Privacy Policy

The short version

Unrewind is built around a simple principle: your conversations are processed to give you insights, not kept as a permanent archive. The original chat file you import never leaves your device. Before anything is sent to our servers, the name of the person you're chatting with is replaced with an anonymous alias on your device, and structural personal data people paste into chats — card numbers, bank account numbers (IBAN), phone numbers, and verification codes — is stripped out, all on your device before upload. Message text is read by our systems once to build a summary and a small set of verified quotes; after that, the message text itself is deleted from our servers. You can permanently delete your account and associated app data at any time, subject to limited records we may need to keep for legal, security, or app store obligations.

We do not sell your personal information. We never have and we never will.

How anonymization works

Before any data leaves your device, Unrewind replaces the names of the two people in the conversation — you and the person you're chatting with — with anonymous aliases (for example, Person_A, Person_B) before the message text is uploaded. Our AI providers only ever process the aliased version of your conversation — they never see either of your real names.

Separately, we keep an encrypted backup of your real name and your chat partner's real name, linked to that alias, on our servers. This backup exists solely so that if you delete the app, switch phones, or clear local data, Unrewind can restore meaningful names for a conversation instead of showing a generic alias for analysis you've already paid for. It is encrypted at rest with a key derived from your account, is never sent to our AI providers, and is deleted if you delete your account. See "Imported chat data and local storage" below for more detail.

This does not extend to other people mentioned inside the messages themselves — a friend, a family member, or a coworker brought up in conversation. Reliably telling a name apart from an ordinary word in running text would require guessing, and a wrong guess would silently corrupt the conversation, so Unrewind does not attempt it. If a chat mentions a third person by name, that name is not anonymized before the message reaches our servers.

When results are returned to your device, the app re-maps the two participant aliases back to real names locally, so you see meaningful insights while the AI that generated them only ever saw the anonymized alias.

Information we collect

We collect only what is necessary to operate the app:

• Account identifiers — an email address or sign-in token used to authenticate your account.
• Anonymized conversation data — statistical summaries, monthly digests, and a limited set of verified quotes (at most 12 per month, or every message in a month with fewer than 10) derived from imported chats, stored with an alias instead of your chat partner's real name.
• Encrypted contact-name backup — the real name behind your chat partner's alias, and your own name, encrypted and stored only so a reinstall or new device doesn't strand analysis you've already paid for behind a generic alias. Never sent to our AI providers.
• Generated insights — the cards, scores, relationship labels, and profile sections produced by the app, stored under your account.
• Purchase and entitlement records — used to verify and restore paid features.
• App interaction and analytics data — events such as screens viewed, imports started or completed, paywall interactions, purchase flow events, app version, platform, and device or install identifiers used to understand product performance and reliability.
• Approximate location — coarse location (country, region, and city level) inferred from your IP address by our analytics provider. We never collect precise location and the app never requests location permission.
• Feedback you send us — if you use "Send feedback" in the app, we store your message, the category you chose, an optional contact email, and basic technical details (app version, platform, device model, language) so we can understand and reply to it. It is deleted if you delete your account.
• Technical and diagnostic data — device type, app version, crash reports, and error logs used to maintain and improve the app.

The name of the person you're chatting with is replaced with an anonymous alias on your device before your message text is uploaded, so the AI that analyzes it only ever sees the alias. (We separately keep an encrypted backup of that name for account-recovery purposes — see "How anonymization works" above.) We do not collect the phone numbers or contact lists on your device outside of the imported chat. Structural personal data typed into messages — bank account numbers (IBAN), card numbers, phone numbers, and verification codes — is also stripped out on your device before upload. Names of other people mentioned inside a conversation are not detected or removed; see "Imported chat data and local storage" below for what happens to message text after upload and how long it is kept.

How we use information

• To generate and display your in-app insights, cards, relationship reads, and profile.
• To save your app progress and restore it across devices when you sign in.
• To verify purchases and manage access to paid features.
• To detect errors, ensure reliability, and prevent misuse.
• To respond to support or privacy requests.

We do not use your data for advertising, profiling for third parties, or any purpose beyond operating the app.

AI-powered analysis

Unrewind uses third-party AI service providers to generate insights from your conversation data. Before any message reaches these providers, the name of the person you're chatting with is replaced with an alias, and structural personal data — bank details, card numbers, phone numbers, verification codes — is stripped out. Names of other people mentioned within a conversation are not filtered out this way (see "How anonymization works" above), so we recommend not sharing anything in an imported chat that you would not want processed by a third-party AI provider.

Your data is never used to train AI models — not by us, and not by our AI providers. We select providers whose terms explicitly prohibit using customer data for model training purposes. Your conversations exist to give you insights, not to improve anyone's AI.

Imported chat data and local storage

When you import a WhatsApp export, the app processes the file locally on your device. The alias mapping for the two chat participants is created on your device and used there to prepare the message text for upload — the name of the person you're chatting with is replaced with an alias before any message text leaves your device, and structural personal data — IBANs, card numbers, phone numbers, and one-time verification codes — is detected and removed using checksum-based pattern matching (the same kind of check a bank uses to validate a card or account number), so only genuine matches are affected. The original export file is not transmitted to our servers. We separately keep an encrypted backup of the real names behind that alias on our servers, for the account-recovery purpose described above; that backup is never sent to our AI providers.

The processed messages are uploaded and read by our systems once, to build a monthly digest for that conversation: a summary, notable topics, and a small set of quotes verified word-for-word against the original text (at most 12 per month, or every message in a month with fewer than 10). Once a conversation's digests are complete, the message text itself is deleted from our servers — what remains is the digest, the statistical summaries, and the verified quotes. A vector representation of each message may be retained to power in-app semantic search and the Coach feature, but the underlying message text is cleared and is not reconstructable from it.

If you delete the app or clear its local data, your on-device alias mapping is lost, but the encrypted name backup described above lets the app restore meaningful names for a conversation you've already imported if you reinstall or set up a new device — you are not permanently anonymous to us in that scenario. If you want your data to become permanently unattributable, delete your account: at that point the encrypted name backup, the conversation data, and all other associated records are erased, and nothing that remains can be re-identified.

Third-party services

Unrewind uses trusted providers for infrastructure, authentication, storage, AI analysis, analytics, and payment processing. This includes Supabase for database, authentication, and storage; Google Vertex AI / Gemini for AI analysis; PostHog for product analytics; RevenueCat for purchase and entitlement management; and Apple and Google for app distribution and billing. These providers process data only to provide services to Unrewind and may process data in the United States or other countries under applicable data processing terms.

Data retention

Message text from imported chats is retained only long enough to build the monthly digest described above, then deleted from our servers. The resulting digest, statistical summaries, and verified quotes are retained for as long as your account is active. When you permanently delete your account through the app, all associated records — account profile, conversation data, generated insights, and entitlements — are deleted from our systems. Some purchase receipts may be retained as required by applicable law or app store policy.

Your rights and choices

• Access and portability — you can contact us to request a copy of the data we hold about you.
• Deletion — you can permanently delete your account and all associated data directly within the app at any time, or by contacting us.
• Correction — you can contact us to correct inaccurate account information.
• Opt-out of non-essential processing — you can choose not to import any chat data at any time.
• Subscription management — managed through the Apple App Store or Google Play Store.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR, including the right to object to processing and the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the CCPA, including the right to know what personal information we collect and the right to opt out of its sale. We do not sell personal information.

Children

Unrewind is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, please contact us and we will promptly delete any associated data.

Security

We use encrypted connections (TLS), access controls, and secure cloud infrastructure. Before anything leaves your device, the name of the person you're chatting with is replaced with an alias and structural personal data such as card numbers, IBANs, phone numbers, and verification codes is stripped out — so even in the unlikely event of a server-side breach, that data is not exposed. Message text itself is retained only until your conversation's monthly digest is built, then deleted from our servers, which further limits what a breach could expose.

Changes to this policy

We may update this Privacy Policy as the app evolves. The updated version will be posted at unrewind.app/privacy with a new last updated date. For material changes, we will provide additional notice where required by applicable law.

Contact

For privacy questions, data access requests, or account deletion assistance, contact us at developer@comixstudio.art.