What Unsit keeps, and where

Your rights

Every figure Unsit holds about you lives in the app's own container on this phone. Remove the app and the ledger, the windows, the stamps and the settings are removed with it. No copy exists on a server, so there is nothing to request or erase elsewhere. Clear all data in House Rules empties the ledger while the app stays.

Nothing collected

There is no account, no sign-in and no profile. Unsit reads no contacts, location, calendar, health or motion data. It runs no analytics, no advertising and no crash reporting, and bundles no third-party software.

Storage

Blocks, windows, weekday templates, plans, sessions, stamps and audits are written to three small files in the app sandbox. The open block, pinned moves and preferences sit in the app's standard defaults. The ledger export is a JSON file that you pass to the share sheet yourself.

Reminders — one at each window you set, and the long-sit nudge — are local notifications scheduled on the phone. They are never routed through a server.

The planner

Build Plan, Pay Now and the Weekly Audit send one request to OpenAI (gpt-4o-mini). It carries numbers and identifiers only: minutes owed per zone, window times and lengths, a discreet flag, catalogue move identifiers and the identifiers of moves already done today. No free text, no name, no device identifier and no history are included. OpenAI processes the request under its own privacy policy. With Offline planner only switched on, no request is made at all — the local planner does the same job.

The app asks for your agreement before the first planner call and shows this receipt:

Children and changes

Unsit is not aimed at children under 13 and knowingly collects nothing from them. When this page changes, the date at the top changes with it, and the same page inside the app is updated in step.

Contact

Questions about this policy or about the ledger: mail@candyverselab.cfd.