Privacy Policy

The short version

• We collect what we need to run your plan: your account email, your quiz answers and the progress you log.
• Some of this relates to your sexual health and personal habits. We treat it as sensitive, use it only to provide the Service, and never sell it or share it with advertisers.
• Payments are handled by Stripe. We never see or store your full card number.
• We use analytics and advertising measurement on our public pages and in the quiz to understand which ads and screens work. These tools receive information about your visit, never your quiz answers, journal or progress.
• You can export your Unhooked data, delete it, or ask us to delete your account at any time.

1. Information you give us

Account information. Your email address when you sign in with a one-time email link. If you choose Sign in with Google, Google shares your name, email address and profile picture with us.

Quiz and profile information. Your first name or nickname, age range and gender; your answers to the onboarding quiz about your habits and how they affect you; the symptoms, goals and triggers you choose; and the reason you wrote for making a change.

Program activity. Relapses you record (when, what came before and any note), urges you work through, daily check-ins (for example urge level, mood and sleep), journal entries, pledges, lesson progress and quiz answers, PANIC sessions, tool and meditation sessions, and your settings such as reminder times.

App lock. If you set a 4-digit PIN, we store only a salted, one-way hash of it, never the PIN itself.

Messages. What you write when you email us, and our replies.

Before you create an account, your quiz answers are kept only in your browser (local storage) so you do not lose your place. When you sign in, they are copied to your account and removed from the browser.

2. Information collected automatically

Technical information. Like any website, our servers and providers receive your IP address, browser and device type, the pages you request and the time of each request. We use this to deliver the Service, keep it secure and fix problems.

Analytics and advertising measurement. On our public pages and in the quiz we use cookies and similar technologies to measure visits, which screens people reach, and whether an ad led to a sign-up or purchase. Details and your choices are in our Cookie Policy (/cookie-policy).

Bot protection. Our sign-in form uses Cloudflare Turnstile, which checks signals from your browser to tell people apart from automated abuse.

3. Payments

Purchases on the website are processed by Stripe. Stripe collects your card or wallet details, billing information and email address, and may use device information to prevent fraud. We receive from Stripe your customer and subscription identifiers, the plan you bought, amounts, currency, payment status and dates. We do not receive your full card number. Stripe handles your information under its own privacy policy: https://stripe.com/privacy.

4. How we use your information

• To provide the Service: create your account, build and personalise your plan, save your progress and sync it across your devices.
• To process purchases, free trials, renewals, refunds and cancellations.
• To keep the Service secure and prevent fraud and abuse.
• To answer your messages and requests.
• To understand and improve the Service, for example which screens people find confusing (using visit and screen information, not the content of your answers or journal).
• To measure our advertising, for example to learn that a visit from an ad led to a purchase.
• To meet legal obligations, such as keeping payment records for tax purposes.

We do not use your information to make automated decisions that have legal or similarly significant effects on you, and we do not use your quiz answers, journal or progress to train artificial-intelligence models.

5. Legal bases (EU, UK and similar laws)

• Contract: to provide the Service and process your purchases.
• Explicit consent: for information about your health and sexual life, which you choose to give us so we can personalise your plan. You can withdraw consent at any time by deleting your data (see section 9); this does not affect processing that happened before.
• Legitimate interests: to keep the Service secure, prevent fraud and improve the Service, balanced against your rights.
• Consent: for non-essential cookies and advertising measurement where the law requires it.
• Legal obligation: to keep records the law requires.

6. Who we share information with

We do not sell your personal information, and we never share your quiz answers, journal or progress with advertisers. We share information only with service providers who process it on our behalf, under contracts that limit how they may use it:

• Supabase, Inc.: database, authentication and sign-in emails.
• Stripe, Inc. and its affiliates: payments and billing.
• Vultr Holdings LLC: hosting of our web servers.
• Cloudflare, Inc.: bot protection on sign-in.
• PostHog, Inc.: product analytics (visit and screen information).
• Meta Platforms, Inc.: advertising measurement. When you take certain actions, such as starting checkout or making a purchase, we may send Meta the event, its value and a hashed (scrambled) form of your email address so Meta can match it to an ad click. We do not send your answers or any health information.
• Google LLC: only if you choose Sign in with Google.

We may also disclose information if the law requires it, to protect the rights, safety and security of our users or others, or as part of a merger, acquisition or sale of assets, in which case the buyer must protect it as this policy describes.

One account across our apps: your Unhooked account uses the same sign-in system as other apps we offer. Each app keeps its own data separately, and we do not use your Unhooked data in other apps.

7. International transfers

We are based in Hong Kong, and our providers may process information in the United States and other countries. Where the law requires, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

8. How long we keep information

• Account, quiz and program data: for as long as you have an account, until you delete it.
• After you delete your data or your account, we remove it from our active systems within 30 days; copies in backups are overwritten on the backup cycle, normally within a further 30 days.
• Payment records: as long as tax, accounting and other laws require (often up to 7 years).
• Support emails: up to 2 years after the conversation ends.
• Analytics and advertising information: according to the retention periods in our Cookie Policy.

9. Your choices and rights

• Export: download a copy of your Unhooked data in Profile → Export my data. The file is not encrypted, so store it carefully.
• Delete: erase all your Unhooked data in Profile → Delete all data. This does not cancel a subscription or delete your account.
• Delete your account: email support@unhooked-app.com from the address you sign in with. Deleting your account removes your data in all of our apps and cancels active subscriptions.
• Cancel a subscription: Profile → Manage subscription.
• Cookies: see the Cookie Policy for how to control analytics and advertising cookies.

Depending on where you live (for example under the EU or UK GDPR, or the laws of California and other US states), you may have the right to access, correct, delete or move your personal information, to object to or restrict its use, to withdraw consent, and to opt out of the sharing of personal information for targeted advertising. To use these rights, email us. We will respond within the time the law requires and will not treat you differently for using them. You can also complain to your local data protection authority.

10. Consumer health data (US state laws)

Some US states, including Washington, Nevada and Connecticut, give extra protection to "consumer health data". The quiz and program information described in section 1 may count as consumer health data. We collect it to provide the features you ask for, with your consent when you enter it, and we use and share it only as this policy describes: with the service providers listed in section 6 that store and run the Service, never with advertisers and never for sale. You can ask to access or delete it, or withdraw your consent, by emailing us.

11. Security

Information travels between your browser and our servers over encrypted connections (HTTPS), and our database provider encrypts stored data. Access to your data is limited to your own account by database rules, and to the few people and systems who need it to run the Service. The optional app lock is a privacy screen, not a security boundary: anyone who has your signed-in device can turn it off. No system is perfectly secure, so please keep your devices and email account protected.

12. Age requirement

Unhooked is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

13. Changes to this policy

If we change this policy, we will update the effective date at the top. If a change is significant, we will tell you on the website or by email before it takes effect.

14. Contact us

TN International Limited, Hong Kong. Email: support@unhooked-app.com.