Privacy policy
Version 1.0. Effective [effective date].
The short version
- No account. You never sign up or give us your name or email to use Untangle.
- What you write stays on your device. Your journal, moods, check-ins, plans, bookmarks and reflections are stored on your phone. We don’t receive them and can’t read them.
- Some technical information does leave your phone, and this policy lists all of it:
- a random identifier the app creates so it can download audio;
- the requests your phone makes to download audio and check for newer versions;
- on iPhone, anonymous analytics about how the app is used, which you can turn off (and which start off if you’re in the UK, EU or EEA);
- anything you choose to send us by email.
- We don’t sell your information, show ads, or track you across other apps and websites.
- Purchases go through Apple’s App Store. We never see your payment details. The Android app doesn’t sell subscriptions yet.
- This version of Untangle has no AI features. If we add features that need more information, we’ll update this policy and ask you first where the law requires it.
- Untangle is for people aged 16 and over, or 18 and over in some countries (section 11).
Contents
- Who we are
- What this policy covers
- What stays on your device
- What leaves your device, and why
- What we don’t do
- Health information
- Legal bases (UK, EU and EEA)
- Who handles information for us
- How long we keep information
- Your choices and rights
- Children and teenagers
- Security
- International transfers
- New features
- Changes to this policy
- Contact
1. Who we are
Untangle is made by the developer who publishes it, named as the seller on its App Store page and as the developer on its Google Play page (“we”, “us”). We’re responsible for the information described in this policy (the “controller” under European data protection law).
Contact us about privacy at privacy@get-untangle.com.
2. What this policy covers
This policy covers the Untangle apps for iPhone and Android and the website at get-untangle.com. It explains what information is involved when you use them, what stays on your device, what leaves it, why, who else handles it, how long it’s kept and what choices and rights you have.
It doesn’t cover Apple, Google or other companies whose services you use alongside Untangle (for example the App Store, Google Play, Apple Health, iCloud or your email provider). Their own privacy policies apply.
3. What stays on your device
Untangle is built so that what you create stays on your phone. We don’t receive, store or have access to any of the following. It’s stored in the app’s private storage on your device:
- journal entries, their titles and the moods you attach to them;
- mood entries (how you felt, the feelings and the context you picked);
- check-in answers (iPhone);
- practices you’ve done, and what you wrote in their reflections;
- your answers to the short questions in workbook introductions;
- practices you’ve saved or scheduled, and the days and times you picked;
- which chapters you’ve read, your Find what helps topics, and your app settings.
Backups. Your device may include this information in its own backup, depending on your settings: iCloud Backup or a computer backup on iPhone, and Google’s backup on Android. Those backups are kept by Apple or Google in your own account, under their terms, and we can’t access them. If you restore a backup to a new phone, your entries come with it. Moving between iPhone and Android isn’t supported.
Security. Your entries are protected by your phone’s own security: the app’s private storage, and the encryption your device applies when it’s locked with a passcode. The app doesn’t add its own separate encryption, so anyone who can unlock your phone and open Untangle can read what’s in it.
Deleting it. You can delete individual entries in the app. Deleting the app deletes everything it stored on your device. Copies in device backups remain until those backups are replaced or deleted. We can’t recover anything you delete, because we never had a copy.
4. What leaves your device, and why
4.1 An anonymous app identifier
What: When you open Untangle, it creates (or reuses) a random identifier and a short-lived access token, through our backend provider, Supabase. The identifier isn’t your name, email, phone number or any device identifier, and we don’t link it to you. On our backend it exists as an anonymous record with the times it was created and last used.
Why: The app uses it to download audio (section 4.2), so that only the app can request our audio files, and to protect the service from abuse.
Where it’s kept on your phone: in the app’s private storage. On iPhone it may be included in your device backup, so restoring a backup brings back the same identifier; deleting and reinstalling the app creates a new one. On Android it’s excluded from backups.
Logs: like any online service, Supabase records technical details of each request (such as the IP address, the time and technical details of the request). We use these only to run and secure the service. Section 9 says how long they’re kept.
4.2 Audio downloads
What: Guided practices with audio are downloaded the first time you play them, then kept on your phone so they play offline (your phone may clear them if it runs low on space). Your phone asks our backend for permission to download the file (using the identifier in section 4.1), then downloads it from Supabase’s storage. When you play saved audio while you’re online, the app may also ask our backend whether there’s a newer version.
What we learn: which audio file was requested, when, and the technical details in the request logs (section 4.1). We don’t use download requests to build a profile of you.
4.3 Anonymous analytics (iPhone only)
What: On iPhone, if analytics are on, the app sends us a small set of anonymous events about how the app is used, through PostHog, an analytics provider. We use PostHog’s EU cloud. Each event is one of a fixed list we choose in advance, and the app drops anything not on that list. For example:
- the app was opened;
- a mood was logged, where in the app it was logged from, and how many feelings and context words were picked (never which ones, and never the mood itself);
- the plans screen was shown, a free trial started, a plan was bought, changed, restored or lapsed, an offer code was redeemed, and whether the plan was monthly or yearly;
- a practice was opened from Find what helps, whether you had a subscription at the time, and whether it was the first suggestion or further down (never which practice);
- a setting was switched on or off (for example mood capture on launch, or Apple Health export).
Along with each event, PostHog receives technical details about the app and device: the app’s name, version and build, whether it’s a test build, the device type and model code (such as “iPhone16,1”), the iOS version, screen size, language, time zone, whether you’re on Wi-Fi or mobile data, the analytics library’s name and version, and a session identifier. Events are tied to a random analytics identifier the app creates on your phone. It isn’t the identifier in section 4.1, it isn’t your device’s advertising identifier, and it isn’t linked to you.
What we never send: anything you write or record in the app (journal text, moods, feelings, check-in answers, reflections), which practices, chapters or topics you use, your name or contact details, your precise location, or your device’s advertising identifier. We turn off PostHog’s location lookup. Your phone’s IP address reaches PostHog when an event is sent, as with any internet request; we don’t use it to locate or identify you.
Why: to understand which parts of the app are used and where it isn’t working, so we can improve it, and to understand how subscriptions are working overall.
Your choice: you can turn analytics on or off at any time in Settings, Privacy & data, Analytics in the app. If your phone’s region is set to the UK, a country in the EU or EEA (or a region we can’t identify), analytics start off and are only sent if you turn them on. Elsewhere they start on. Untangle doesn’t ask your age, so these defaults are the same at any age. When analytics are off, the app sends no events.
On Android: the current Android version doesn’t send analytics.
4.4 Purchases
What: On iPhone, subscriptions are bought through the App Store. Apple takes the payment and handles billing, renewals, cancellations and refunds. We don’t receive your name, email, payment card or billing address.
The iPhone app asks the App Store, on your phone, whether you have an active subscription, and remembers the answer on your phone so paid content works offline. We don’t run a server that receives your purchases. The Android app doesn’t sell subscriptions yet, so it doesn’t check with Google Play.
Apple gives us sales and subscription reports (for example how many trials started in a country). These reports are aggregated and don’t tell us who you are. If analytics are on (iPhone), the purchase events in section 4.3 are sent too.
Free codes (iPhone): if you ask us for a free code because you can’t afford a subscription, we’ll use your email to send you one (section 4.6). We don’t ask why.
4.5 Apple Health (iPhone, optional)
If you turn on mood export in Settings, Apple Health, the app writes your mood entries to Apple Health on your phone, as State of Mind entries. The app only writes to Apple Health; it doesn’t read anything from it. What it writes stays in Apple Health on your device (and in iCloud if you’ve turned on Health in iCloud), under Apple’s terms. We never receive your Health data, and we never use it for advertising or sell it. You can stop the export in the app at any time. Moods already exported stay in Apple Health until you remove them in the Health app, or delete the mood in Untangle and choose Delete everywhere.
4.6 When you contact us
If you email us, we receive your email address, your message and anything you choose to include, such as technical details about the app and your phone. Please don’t include anything you’ve written in the app; we don’t need it. We use your message only to reply, fix problems and improve Untangle.
4.7 Crash reports from Apple and Google
Untangle doesn’t include a crash-reporting tool of its own. If you’ve chosen to share analytics with app developers in your phone’s settings, Apple or Google may send us crash reports and performance data about Untangle. These are collected and controlled by Apple or Google under their policies, and don’t identify you to us.
4.8 The website
get-untangle.com is a plain website. It uses no cookies, no analytics and no advertising or tracking tools, and its fonts are hosted with the site rather than loaded from another company. Our hosting provider, [website host], records standard server logs (such as IP address, browser type and the pages requested) to deliver and secure the site. If you click an email link, your email app opens and section 4.6 applies.
5. What we don’t do
- We don’t sell your personal information, or share it for targeted or cross-context behavioral advertising.
- We don’t show ads, and we don’t use advertising identifiers or track you across other companies’ apps and websites. (That’s why Untangle never asks for permission to track you.)
- We don’t use information from Apple Health, or anything you write, for advertising or marketing.
- We don’t use your information to train artificial intelligence or large language models.
- We don’t use your information to make automated decisions that have legal or similarly significant effects on you.
- We don’t knowingly collect information from anyone below Untangle’s minimum age (section 11).
Do Not Track and Global Privacy Control. Neither the apps nor the website track you across other companies’ sites or apps, and we don’t let anyone else do so through them. So a browser’s Do Not Track or Global Privacy Control signal doesn’t change anything: we already don’t do what those signals ask companies to stop.
6. Health information
Untangle is a wellbeing app, so information connected to it can be sensitive. The health-related information you create in the app (your journal, moods, check-ins and reflections) stays on your device, as section 3 explains. The information that leaves your phone (section 4) isn’t what you wrote or how you felt. Some of it, such as the fact that you use Untangle or that a mood was logged, could still be considered health-related under some laws, so we treat it with the same care: we collect only what’s listed here, use it only for the purposes listed, share it only with the service providers in section 8, and never sell it.
6.1 Consumer health data (Washington, Nevada and other US states)
Some US state laws, such as Washington’s My Health My Data Act and Nevada’s consumer health data law, give you specific rights over “consumer health data”. This section describes the information in section 4 to the extent those laws treat it as consumer health data.
Categories we collect: the fact that you use Untangle; anonymous app-usage events on iPhone (section 4.3), including that a mood was logged and that a practice was opened, but not the mood or the practice; and audio download requests (section 4.2).
Sources: your device, through the app.
Purposes: to provide the app (audio downloads), to keep it secure, and, with analytics on, to understand how it’s used and improve it.
Who we share it with: only the service providers in section 8, which process it on our behalf. We don’t sell it.
Your rights: you can ask to confirm whether we hold your consumer health data, see it, delete it, withdraw consent, and get a list of the third parties we’ve shared it with. Section 10 explains how, and the limits that come from not knowing who you are.
7. Legal bases (UK, EU and EEA)
Where European data protection law applies, we rely on:
- Consent for analytics (section 4.3), which start off in the UK, EU and EEA and are only sent if you turn them on. You can withdraw consent at any time in the app’s settings.
- Performance of our contract with you for what’s needed to provide the app you asked for: the identifier and access token (section 4.1) and audio downloads (section 4.2).
- Legitimate interests for securing the service and its logs (sections 4.1 and 4.8), and for replying to you when you contact us (section 4.6). Our interest is running a safe, working service and helping you; you can object (section 10).
- Legal obligation where we have to keep or disclose information by law.
8. Who handles information for us
We use a small number of service providers (“processors”) who handle information only on our instructions and under contracts that protect it:
| Provider | What it does for us | Where |
|---|---|---|
| Supabase | Backend: the anonymous identifier, access tokens and audio storage | [region] |
| PostHog | Analytics (iPhone, when on) | European Union |
| [website host] | Hosting the website | [region] |
| [email provider] | Our email | [region] |
Each of these providers is bound to protect the information it handles for us at least as well as this policy describes.
Apple and Google aren’t our processors: when you buy through the App Store, use Apple Health or back up your phone, they act under their own terms and privacy policies.
We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a sale or reorganization of our business, in which case this policy continues to apply to it.
9. How long we keep information
| Information | How long |
|---|---|
| What you create in the app (section 3) | On your device until you delete it or the app. We never have a copy. |
| Anonymous identifier record (section 4.1) | [retention period] |
| Backend and audio request logs (sections 4.1 and 4.2) | [retention period] |
| Analytics events (section 4.3) | [retention period], then deleted |
| Emails you send us (section 4.6) | As long as needed to deal with your message, then [retention period] |
| Website server logs (section 4.8) | [retention period] |
10. Your choices and rights
Choices you can make in the app at any time: turn analytics off (iPhone, Settings, Privacy & data, Analytics); stop Apple Health export; delete entries; or delete the app.
Your rights. Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy;
- correct it;
- delete it;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent, where we rely on it;
- opt out of the sale or sharing of personal information, or of targeted advertising (we don’t do either);
- limit the use of sensitive personal information (we only use it for the purposes the law permits);
- not be treated differently for using these rights; and
- complain to a data protection authority (in the UK, the Information Commissioner’s Office; in the EU, the authority where you live).
How to ask: email privacy@get-untangle.com. You can also ask someone to make a request for you. We’ll reply within the time the law sets (usually one month in the UK and EU, and 45 days in US states such as California and Washington). If we refuse a request, we’ll tell you why, and you can appeal by replying to our decision.
A limit that comes from not knowing who you are. We don’t ask for your name or email to use Untangle, and the identifiers in section 4 aren’t linked to you, so in most cases we can’t find information that relates to you, and we won’t ask you for more information just to try. What you create in the app is only on your device, where you control it. If you want analytics data deleted, turn analytics off and tell us; we’ll explain what we can do. Emails you’ve sent us we can find and delete.
11. Children and teenagers
Untangle is for people aged 16 and over. Where the law treats anyone under 18 as a child for data protection (for example India, Kenya, Nigeria and South Africa), it’s for people aged 18 and over. The terms set this out.
Untangle isn’t directed at children, and we don’t knowingly collect information from anyone below the minimum age that applies to them. If you believe someone below it has sent us information (for example by email), contact us and we’ll delete it.
If you’re 16 or 17:
- Everything you write still stays on your phone (section 3). We can’t see it, and neither can anyone else through us.
- Untangle doesn’t ask your age. On iPhone you can switch analytics off at any time (section 4.3); the Android app doesn’t send analytics.
- You have the same rights as everyone else (section 10), and you can use them yourself or through a parent or guardian.
12. Security
We use reasonable technical and organizational measures to protect the information we handle. Everything the app sends travels over encrypted connections (HTTPS). Access to our service providers’ accounts is limited and protected. No system is perfectly secure; if a breach affects your information, we’ll tell you and the authorities where the law requires.
13. International transfers
Our service providers may process information in other countries, including the European Union and the United States, and the people who make Untangle may access it from the countries they work in. Where information about people in the UK, EU or EEA is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or the EU-US Data Privacy Framework where the provider is certified.
14. New features
This version of Untangle has no artificial intelligence features. We plan to add new features over time. If a feature needs information this policy doesn’t describe, including any future AI features, we’ll update this policy before it ships, explain in the app what the feature uses and why, and ask for your consent first where the law requires it.
15. Changes to this policy
We’ll post any changes on this page with a new effective date and version. If a change is significant, for example if we start collecting a new kind of information, we’ll tell you in the app before it takes effect and, where the law requires, ask for your consent.
16. Contact
For privacy questions and requests, email us at privacy@get-untangle.com.