UNSAID

Privacy Policy

Last updated 30 August 2026

The short version

We cannot read what you write here. Your memories are encrypted on your device before they reach us, with a key we never receive. What we hold is a file of random-looking bytes and a locked key we cannot open.

What we collect

  • The encrypted contents of what you write or record.
  • The date each memory was saved, whether it was text or voice, and its size.
  • Key material that is useless without your phrase or recovery code.
  • Operational records: error counts, request timings, rate-limit state.
  • Product events, keyed by a random identifier that changes every week.

We do not collect your name, email address, phone number, or location. There is no account to create. We do not use cookies for advertising or analytics.

What we cannot collect

There is no column in our database capable of holding the text of a memory, a transcript, a title, or a tag. This is not a policy choice we could quietly reverse; it is the shape of the system, and our build fails if someone adds one.

When anything is read by AI

Only when you tap “Reflect” on one specific memory, and only after you have read the disclosure and confirmed it. That one memory is decrypted on your device and sent to our AI provider for a response. Your other memories are never included. We record which model answered and when — never what was said, in either direction.

Who we share with

  • Our hosting, database, and storage providers, which hold only encrypted data.
  • Our AI provider, and only the single memory you explicitly send.
  • Our error-tracking provider, which receives scrubbed reports with no content.

We do not sell your data. We do not use what you write to target advertising, and we do not use it to train models.

Deletion

Deleting a memory removes the encrypted file and its record. Forgetting a memory destroys the key first, so that even a copy of the encrypted file surviving in a backup cannot be read again — by anyone, including us. Neither can be undone. If you anchor a memory on Solana, the public record of that transaction remains visible forever; it contains a one-way hash and never your words.

If you lose your phrase and your recovery kit

Your memories stay locked, permanently. We cannot reset them or recover them — not for you, not for anyone asking on your behalf, and not in response to a legal order, because we do not hold the key. This is the direct cost of everything above.

Your rights

You can export everything you have written at any time, decrypted, from Settings. You can delete any memory or your whole vault. Because we hold no identifying information, we cannot verify who you are for a data-subject request — the export and delete controls in the app are the mechanism, and they are always available to you.

Children

UNSAID is not intended for anyone under 16. We do not knowingly hold data from children.

Contact

Questions about this policy: privacy@unsaid.app

For how each of these works technically, see how this actually works.