Privacy Policy
Effective date: July 20, 2026
Unsaid is a private journal for honest reflection. It was designed around one principle: your thoughts belong to you, and to no one else — including us.
This policy explains what data Unsaid handles and what never leaves your device. It is intentionally short, because there is very little to explain.
The short version
We do not collect, store, transmit, sell, or share any of your data. We have no servers. Your journal never leaves your device.
What data Unsaid handles
Your journal entries
Everything you write or select in Unsaid — your answers, the people involved, your reasons, your feelings, and your written reflections — is stored only on your device, inside the app's private storage area that no other app can access.
- Written text is encrypted at rest using AES-GCM (Apple's CryptoKit), with an encryption key generated on your device and stored in the iOS Keychain. The key never leaves your device and does not sync to iCloud.
- The app works fully offline. You can use it in Airplane Mode.
- You can delete any entry, or all entries, at any time from within the app. Deletion is immediate and permanent.
- The optional "Export Data" feature creates a plain-text file of your entries only when you request it, and hands it to the iOS share sheet. Where that file goes is entirely your choice; the app does not send it anywhere.
Face ID
If you enable the app lock, unlocking is handled entirely by iOS. Unsaid only receives a "success or failure" result. The app never has access to your biometric data — that information stays in your device's Secure Enclave, by Apple's design.
Purchases
The optional lifetime unlock is processed by Apple through the App Store using your Apple Account. We do not receive your name, email address, payment details, or any other personal information from Apple. Purchase records are managed by Apple and can be restored on any device signed in with the same Apple Account.
What we don't do
- No account or registration — the app never asks who you are.
- No analytics, tracking, or advertising SDKs of any kind.
- No crash reporting services that transmit data.
- No network requests to our servers — we don't have servers.
- No access to your contacts, location, camera, microphone, or photos. The app never requests these permissions.
Data retention
Your data exists in exactly one place: your device. If you delete the app, iOS deletes all of its data, including your journal and the encryption key. We cannot recover it — nobody can. If you want to keep your entries before deleting the app or switching devices, use "Export Data" in Settings first.
Children's privacy
Unsaid does not collect personal information from anyone, including children.
Changes to this policy
If this policy ever changes, the updated version will be posted at this address with a new effective date. Because the app has no way to contact you (by design), we encourage you to review this page occasionally.
Contact
If you have any questions about this policy, contact us via the Support page.