Privacy, in plain words.

Unclench is a private evening practice. We collect the minimum needed to run the app, never sell your data, and give you two clear modes:

• Guest mode. Everything you write stays on your device. Nothing is sent to any server.
• Email mode. Your name, email and reflections are stored on our servers so you can sign in from any device.

Guest users: nothing. No account, no analytics, no server-side storage of any kind. Your reflections live only in your browser's localStorage.

Email users:

• Your email address (used only to log you in).
• The name you chose to be called.
• A one-way bcrypt hash of your password — the plain password is never stored or logged.
• Your reflections and triggered-moment notes.
• Login session tokens (expire after 7 days).

No analytics, no tracking pixels, no third-party trackers, no advertising IDs. We don't build a profile of you. We don't sell anything to anyone.

Unclench offers a one-time lifetime unlock (A$4.99). Payments are handled entirely by Stripe, Inc. — a PCI-DSS Level 1 certified processor. Your card number, CVC, and billing address are sent directly to Stripe and never touch our servers.

What we do store about a completed purchase:

• Your Stripe session_id and payment status.
• The amount and currency of the transaction (e.g. A$4.99 AUD).
• The user account (email + user_id) that redeemed it.
• Timestamp and whether lifetime access has been granted.

Stripe's own privacy notice governs their handling of your card and billing data.

When you redeem a promo code, we store the code string, your user_id + email, and the redemption timestamp so we can (a) prevent double-redemption of single-use codes and (b) prove entitlement if there's ever a dispute. No promotional or marketing data is collected.

In transit: every request between your browser and our backend goes over HTTPS (TLS 1.2+).

At rest: data is stored in a MongoDB database whose disk volume is encrypted at the cloud-provider level (AES-256). The text of every reflection and triggered-moment entry is additionally encrypted with AES-256-GCM before being written to the database.

For maximum privacy — where nothing leaves your device — use guest mode.

Passwords: only a bcrypt hash is stored. We can never see or recover your password; if you forget it, we can only reset it.

Milestone letters (at 30, 60, 90, 180, and 365 reflections) are woven entirely on your device from your own writing, using static templates. No AI generates them, and no external service is contacted when the letter is composed. You can opt out at any time on the letter page.

The following features run entirely on your device and never send anything to a server:

• Journal search — filters your entries in the browser.
• PDF export — assembles your journal into a PDF using client-side JavaScript; the file goes straight from your browser to your downloads.
• Quiet badges — computed locally from your existing data.
• Rediscover card — surfaces an old entry from your own device.
• Focus mode and the letter opt-out preference — saved in browser localStorage.
• Haptic feedback on the breathing orb — uses your device's vibration API, no data is transmitted.
• Offline shell — the app is installable as a PWA. In guest mode everything works fully offline. In email mode, previously-loaded entries stay readable when the connection drops.

Unclench exposes a public read-only endpoint /api/widget/today that returns a gentle prompt of the day (the same prompt for every user; no personal data). It exists so a future iOS home-screen widget can display a daily prompt without requiring a login.

You can, at any time:

• Delete a reflection from its detail page.
• Sign out to end your session. Guest sign-out keeps your entries on this device.
• Ask us to permanently delete your email account and all associated reflections — either from the Settings page (Delete account button) or by emailing the address below.
• Export your data — download the complete journal as a PDF (guest & email modes) or as a plain-text letter at 30 evenings. Both are assembled entirely on your device.

Unclench is not designed for use by anyone under 16.

If we materially change this policy, we'll update the date above and notify signed-in users on next login.

For any privacy question or a deletion request, write to hello@unclench.io.