Privacy Policy

The short version

Unrewind is built around a simple principle: your contacts stay anonymous. The original chat file you import never leaves your device. Before anything is sent to our servers, every real contact name is replaced with an anonymous alias on your device — so our servers and AI providers can analyze the conversation to give you insights, but never learn who your contacts are. You can permanently delete your account and associated app data at any time, subject to limited records we may need to keep for legal, security, or app store obligations.

We do not sell your personal information. We never have and we never will.

How anonymization works

Before any data leaves your device, Unrewind replaces all real contact names with anonymous aliases (for example, Person_A, Person_B). The mapping between real names and aliases is stored only on your device. Our servers and AI providers never see real contact names. When results are returned to your device, the app re-maps aliases back to real names locally, so you see meaningful insights while the backend never learns who your contacts are.

Information we collect

We collect only what is necessary to operate the app:

• Account identifiers — an email address or sign-in token used to authenticate your account.
• Anonymized conversation data — statistical summaries, anonymized message patterns, and metadata derived from imported chats, stored with aliases instead of real contact names.
• Generated insights — the cards, scores, relationship labels, and profile sections produced by the app, stored under your account.
• Purchase and entitlement records — used to verify and restore paid features.
• App interaction and analytics data — events such as screens viewed, imports started or completed, paywall interactions, purchase flow events, app version, platform, and device or install identifiers used to understand product performance and reliability.
• Technical and diagnostic data — device type, app version, crash reports, and error logs used to maintain and improve the app.

We do not collect real contact names, phone numbers, or contact lists. These are replaced with anonymous aliases on your device before any data leaves it. Anonymized message samples and statistical summaries are stored on our servers and sent to our AI providers for analysis — always with aliases instead of real contact names, so we never know who your contacts are.

How we use information

• To generate and display your in-app insights, cards, relationship reads, and profile.
• To save your app progress and restore it across devices when you sign in.
• To verify purchases and manage access to paid features.
• To detect errors, ensure reliability, and prevent misuse.
• To respond to support or privacy requests.

We do not use your data for advertising, profiling for third parties, or any purpose beyond operating the app.

AI-powered analysis

Unrewind uses third-party AI service providers to generate insights from your anonymized data. Only anonymized, alias-substituted data is sent to these providers — never real contact names or any information that could identify who your contacts are.

Your data is never used to train AI models — not by us, and not by our AI providers. We select providers whose terms explicitly prohibit using customer data for model training purposes. Your conversations exist to give you insights, not to improve anyone's AI.

Imported chat data and local storage

When you import a WhatsApp export, the app processes the file locally on your device. The name-to-alias mapping is created and stored on your device only — real contact names never leave it. Before upload, all contact names in message text are replaced with anonymous aliases (e.g. "Friend A"). These anonymized messages, along with statistical summaries, are stored on our servers and used for AI analysis. The original export file is not transmitted to our servers.

If you delete the app or clear its local data, the alias mapping is lost. At that point, any anonymized data on our servers becomes permanently unattributable to real individuals — it cannot be re-identified even by us.

Third-party services

Unrewind uses trusted providers for infrastructure, authentication, storage, AI analysis, analytics, and payment processing. This includes Supabase for database, authentication, and storage; Google Vertex AI / Gemini for AI analysis; PostHog for product analytics; RevenueCat for purchase and entitlement management; and Apple and Google for app distribution and billing. These providers process data only to provide services to Unrewind and may process data in the United States or other countries under applicable data processing terms.

Data retention

We retain your account data and generated insights for as long as your account is active. When you permanently delete your account through the app, all associated records — account profile, anonymized conversation data, generated insights, and entitlements — are deleted from our systems. Some purchase receipts may be retained as required by applicable law or app store policy.

Your rights and choices

• Access and portability — you can contact us to request a copy of the data we hold about you.
• Deletion — you can permanently delete your account and all associated data directly within the app at any time, or by contacting us.
• Correction — you can contact us to correct inaccurate account information.
• Opt-out of non-essential processing — you can choose not to import any chat data at any time.
• Subscription management — managed through the Apple App Store or Google Play Store.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR, including the right to object to processing and the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the CCPA, including the right to know what personal information we collect and the right to opt out of its sale. We do not sell personal information.

Children

Unrewind is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, please contact us and we will promptly delete any associated data.

Security

We use encrypted connections (TLS), access controls, and secure cloud infrastructure. The anonymization architecture described above means that even in the unlikely event of a server-side breach, real contact names are not exposed — they are never sent to or stored on our servers. Any stored message data contains only anonymous aliases, not the real names of your contacts.

Changes to this policy

We may update this Privacy Policy as the app evolves. The updated version will be posted at unrewind.app/privacy with a new last updated date. For material changes, we will provide additional notice where required by applicable law.

Contact

For privacy questions, data access requests, or account deletion assistance, contact us at developer@comixstudio.art.