Privacy Policy

Last updated June 24, 2026

This Privacy Policy explains how Unpack (“Unpack,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Unpack mobile application for iOS (the “App”) and our website at unpackai.app (together with the App, the “Services”). Unpack is an AI voice companion: you tap Talk, speak out loud, and a warm AI listener reflects back so you can feel heard.

Unpack is a general-wellness product. It is not therapy, medical care, diagnosis, treatment, or a crisis service, and it does not create or maintain medical records. We designed Unpack to be anonymous and to collect as little information as reasonably possible. By using the Services, you agree to the practices described in this Policy.

Anonymous by design. Unpack does not require an account, and we do not ask for your name, email address, or phone number to use the App. We do not try to learn who you are.

1. Introduction and Scope

This Policy applies to information we process when you use the App, visit our website, or contact us for support. It does not apply to third-party products, services, or websites that we do not own or control, including the Apple App Store and the practices of the independent service providers described below, each of which is governed by its own privacy policy.

The Services are intended for adults who are 17 years of age or older and are offered in the United States. The Services are not directed to children under 17. See the section titled “Children” below.

2. Information We Collect

Because Unpack is anonymous, much of what we process is not reasonably linkable to your real identity. We collect and process the following categories of information.

Voice and conversation content

When you tap Talk and speak, the App captures your spoken audio so it can respond to you. Your audio is converted to text (speech-to-text), the text is sent to a large language model that generates a reply, and the reply is converted back into spoken audio (text-to-speech). This processing is performed in real time with the help of the third-party AI and voice service providers described in the “Service Providers and Subprocessors” section. Your conversation content may include whatever you choose to say out loud, so please be thoughtful about what you share. We do not require you to provide identifying details in order to use the App, and we encourage you not to do so.

Usage, device, and diagnostic information

To keep the App reliable and to understand how it is used in aggregate, we and our analytics and diagnostics providers may collect technical information such as device type and model, operating system version, app version, language and general region settings, coarse usage and feature-interaction events, performance metrics, and crash and error logs. This information is generally device or event level and is not used by us to identify you personally.

Safety events

Unpack includes a crisis-detection safety layer that is designed to recognize when you may be in distress and to surface supportive resources. When this layer activates, we may record a minimal, privacy-preserving safety event - for example, a timestamp, a severity tier, the type of response that was shown, and that crisis resources were displayed. The purpose of these records is to confirm that our safeguards function as intended and to allow internal and, if ever requested, regulatory review of our process. We aim to avoid storing the underlying sensitive content of a conversation as part of a safety event wherever we reasonably can.

Support communications

If you email us at support@unpackai.app or otherwise contact us, we will receive your email address and the contents of your message, along with any information you choose to include. We use this information solely to respond to you and to handle your request.

Website and cookies

When you visit unpackai.app, our hosting and website-analytics providers may automatically collect standard server and usage information such as your IP address, browser type, pages viewed, and referring pages, and may use cookies or similar technologies. See the “Cookies and Website Analytics” section for details and choices.

3. How We Use Information

To provide the listening experience and generate responses to what you say.
To operate, maintain, secure, and improve the Services and keep them reliable.
To detect, prevent, investigate, and address fraud, abuse, security incidents, and other harmful or unlawful activity.
To operate our crisis-detection safety layer and to surface supportive resources.
To analyze usage in aggregate so we can understand and improve how the App performs.
To respond to your support requests and communicate with you about the Services.
To comply with applicable laws and to enforce our Terms.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your conversations to advertise to you.

4. Legal Bases for Processing (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the EU General Data Protection Regulation and the UK GDPR.

Performance of a contract. To provide the Services you request, including processing your voice and conversation content so the App can respond to you.
Legitimate interests. To keep the Services secure and reliable, to understand usage in aggregate, to improve our product, and to operate our safety layer, in each case where those interests are not overridden by your rights and freedoms.
Legal obligation. To comply with applicable laws and respond to lawful requests.
Consent. Where required, for example for certain cookies or optional processing. You may withdraw consent at any time without affecting processing carried out before withdrawal.
Vital interests. In limited circumstances, to protect someone's life or safety, such as in connection with our crisis-safety resources.

5. Service Providers and Subprocessors

We rely on a limited set of trusted third parties that process information on our behalf and under our instructions in order to deliver the Services. These providers act as our processors or subprocessors and are bound by contractual obligations to protect information and to use it only to perform services for us. They include, among others:

Speech and voice processing (for example, Deepgram) for speech-to-text and related voice processing.
Large language model providers (for example, Anthropic) to generate the listener's responses.
Text-to-speech providers to convert responses back into spoken audio.
Cloud hosting and infrastructure providers that store and transmit data needed to run the Services.
Analytics and crash-diagnostics providers that help us measure performance and stability.

The specific providers we use may change over time as we improve the Services. We select providers that we believe maintain appropriate security and privacy practices, and we limit what we share to what is needed to perform the relevant function.

6. No Sale or Sharing of Personal Information

We do not sell your personal information, and we have not sold personal information in the preceding 12 months, as “sell” is defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act. We also do not “share” your personal information for cross-context behavioral advertising, and we do not use your conversation content for advertising or to build advertising profiles. Disclosures to the service providers described above are made only so they can perform services for us and are not sales or shares under applicable law.

7. Data Retention

We keep information only for as long as reasonably necessary to provide the Services, to operate and improve them, to meet the purposes described in this Policy, and to comply with legal obligations, after which we delete it or de-identify it. Voice and conversation content is processed to generate responses, and we aim to minimize what is stored and to keep any retention short. Safety events are retained in minimized, privacy-preserving form for as long as needed to verify that our safeguards operate correctly and to support internal or regulatory review. Diagnostic and aggregate analytics information is retained for limited periods consistent with maintaining and improving the Services. Because Unpack is anonymous, much of the information we hold is not reasonably linkable to an identifiable person.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest where appropriate, access controls, and limits on who may access data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You can help protect your privacy by being mindful of what you choose to say out loud while using the App.

9. International Data Transfers

We are based in the United States, and our service providers may process information in the United States and in other countries. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and elsewhere, where data-protection laws may differ from those in your country. Where required for transfers of personal data from the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

10. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. Because Unpack is anonymous and does not require an account, in many cases we may not hold information that is reasonably linkable to you, and we may be unable to associate a request with any particular individual or to verify your identity. Where we cannot reasonably link information to you, certain rights may not apply.

California residents (CCPA and CPRA)

If you are a California resident, you may have the right to:

Know and access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom it is disclosed.
Request deletion of personal information we have collected, subject to legal exceptions.
Request correction of inaccurate personal information.
Opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of.
Limit the use of sensitive personal information. We do not use sensitive personal information for purposes that trigger this right.
Not be discriminated against for exercising your privacy rights.

EEA and UK residents (GDPR)

If you are in the EEA or the UK, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data.
Restrict or object to certain processing, including processing based on legitimate interests.
Request data portability for data you provided to us.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection authority.

How to exercise your rights

To make a request, email us at support@unpackai.app. We will respond consistent with applicable law. Because the App is anonymous, we may ask you for information needed to locate any data associated with your use, and we may be unable to fulfill a request if we cannot reasonably verify it or link information to you. You may use an authorized agent to submit a request where the law permits, subject to verification. We will not discriminate against you for exercising your rights.

11. Children

The Services are intended for adults 17 years of age and older and are not directed to children under 17. We do not knowingly collect personal information from children under 17. If you believe a child under 17 has provided us with personal information, please contact us at support@unpackai.app so we can take appropriate steps.

12. Third-Party Services and Links

The Services may rely on or link to third-party services, including the Apple App Store and the service providers described above, and may surface external crisis resources such as the 988 Suicide & Crisis Lifeline, the Crisis Text Line (text HOME to 741741), and 911 for emergencies. We do not control these third parties, and their handling of your information is governed by their own privacy policies. We encourage you to review those policies. The availability of external resources within the App does not mean Unpack provides medical care or crisis services.

13. Cookies and Website Analytics

Our website may use cookies and similar technologies for essential functionality and for basic, privacy-conscious analytics that help us understand site usage. The mobile App itself does not rely on website cookies. You can control cookies through your browser settings, including by blocking or deleting them, although some site features may not function properly if you do. Where required by law, we will obtain your consent before using non-essential cookies.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Services after an update takes effect means you accept the revised Policy.

15. Contact Us

If you have questions or requests regarding this Policy or your information, please contact us at support@unpackai.app. You can also review our Terms.