01 Overview & Data Controller
At Unlust (“we”, “our”, “us”), we take your confidentiality and personal recovery seriously. This Privacy Notice outlines how we collect, use, disclose, and protect your personal information when you access our mobile application (iOS and Android), our website (unlustapp.com), and our web onboarding services (start.unlustapp.com).
Data Controller: The data controller responsible for your personal data under applicable data protection laws (including the EU/UK GDPR) is Unlust, operated by Akshat Chaturvedi (support@unlustapp.com).
02 Information We Collect
We collect only the minimum information necessary to provide you with a reliable, supportive, and synchronized recovery platform:
2.1 Information You Provide to Us
- Account Information: When you sign up, we collect your email address, account identifier, and display name. If you sign in via Apple ID or Google Sign-In, we receive the authenticated token and public profile info permitted by your account settings.
- Recovery & Habit Data: Streaks, check-ins, urge logging timestamps, journal entries, and milestone badges. Your journal notes and personal reflections are stored securely and privately in your account.
- Community Interactions: Forum discussions, comments, and community posts you deliberately share with other users in the Unlust community.
- Customer Support: Communications you send to our support email (support@unlustapp.com) regarding inquiries, receipts, or technical issues.
2.2 Automatically Collected Technical Information
- Device & Telemetry Data: Device model, operating system version, app version, language preference, and anonymous diagnostic identifiers.
- Error & Crash Logs: Stack traces and crash diagnostics captured via Sentry to identify software bugs and improve app stability.
2.3 Payment & Subscription Information
We never collect, store, or process full credit card numbers, debit card details, or CVV codes on our servers:
- Web Checkouts: Handled entirely by our authorized Merchant of Record, Paddle. Paddle collects your billing address and payment details under its strict PCI-DSS Level 1 compliance.
- In-App Purchases: Handled directly by Apple (App Store) or Google (Google Play).
- Subscription Status: We use RevenueCat to securely receive tokenized receipts and verify your active entitlements across devices.
03 How We Use Your Information
We process your personal information for the following legitimate purposes:
- Core App Functionality: To calculate your streak, track your sobriety milestones, and deliver tailored audio lessons and guided tools.
- Cross-Device Synchronization: To sync your progress, premium access, and recovery data across your phone, tablet, and web onboarding.
- Customer Support & Dispute Resolution: To assist you with account recovery, missing purchases, and feedback.
- Platform Security & Abuse Prevention: To enforce our Community Guidelines and protect the safety of all recovery community members.
- Legal & Regulatory Compliance: To comply with applicable accounting, taxation, and consumer protection laws.
No Sale of Data & No Banner Ads: We do not sell, rent, or trade your personal data to third parties. We do not display third-party ad networks or banner ads inside Unlust.
04 Third-Party Services & SDK Disclosures
In compliance with Apple App Store and Google Play Developer Policies, the following table discloses all third-party service providers and software development kits (SDKs) utilized by Unlust:
| Provider | Purpose | Data Processed | Privacy Policy |
|---|---|---|---|
| Google Firebase | Authentication, Cloud Firestore, Push Notifications | Email, user ID, recovery milestones, device token | Firebase Privacy |
| RevenueCat | Subscription & Entitlement Management | Anonymous app user ID, purchase transaction receipts | RevenueCat Privacy |
| Paddle | Merchant of Record (Web Billing) | Payment details, billing email, country, transaction ID | Paddle Privacy |
| Superwall | Paywall Presentation & Optimization | Anonymous install ID, paywall view events | Superwall Privacy |
| Mixpanel | Product Analytics (Feature Usage) | Screen views, feature clicks, aggregated telemetry | Mixpanel Privacy |
| AppsFlyer | Mobile App Attribution & Measurement | Install attribution, device identifiers (IDFV / GAID) | AppsFlyer Privacy |
| Sentry | Crash Reporting & Diagnostics | Error stack traces, device OS version | Sentry Privacy |
| Meta SDK | Campaign Measurement & Attribution | App install event, purchase completion (non-personalized) | Meta Privacy |
05 Data Storage & Security
We implement robust technical and organizational security measures to protect your data from unauthorized access, loss, or disclosure:
- Encryption in Transit: All data transmitted between your device and our servers is secured using modern Transport Layer Security (TLS 1.3).
- Encryption at Rest: Cloud databases and authentication records are encrypted using industry-standard AES-256 encryption.
- Access Controls: Server access is strictly restricted to authorized personnel via multi-factor authentication and role-based permissions.
06 Account Deletion & Data Retention
In full compliance with Apple App Store Guideline 5.1.1(v) and the Google Play Account Deletion Policy, you have the right to delete your account and all associated personal data at any time:
Option 1: In-App Instant Deletion
Open the Unlust app → Go to Profile → Select Delete Account → Confirm. Your profile, streak history, journal entries, and authentication records are permanently deleted from our active systems.
Option 2: Web Deletion Portal
If you have uninstalled the app or prefer to request deletion online, visit our dedicated portal:
https://unlustapp.com/delete
Retention Period: When an account is deleted, personal information is permanently purged within 30 days. Minimal tokenized transaction records required by tax, accounting, or anti-fraud laws are retained only for the duration mandated by applicable statutory retention periods.
07 Your Legal Rights (GDPR, CCPA & Global)
Depending on your jurisdiction, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure (“Right to be Forgotten”): Request permanent deletion of your data.
- Restriction & Objection: Object to or restrict certain types of data processing.
- Data Portability: Request transmission of your data in a structured, machine-readable format.
To exercise any of these rights, email us at support@unlustapp.com. We will respond within 30 days without charge.
08 Children’s Privacy
Unlust is strictly intended for users who are at least 16 years of age (or 13 years with parental consent where permitted by local law). We do not knowingly collect personal information from children under 16 (or under 13 under the US Children’s Online Privacy Protection Act - COPPA).
If you believe a child under the legal age has provided personal data to us, please notify us immediately at support@unlustapp.com, and we will promptly take steps to delete that information and terminate the account.
09 Updates to This Notice & Contact Us
We may periodically update this Privacy Notice to reflect enhancements to our features or legal requirements. Material changes will be communicated via the app or on this page with an updated “Effective Date.”
Contact Information:
Email: support@unlustapp.com
Operating Entity: Unlust (Akshat Chaturvedi)
Website: unlustapp.com