nen·Labs

UnTired is published by nGen Labs (nGen), an independent software studio. Questions or requests regarding your data can be sent to privacy@ngenlabs.org.

UnTired collects the minimum data needed to operate the service:

• Account information — email address and a hashed password, or a sign-in token from Google or Apple. Used to authenticate you and associate your data with your account.
• Display name — optional. Used only to personalise the greeting inside the app.
• Daily check-in data — your logged values for sleep, caffeine, alcohol, exercise, stress, screen time, and energy. This is the core data the app exists to store and analyse.
• Experiment data — Pro plan only. Variables and outcomes you define and log yourself.
• Push notification token — if you enable reminders. Used to deliver daily check-in reminders. Not used for marketing.
• Subscription status — whether your account is on the Free or Pro plan. In-app purchases are processed by the App Store or Google Play; web subscriptions by Stripe. We store only the plan state, never payment details.

We do not collect advertising identifiers, device fingerprints, location, contacts, photos, or any data beyond what is listed above.

Your data is used exclusively to provide and improve UnTired:

• Displaying your check-in history and correlation analysis inside the app.
• Generating your insight text, daily reads, and experiment suggestions (Pro plan). All of this is computed deterministically on our servers from your own check-in data, using a fixed, science-informed rule engine. No artificial intelligence, no large language models, and no third-party model provider is involved — your check-in data is never sent to an AI service.
• Sending daily reminder notifications, if you enable them.
• Understanding which features are used, via pseudonymous product analytics, so we can improve the app (see Third-party services).
• Processing subscription payments.

We do not use your data to train AI models, build advertising profiles, or for any purpose other than operating UnTired.

UnTired uses a small number of third-party services to operate:

• Supabase — database and hosting infrastructure. Your check-in data is stored in a PostgreSQL database managed by Supabase.
• App Store & Google Play, via RevenueCat — in-app purchase and subscription management. Apple and Google process all payment card data; RevenueCat receives the resulting purchase receipt to keep your Pro status in sync. We never see or store your card details.
• Stripe — payment processing for web and legacy subscriptions only. Stripe handles all payment card data. We do not see or store your card number, expiry, or CVC.
• PostHog — privacy-respecting product analytics, hosted in the EU. Receives pseudonymous usage events (your account ID plus event names such as "check-in completed") so we can see which features are used and where to improve. No check-in values, email address, or name are sent. Used for product improvement only — never advertising.
• Expo / Apple / Google — push notification delivery. Your push token is stored on our server and used to route reminders through Apple APNs or Google FCM.

We do not use third-party advertising, attribution, or ad-tracking SDKs. No data is sold to or shared with data brokers.

Your data is retained for as long as your account is active. If you delete your account, all associated data — check-ins, experiments, insight records, and your push token — is permanently deleted from our servers.

Stripe retains billing records independently in accordance with their own retention obligations.

You have the following controls over your data from within the app:

• Export — download all your check-in history as a CSV file at any time from the Settings screen (Pro plan).
• Delete account — permanently delete your account and all associated data from the Settings screen.
• Notifications — enable or disable push reminders at any time from Settings or your device's notification preferences.

To request access to, correction of, or erasure of your data by email, contact privacy@ngenlabs.org.

Passwords are hashed using PBKDF2 before storage. All data is transmitted over HTTPS. Access to production data is restricted to authorised personnel.

UnTired is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us at privacy@ngenlabs.org and we will delete the account promptly.

If we make material changes to this policy, we will update the effective date above and notify you via the app or by email. Continued use of UnTired after changes are posted constitutes acceptance of the revised policy.