Privacy Policy

Information you provide

• Account information: your email address, password credentials in protected form, and—if you use Sign in with Apple—the account identifier and any name or email address Apple makes available to us.
• Profile information: your display name, username, optional profile photo, time zone, and UTC offset.
• Circle information: circle name, emoji, invite code, membership, role, join status, reveal schedule, and active circle.
• Content and interactions: photos captured with the front and rear cameras, captions, comments, emoji reactions, and submission dates and times. Photos may include people, surroundings, or other personal information you choose to capture.
• Support and safety communications: information you include when you contact us or report a concern.

Information collected automatically

• App and activity information: screens viewed, session activity, feature interactions, prompt opens, photo capture or retake events, memory views, invite and collage sharing actions, sign-in method, and notification interactions.
• Technical information: account, circle, session, event, and content identifiers; device platform; app version; build number; timestamps; and limited event properties needed to understand feature performance. Our first-party analytics are designed not to include photo contents, prompt text, captions, comments, invite codes, names, email addresses, file URLs, notification bodies, or raw error messages.
• Presence information: whether you recently used a circle, so its other members may see that you are online. The visible window is brief, although the underlying last-seen record remains part of our service data until deleted or no longer needed.
• Notification information: notification permission status, Expo push token, platform, a device identifier derived from the push token, registration time, delivery ticket or receipt status, and whether the token remains active.
• Connection and security information: IP address, request metadata, and server or security logs generated by our hosting and infrastructure providers.
• Local device information: an authentication token stored securely on your device, plus a pending invite code, push token, analytics queue, and random analytics or session identifiers where needed.

Device permissions

Unwind may request access to:

• Camera, to capture the moment in front of you and, when you continue, a matching selfie;
• Photo library, only when you choose a profile photo; and
• Notifications, to send prompt, reveal, submission, reaction, comment, and other circle-activity alerts.

You can control these permissions in your device settings. Unwind does not request precise location, contacts, microphone, health, or advertising-tracking permission in the current version.

We use information to:

• create and secure your account, authenticate you, and provide password resets;
• create, operate, and synchronize circles, daily prompts, captures, reveals, memories, comments, reactions, and online presence;
• show your profile and content to the appropriate members of your circles;
• deliver notifications you enable and process notification delivery results;
• maintain, troubleshoot, protect, and improve the Service;
• measure feature use through first-party analytics;
• detect misuse, enforce our Terms, respond to reports, and protect users and the Service;
• communicate with you about the Service; and
• comply with law and valid legal requests.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with legal obligations, or act with your consent. You may withdraw consent where consent is the applicable basis, but this does not affect earlier lawful processing.

With your circles

Unwind is private by design, but it is a sharing service. Other active members of a circle may see your display name, profile photo, recent online status, participation status, and—after the scheduled reveal—your photos, captions, reactions, and comments for that circle. Circle owners may manage membership and settings.

Anyone with a valid invite code may be able to join the associated circle until the code is changed, the circle is full, or access is otherwise disabled. Share invite codes only with people you trust.

When you choose to share

The app can create a collage from revealed circle photos and open your device’s share sheet. If you share a collage, the selected photos leave Unwind and are handled by the app, person, or service you choose. You are responsible for obtaining permission from people whose content or likeness appears in anything you share outside the circle.

With service providers

We may disclose information to vendors that process it for us, including cloud hosting, storage, database, backup, security, and email-delivery providers; Expo for push-token registration and delivery through Apple Push Notification service or Firebase Cloud Messaging; Apple when you use Sign in with Apple or Apple platform services; and public image hosting providers used for non-user onboarding artwork.

These providers may process information in countries other than yours and may have their own privacy notices for services where they act independently.

For legal, safety, or business reasons

We may disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, and security; investigate fraud or abuse; enforce our Terms; or complete a merger, financing, acquisition, reorganization, or sale of assets. Any successor will remain subject to this Policy for personal information received in the transaction unless you are notified otherwise.

We do not sell personal information. We do not use your photos, captions, or comments for advertising, and the current version of Unwind does not contain third-party advertising or cross-app behavioral tracking.

We keep account, circle, and user content for as long as your account is active and as needed to provide the Service. First-party analytics events are retained while your account exists. Push tokens and delivery records remain only while needed to deliver and troubleshoot notifications, until invalidated, unregistered, or removed with your account. Security logs and residual backup copies are retained only as long as reasonably necessary for operations, security, legal compliance, or dispute resolution.

You can request account deletion in Profile → Delete account. You may choose:

• Deletion in 30 days: deletion is scheduled after a recovery period. You can sign in and cancel before the displayed deletion date; or
• Immediate deletion: current sessions are revoked and you must sign in again to confirm before anything is erased.

Once deletion completes, Unwind removes your profile, login, photos, captions, comments, reactions, notification data, presence data, circle memberships, reveal-view records, and analytics associated with your account from the live Service. If you own a circle with other active members, ownership may transfer to another member. A circle with no other active members and its associated data may be deleted.

Deleted information may remain temporarily in backups, or where retention is required by law, security, fraud prevention, or dispute resolution. Deleting the app from your device does not delete your account.

Depending on where you live, you may have rights to access, correct, receive a copy of, object to or restrict certain processing of, or delete your personal information, and to withdraw consent or complain to a data-protection authority.

You may update your display name and profile photo in the app, manage device permissions in system settings, and delete your account through the in-app flow. To exercise another privacy right, email farish@elowenworks.com. We may need to verify your identity. Authorized agents may be required to provide proof of authority. Where applicable law provides that right, you may appeal a denied request by replying to our decision.

We and our providers may process information in countries that may have different data-protection laws from your country. Where required, we use recognized safeguards for international transfers, such as contractual protections or adequacy mechanisms.

We use reasonable administrative, technical, and organizational safeguards. User photos are stored as protected files, access to circle content is checked against membership, and authentication tokens are stored using device secure storage.

No service is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Tell us promptly at farish@elowenworks.com if you believe your account or information is at risk.

Unwind is not directed to children under 13, or under the higher minimum age required to consent to an online service in their country. We do not knowingly collect personal information from a child who cannot lawfully use the Service without parental consent.

If you believe a child has provided information in violation of this section, contact farish@elowenworks.com so we can investigate and delete it where appropriate.

The Service may interact with third-party services, including Apple authentication, device sharing destinations, app stores, and linked websites. Their handling of information is governed by their own terms and privacy policies. We are not responsible for third-party services you choose to use.

We may update this Policy to reflect changes to the Service, law, or our practices. We will post the updated version with a new effective date and provide additional notice where required. If a change materially affects how we use information already collected, we will take any further steps required by law.

Questions, requests, and complaints may be sent to:

If you are in a jurisdiction that gives you the right to contact a supervisory authority, you may also lodge a complaint with that authority.