Privacy Policy - Undwell

Effective date: July 23, 2026

The short version

Undwell has no account, no server, and no analytics. What you write at night is stored on your phone, encrypted, and read back only there. We cannot see your thoughts. We cannot see that you exist. This page is short because there is almost nothing to disclose.

What the app collects

Nothing. There is no sign-up, no login, no email capture in the app, no advertising identifier, no analytics SDK, and no crash reporter that phones home. The app has no server of ours to send anything to. (The waitlist on our website is the one place we handle an email address, and only if you offer it; see "The website and its waitlist" below.)

What stays on your phone

Everything you put in: your typed or spoken thoughts, how you sorted them, and the app's own counts (like how many worries resolved themselves). Free-text content is encrypted at rest with a key held in your iPhone's Keychain. Voice notes are transcribed on your device by Apple's on-device speech recognition; audio for a session is discarded after transcription.

Where the app suggests a lane for a thought, that happens on your device using Apple's on-device models. No thought is sent to us or to any third party. There is no server-side AI.

Backups

If your iPhone backs up to iCloud, Undwell's data rides along in that backup, the same as Notes. Apple's iCloud terms govern that copy; turning on Advanced Data Protection end-to-end encrypts it. Inside the app you can switch on "Keep out of backups", which excludes Undwell's data from iPhone and iCloud backups entirely. The trade is stated next to the switch: lose the phone, lose the notes.

Deleting your data

Settings > Erase everything removes all thoughts, receipts, and counts from the device. Because we hold no copy, there is nothing to ask us to delete. If backups were on, older device backups may hold earlier snapshots under Apple's retention rules.

Permissions Undwell may ask for

All optional; the app works with every one of them declined.

• Microphone and speech recognition: voice capture, processed on-device.
• Notifications: a morning summary and due reminders you chose. Never at night.
• Screen Time (Family Controls): the optional night shield that keeps apps you pick closed until your wake time. The selection is an opaque token; Undwell never learns which apps.
• Calendar: the optional exam-season mode reads event titles on-device to find exam dates.
• Reminders: one-tap export of a morning task, only when you tap it.

Crisis resources

If something you write matches the app's on-device safety screen, Undwell shows crisis lines for your region. This happens entirely on your phone. Nothing is transmitted, no one is contacted, and no record leaves the device. Undwell is not a crisis service, not therapy, and not a medical device.

Children

Undwell is not directed at children under 13. The App Store age rating governs availability.

The website and its waitlist

This policy also covers the website at undwell.app. The site sets no cookies and runs no analytics or trackers. The one piece of personal data it can handle is the email address you type into the waitlist form, and only if you choose to submit it. We use it to tell you when Undwell reaches the App Store and to send the occasional update about Undwell after that. We do not sell or share it, and we ask for nothing else.

Your address is stored by our email provider, Loops (loops.so), acting on our instructions as a processor; it is not kept on any server of ours. The legal basis is your consent, given when you submit the form. You can withdraw it at any time with the unsubscribe link in every email, which removes you from the list, or by writing to [email protected].

Who is responsible (GDPR)

The data controller is Bohdan Zhvalevskyi, reachable at [email protected]. Since Undwell processes personal data only on your device and transmits none of it, most GDPR rights (access, erasure, portability) are exercised directly in the app: read your data on the graveyard screen, export it from Settings, erase it from Settings. For anything else: [email protected].

You have the right to lodge a complaint with a supervisory authority; for Austria that is the Datenschutzbehörde (dsb.gv.at).

Changes

If Undwell ever gains a feature that moves any data off your phone, it will be strictly opt-in, this policy will change before the feature ships, and the app's privacy screen will say so in plain words. The current version of this page always describes the build in the store.

Undwell, by Bohdan Zhvalevskyi. Contact: [email protected].