# Privacy Policy for Uniphy

Last Updated: 26.05.2026

Uniphy is committed to protecting your privacy. Our core philosophy is "Local-First": your personal data belongs on your device by default. This policy explains what data is processed, how it is used, and what choices you have, including when you interact with our AI assistant, opt into our optional Cloud Sync feature, or use the app with advertising and usage analytics enabled.

1. Data Controller

Uniphy is based in Germany. For any questions regarding your data, you can contact us at: Email: info@uniphy.world

2. The "Local-First" Principle

By default, Uniphy does not use cloud storage for your personal entries.

• Memories & Tracking: All habits, health data, and AI "memories" are stored exclusively on your local device unless you choose to enable Cloud Sync (see Section 4).
• Photos: Any images you attach to your entries remain on your device.
• No Account Required: Registration is entirely optional. You can use the full Uniphy experience without creating an account.

Note: Without Cloud Sync enabled, we cannot recover your data if you lose your device or delete the app. We recommend using your OS-level backup (such as iCloud or Android Backup).

3. AI Assistant (Powered by OpenAI)

Uniphy includes an AI assistant powered by OpenAI. To generate responses, the assistant reads data from within your Uniphy app (such as your habits, entries, and health metrics) and sends relevant context to OpenAI's servers as part of each request.

What this means for your data:

• Data sent to OpenAI: When you interact with the AI assistant, relevant content from Uniphy (e.g., your entries, tracking data, or health metrics that you have stored locally) may be included in the prompt sent to OpenAI in order to provide you with personalised responses.
• OpenAI's handling of your data: Uniphy uses the OpenAI API. Your data is processed by OpenAI in accordance with OpenAI's Privacy Policy, available at: https://openai.com/policies/row-privacy-policy/.
• Our role: Uniphy acts as the sender of prompts to OpenAI. We do not independently store the content of your AI conversations on our servers.
• No training by Uniphy: We do not use your data to train any AI models ourselves.

4. Optional Cloud Sync & Account

You may optionally create a Uniphy account to enable Cloud Sync. This feature allows you to back up your data, restore it, and sync it across multiple devices.

What we store:

• When Cloud Sync is enabled, your Uniphy data (entries, habits, health data, preferences, and similar app content) is uploaded to and stored in our backend database as a backup.

How we use it:

• We store your data solely for the purpose of backup and synchronisation. We do not access, analyse, read, resell, share, or use your data in any way beyond providing this storage service to you.
• Our staff do not review the contents of your data.

What we collect for your account:

• To create an account, we collect a identification ID. No other personal information is required.

Data retention:

• Your cloud data remains stored until you delete it from within the app or delete your account. Upon account deletion, all associated data is permanently removed from our servers within 30 days.

No account, no upload:

• If you never create an account or never enable Cloud Sync, no personal data is ever stored on our servers. This section does not apply to you.

5. Location & Weather Services

To provide weather widgets, the app accesses your device location.

• Your location is used only momentarily to query the weather service.
• It is not stored on our servers and we do not track your movements or build a history of your location.

6. Advertising & Usage Analytics (Google)

Uniphy uses Google services for advertising and pseudonymous usage measurement. Except for feedback that you voluntarily submit as described below, these integrations are not used by Uniphy to send your personal entries, AI conversations, memories, photos, health data, or precise location to Google for advertising or analytics.

• Google Mobile Ads (AdMob): Users without Premium access may see ads delivered through Google Mobile Ads. Google may process technical app and device information, IP address for ad delivery, and advertising identifiers or similar signals where permitted. The app requests the required advertising consent and, on iOS, App Tracking Transparency permission before allowing personalised advertising. If consent or tracking permission is not granted, Uniphy requests non-personalised ads. Non-personalised ads may still require technical processing by Google to deliver and measure ads.
• Firebase Analytics: We use Firebase Analytics to understand app usage through events such as screens viewed, features used, onboarding steps, and purchase actions. We do not attach names, email addresses, account identifiers, personal entries, AI conversation content, memories, photos, or health data to these usage events. Firebase Analytics may generate an app-instance identifier and process device, app, approximate-location, and event information so that aggregated usage statistics can be produced.
• Anonymous feedback: If you choose to submit feedback to the developers through the app, the text you enter (limited to 100 characters) is sent through Firebase Analytics with a feedback event. Uniphy does not attach your name, email address, or account identifier to this feedback. Please do not include identifying or sensitive personal information in feedback text.
• No Uniphy advertising or analytics profile: Uniphy does not use these services to identify you personally, sell your data, or build a profile from the private content you store in the app.
• Google's handling of data: Google processes data received through these services under its own terms and privacy policies. More information is available at https://policies.google.com/privacy and https://firebase.google.com/support/privacy.

7. Third-Party Services

We do not sell your data. We use third parties only when technically necessary:

• OpenAI: Powers the in-app AI assistant. See Section 3 and OpenAI's Privacy Policy at https://openai.com/policies/row-privacy-policy/ for full details on how OpenAI handles data.
• Google Mobile Ads (AdMob) and Firebase Analytics: Deliver advertising to non-Premium users and provide aggregated usage statistics as described in Section 6.
• Weather Services: To provide local weather information.
• Infrastructure Providers: We use hosting and server infrastructure to operate the Cloud Sync backend. These providers process data only on our behalf and under confidentiality obligations.

8. Legal Basis (GDPR)

In accordance with the GDPR (DSGVO), we process data based on:

• Art. 6(1)(b) GDPR: Processing necessary for the performance of the app's features (e.g., Cloud Sync, AI assistant functionality).
• Art. 6(1)(a) GDPR: Your explicit consent, where applicable (e.g., when you create an account and enable Cloud Sync, grant health data permissions, consent to advertising technologies, or permit tracking for personalised ads).
• Art. 9(2)(a) GDPR: Explicit consent for processing health data (granted when you allow permissions for Apple Health or Google Fit).

9. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict how we process your data.
• Data portability receive a copy of your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with your local data protection authority.

For local-only users: Uniphy does not hold your locally stored entries. Google may nevertheless process technical advertising or analytics data as described in Section 6.

For Cloud Sync users: To submit a formal data request, contact us at info@uniphy.world.

10. Data Security

We apply commercially reasonable technical and organisational measures to protect data stored in our Cloud Sync backend against unauthorised access, loss, or disclosure. Connections to our servers are encrypted in transit.

11. Children

Uniphy is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at info@uniphy.world and we will delete it promptly.

12. Changes to This Policy

We may update this policy as Uniphy evolves. When we make material changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this policy periodically.