-analytics provider, and crash and performance data through Sentry, our error-monitoring provider. We do not sell your data to third parties.

2. How We Use Your Information

Your data is used to provide and personalize the Unleashed experience, including AI-powered insights, streak tracking, and smart reminders. If you opt in, we use your phone number to send marketing texts about offers and new features — this is always optional, and you can withdraw consent at any time from Settings. We also email you about Unleashed's own offers and new features: if you are an adult customer or trial user, unless you said no when you signed up; every email has an unsubscribe link. We never send marketing emails to members under 18. You can stop marketing emails at any time with the unsubscribe link in any email or in Settings; service emails (such as receipts and security notices) are not marketing and continue. We use aggregated usage patterns from PostHog to improve features, and crash reports from Sentry to fix bugs. Your personal content (journals, missions, reflections) is never used for advertising, and is never shared with other people unless you choose to share it (for example with your coach or a crew). It is processed by the service providers in section 6 to run the features you use.

3. Data Storage & Security

All data is stored securely using industry-standard encryption at rest and in transit (TLS 1.2+). Your data is hosted on secure cloud infrastructure with strict access controls. Passwords are hashed using bcrypt and never stored in plaintext. We review our security measures regularly and when we change how we handle your information.

Voice recordings. When you speak to the app (dictation, voice capture or a voice conversation), we store the audio in our Cloudflare R2 storage while we make its final transcript, then delete the audio and keep the transcript. This normally takes minutes, and the audio is always deleted within 2 days of recording. If you turn on “Keep my voice recordings” (Settings → Voice), we keep your new recordings with their transcripts so you can play them back. It is off unless you turn it on, and members under 18 cannot turn it on. Recordings can include anything you say, including details about your health or beliefs, so we only keep them with your consent. You can turn the setting off at any time: new recordings are then deleted once transcribed, and recordings already kept stay until you use “Delete all my recordings” (Settings → Voice), which deletes them and their transcripts straight away. Otherwise we keep a recording until you delete it or your account is erased. We make transcripts because they are part of the service you use. We do not use your recordings to identify you by your voice or to train our own AI models.

4. Your Rights & Data Control

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to access, export, correct or delete your data, to restrict or object to how we use it, and to withdraw any consent you have given at any time. You can delete your account directly within the app (Settings → Account → Delete Account), or by emailing legal@unleashed.vision. Deleting your account schedules it for permanent erasure in 30 days — you can cancel by signing back in any time during that window. We reply to requests within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

5. Cookies, Analytics & Diagnostics

We use session storage for authentication state only, and do not use third-party tracking cookies or advertising pixels. We do use PostHog (product analytics) and Sentry (crash and error reporting) as service providers to understand feature usage and fix bugs. Adults can switch usage analytics off in Settings (section 14). This data is not shared with advertising networks or data brokers, and is not linked with data from other companies' apps or websites to track you or serve targeted advertising.

6. AI & Third-Party Services

AI features (insights, affirmations, coaching, transcription, image and song generation) process your data through secure backend functions, using these third-party providers: Groq (makes the final transcript of your voice audio, and speech-to-text on other recorded voice audio — journal entries, voice notes and video clips you choose to transcribe; to spell names correctly we also send it a short list of names from your account and recent notes), AssemblyAI (when the first transcript of a section of a recording looks uncertain, a second transcription of that section, with the same list of names, for around a tenth of your audio a day at most; we ask AssemblyAI to delete the audio and its transcript as soon as the text comes back), Deepgram (speech-to-text on live dictation and on live AI coach calls — your microphone audio while you're actively dictating or on the call), LiveKit (live voice and video calls, including coach calls and the guided onboarding voice interview), Anthropic (correcting transcription mistakes in dictated text), OpenRouter, which routes chat replies, session reflections, note titles, reminder suggestions, insights and voice-command understanding to DeepSeek's models by default, and to OpenAI's models when building your long-term coaching memory (your written or transcribed text, not raw audio) — and in the Hub chat, where you can pick the model that answers you, your message goes to the company behind the model you pick (DeepSeek, Google, OpenAI, Anthropic or xAI), Google Gemini (vision-board image generation from the text description and any reference photo you provide; answering you on live AI coach calls; drawing memories, values and insights from your journal and voice logs to personalize coaching; and indexing your content so search and voice commands can find it), Cartesia (turning spoken replies and alarm messages into audio), Suno (manifestation-song generation, from the lyrics or prompt text you provide), and Cloudflare (R2 storage for voice audio while we transcribe it and voice recordings you choose to keep). What you write or say is sent to these providers as you wrote or said it, so if a journal entry, voice note or chat message mentions your health, faith or other people, that is sent too. AI-generated content — including journal insights, note titles, reminder suggestions, vision-board images, and manifestation songs — is saved to your account like anything else you create in the app, so you can review, export, or delete it; it is not discarded after generation. We do not use your personal content to train our own AI models.

Transfers outside the UK. Most of these providers, and PostHog and Sentry, are based in the United States, and some process data in other countries. We use them under written data processing agreements. When your data goes outside the UK, we protect it with UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US providers) or with the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in our contract with the provider. You can ask for a copy of these safeguards at legal@unleashed.vision. Religious belief and health records from the features in section 7 are only sent to AI text services that are set not to keep or train on them. If you speak about your faith or health (live talk, dictation or voice commands), the audio goes to the speech and voice providers in section 6 under their own data terms.

7. Religious belief and health information

Some optional features let you record information about your religious belief or your health. The law treats this as special category data. You never have to use these features, and the rest of the app works without them. We do not use this information for advertising, and we do not sell it. It is stored in our database (Supabase) and protected so that only you can read it, unless you choose to share it as described below. It stays until you delete it or delete your account; copies in our backups are overwritten within our backup retention period.

Faith. Where the Faith hub is available, you can choose your faith (or "prefer not to say", which stays on your device only). We store your faith, the faith programmes you run (for example a 30-day Ramadan or 40-day Lent plan) and your hub settings, and use them for one thing: showing your faith hub. We only store your faith after you tick a separate consent box, and we keep a record of which consent you gave and when, even after you withdraw it, so we can show we asked. Your faith is not shown to your coach or your crews unless you turn on sharing for that audience; sharing is off by default, and open public crews never see it. A faith crew is private: only people you invite can join, and before they join they are told that other members will see they are in it. Prayer and observance times are worked out on your phone. If you use your location for this, it is rounded to about 1 km and kept on your device only; it is never sent to us. Prayer reminders are notifications set on your phone; by default they just say "Reminder", and they only name the prayer on your lock screen if you choose that. Faith anchors you add to your routine are not sent to Voice or any AI service unless you turn on a separate setting for that, which is off by default. You can withdraw consent and delete your faith data in one step from the Faith hub; this deletes your faith, your programmes, the faith anchors it added, and the location and reminders on your device. A faith crew you created stays until you delete it in Crew.

Health. Depending on the features you use, you can record: fasts (times, protocol, notes, water, check-ins on mood, energy and hunger, and optional weight and waist measurements); a sober-days counter (what you are taking a break from, start date, money saved, your reason) and an urge log (when an urge hit, how strong, whether it passed, and a note); a symptom log (energy, sleep, symptoms you name, and a note), which is for your own notes and is not medical advice; and, in Run, heart rate and workout routes you import from Apple Health or Health Connect. We ask for your explicit consent separately for each of these before we store anything, tell you what is stored and who processes it, and record which consent you gave and when. You can withdraw from the same screen or in Settings. These records are stored in your account and only you can read them. A fasting check-in is saved as an entry in your Journal only if you agree to that when you consent. Journal entries are used to write your affirmations, build your coaching memory and answer voice requests, through OpenRouter and Google Gemini (section 6). Voice commands you speak about these features (for example "start a fast") are processed by the speech and AI providers in section 6. If you use the brain dump, you are asked for separate consent before anything you write about your health is sent to the AI providers named on that consent screen (see section 15), and you can withdraw that consent in Settings. The brain dump is for members 18 and over. Your coach sees your fasting or journal only if you turn on that sharing; we ask for your consent first, and members under 18 cannot share health data with a coach. If you join a crew about a health topic (for example ADHD, sober evenings or fasting), the other members can see you are in it; we tell you this before you join. You can delete a fast (with its check-ins and measurements), a day of your symptom log, and your sober-days counter and urge log in the app, and all of it when you delete your account.

Analytics, crash reports and notifications. We do not send the content of your faith or health records to PostHog or Sentry, and the names of the faith, fasting, sober and symptom screens are hidden before anything is sent to them. Start-pack choices about faith, sobriety and health are recorded in analytics only as "sensitive", not by name. We do not put faith or health details in push notifications we send from our servers.

Legal basis. We use this information to provide the features you choose to use (contract). Because it is religious belief or health information, we only store and use it with your explicit consent, asked separately for each feature and for any AI use. Sharing with your coach or a crew is a separate choice, also based on your consent. You can withdraw consent at any time as described above. Withdrawing consent does not affect use before you withdrew it.

8. Minors & Age Requirements

Unleashed OS is intended for members 13 and older. We do not knowingly allow anyone under 13 to create or keep an account — an account we learn belongs to someone under 13 is deleted. Members between 13 and 17 have restricted access to community features (such as Crew and Squads), and can only join a coach's roster or a squad once a verified parent or guardian has given consent and the coach or squad owner has approved the request. How a guardian gives consent is explained in section 12. Fasting, Sober Days, the Symptom Log, Run's health import and the brain dump are for members 18 and over.

If you are 13 to 17, in short: we never send you marketing emails and we do not collect usage analytics from you. You cannot use the health features, keep voice recordings or join the referral programme, and you need a parent or guardian's OK to join a coach or a squad. Your journal and notes are not shown to other people unless you share them (in school mode, your school's staff can also see what you post). You can delete anything, or your whole account, in Settings. If something in the app upsets or worries you, use the report option, talk to an adult you trust, or contact Childline (0800 1111, childline.org.uk).

9. Changes to This Policy

We may update this policy periodically. We will tell you about material changes in the app before they take effect. If a change affects something you consented to, we will ask for your consent again and will not rely on your continued use of the app.

10. Business contacts we call, meet or message, and call recording

Unleashed OS Ltd (company 16601258, Office 13552, 182-184 High Street North, East Ham, London E6 2JA) is the controller. We get business contact details from public sources such as company websites, Google Business listings and Companies House, and from people who book a call with us, and use them to contact businesses about our products (legitimate interests).

Calls on Unleashed phone lines may be recorded and transcribed for compliance with marketing and data protection law, to handle complaints, to settle commission disputes, to detect leads taken away from Unleashed, and for legal claims. If you do not want a call recorded, tell the caller: we will continue by email or end the call, and we will not record you. Video or phone sales meetings are recorded only if you agree at the start; if you say no, the meeting carries on unrecorded.

We keep phone-line recordings for 90 days and sales-meeting recordings for 12 months, longer only while a complaint, dispute or legal claim about that call is open; call records (numbers, times, lengths) for 2 years. Our sales partners may be outside the UK (including South Africa); we share with them only what they need for the call, under written contracts that require them to protect it. Transcription providers act only on our instructions.

When an Unleashed partner messages your business on WhatsApp, we keep the messages, voice notes, videos and files in that conversation so we can reply to you, keep a record of what was said, and check that our partners follow our rules. We do this because we have a legitimate interest in running our sales conversations, keeping records and making sure our partners follow our rules. WhatsApp is run by Meta, which handles these messages for us as our service provider and may do so outside the UK under its data transfer safeguards. Our team can read these conversations, including to keep partners under 18 safe. Nobody below school-leaving age can be a partner. Partners aged 16 or 17 may call only until 21:00 and message only until 22:00, in their local time. If you are an Unleashed partner, this also covers the messages, voice notes, videos and files you send and receive through us. We keep a conversation for 12 months after its last message, then delete its content. To stop messages from us at any time, reply STOP or email legal@unleashed.vision.

You can ask for a copy, correction or deletion, object at any time (including to marketing, which we will then stop), or complain to the ICO (ico.org.uk). Contact: legal@unleashed.vision.

11. School mode

Where a school gives its pupils access to Unleashed OS, the school is the controller of those pupils' personal data and Unleashed OS Ltd is the school's processor, acting only on the school's written instructions under a data processing agreement. The school decides who its pupils are, what staff can see, and how long data is kept. Pupil posts are checked automatically before other pupils see them, and the school's staff and safeguarding lead can see pupil content and reports about it. Pupil accounts are not used for marketing, and analytics and some AI features are switched off for pupils. If you are a pupil or parent, ask your school first about your data or to exercise your rights; we will help the school respond. Data about a pupil is deleted when the school removes the pupil or ends its agreement with us.

12. Parent and guardian consent

Members aged 13 to 17 can only join a coach's roster or a squad once a parent or guardian has given consent. We send the guardian a private link by the contact details the member gives. The guardian confirms their name and a declaration that they are the parent or guardian. To check they are an adult, we ask them to complete a card check through Stripe that places a £1 authorisation hold on their card. The £1 is never charged: we never capture it and we cancel the hold as soon as the check finishes (or the link expires or is withdrawn); if a bank is slow to release it, it lapses on its own, within 7 days at most. We do not store the guardian's card details; Stripe handles them. We keep the guardian's name, the date of consent and which request it relates to, so we can show consent was given. A guardian can withdraw consent at any time by emailing legal@unleashed.vision, and the member's access to that squad or coach ends.

13. Voice clone

Some features can create a synthetic copy of a voice, for example so a coach can have spoken replies in their own voice. Because a voice is personal data, we only create a voice clone from a recording of the person themselves, who must read out a consent statement in that recording. A voice clone is used only for that person's own content and is labelled as AI-generated when it is played. We do not allow a clone of anyone else's voice. We keep the voice sample and the clone until you delete them or delete your account, and when you delete a clone we delete the sample and the clone from the voice provider as well. Voice cloning is processed by our voice providers listed in section 15.

14. Analytics opt-out

Adults can turn off usage analytics at any time in the app under Settings, Privacy, "Share usage analytics". When it is off, the app stops sending usage analytics to PostHog, and the setting is remembered on your device. Analytics are always off for pupils in school mode and for members under 18. Crash and error reports (Sentry) are separate: they help us fix faults, and do not include the content of what you write or say.

15. Who we share data with (sub-processors)

These are the providers that process personal data for us. They act under written agreements. Countries listed are where the provider is based or processes data.

16. Why we use your data, and how long we keep it

17. Contact

For privacy questions, data requests, or concerns, contact us at legal@unleashed.vision. We reply within one month.