Privacy Policy

01Scope of this policy

This Privacy Policy applies to the Uniffy mobile app and to the hosted service we operate at cloud.uniffy.io, together with this website. It does not apply to self-hosted deployments that another operator runs on their own infrastructure. In that case the operator decides how data is handled. See self-hosted deployments below.

02Who is responsible for your data

For the hosted service and the app, Uniffy Labs is the data controller. You can reach us about privacy at support@uniffy.io. When your organization runs its own Uniffy workspace on our hosted service, your organization is the controller of the content in that workspace, and we act as a processor on its behalf.

03Information we collect

We collect the following, and no more than we need:

• Account data. Your name, email address, and the credentials you use to sign in.
• Your content. The notes, files, messages, tasks, events, and other content you create, upload, or share in the Service.
• Usage and device data. Basic technical information needed to run and secure the Service, such as app version, device type and operating system, IP address, and diagnostic logs.
• Support and communications. Messages you send us, such as bug reports, feedback, and support requests.
• Cloud waitlist. If you leave your email address on our cloud page, we store it with Cloudflare, the provider that hosts this website, in an EU region. It exists for one purpose: a single announcement when the hosted service opens. Nothing else is ever sent to it.

We do not collect advertising identifiers, and the app does not include third-party advertising or analytics trackers.

04How we use your information

• to provide, maintain, and secure the Service and your account;
• to sync your content across your devices and deliver notifications you have enabled;
• to diagnose problems, prevent abuse, and keep the Service reliable and safe;
• to respond to your support requests and, during the beta, to improve the Service;
• to meet legal obligations and enforce our Terms of Service.

05Legal bases (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you to provide the Service; our legitimate interests in keeping the Service secure, reliable, and improving during the beta; your consent where we ask for it, such as for push notifications or device permissions; and compliance with legal obligations. You can withdraw consent at any time.

06AI features and your prompts

When you use an AI assistant, the content you send is processed to generate a response by the model provider you choose or by a self-hosted model. We do not use your content or prompts to train AI models. If you route a request to a third-party model provider, that provider processes the request under its own terms, so choose providers you trust for sensitive content.

07Mobile app permissions

The Uniffy app asks for device permissions only when a feature needs them, and you can decline or change them in your device settings. These include:

• Camera and microphone, for calls, screen or media capture, and attaching photos you take;
• Photos and files, so you can upload and attach content;
• Notifications, so we can deliver the push notifications you enable;
• Network access, which the app needs to reach the Service.

The app does not collect your location, your contacts, or advertising identifiers. Push notifications are delivered through Apple Push Notification service on iOS and Firebase Cloud Messaging on Android, which handle delivery on our behalf.

08How we share information

We do not sell your personal data. We share it only in these limited cases:

• With people you choose. Content is visible to the users, groups, and organizations you share it with, according to the permissions you set.
• With service providers. Vetted providers that help us run the Service, such as cloud hosting, email delivery, push notification delivery, and AI model providers you route requests to. They process data on our instructions.
• For legal reasons. When required by law or to protect the rights, safety, and security of our users, the public, or Uniffy Labs.
• In a business transfer. If Uniffy Labs is involved in a merger, acquisition, or sale of assets, with notice to you and continued protection of your data.

09Where your data is stored

We store data for the hosted service in the European Union by default. If any processing takes place outside the European Economic Area, for example with a provider you choose, we use appropriate safeguards such as Standard Contractual Clauses where required by law.

10How long we keep it

We keep your account data and content for as long as your account is active. When you delete content or your account, we delete it or anonymize it within a reasonable period, except where we must keep certain records to meet legal obligations, resolve disputes, or enforce our agreements. Backups are cycled out on a rolling schedule. The cloud waitlist is deleted after the launch announcement is sent; write to us any time before that and we will remove you immediately.

11How we protect your data

We use technical and organizational measures to protect your data, including encryption in transit, encryption of sensitive data at rest with keys scoped to your organization, and access controls that limit who can reach your content. Operators of our hosted service do not have a routine backdoor to your content; access to tenant content requires a time-bound, audit-logged support session that your organization can see and revoke. No system is perfectly secure, and the beta may have weaknesses we have not yet found.

12Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. To exercise a right, write to support@uniffy.io. If your data sits in an organization's workspace, we may direct your request to that organization as the controller. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

13Children

The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us at support@uniffy.io and we will delete it.

14Cookies and this website

This marketing website uses only the cookies and local storage strictly needed to make it work. We do not use advertising cookies or third-party tracking cookies on it.

15Self-hosted deployments

Uniffy can be run as self-hosted software. If you use a Uniffy workspace that your own organization or a third party runs on their infrastructure, that operator controls the data and is responsible for its own privacy practices. This policy does not apply to those deployments. The software is designed to run fully isolated from the internet. It has no phone home and no telemetry endpoint. A self-hosted deployment never contacts us.

16Changes to this policy

We may update this policy as the Service evolves. If we make a material change, we will post the updated policy here with a new effective date and, where appropriate, notify you in the app.

17Contact

For any privacy question or request, write to us at support@uniffy.io, or by post to Uniffy Labs