Who is responsible
Unrotten is provided by NORTH VENTURES LLC. In this policy, ‘we’ means NORTH VENTURES LLC, the controller responsible for deciding how Unrotten processes personal data. This policy covers the iOS app and the services that support it.
Postal address:
NORTH VENTURES LLC
300 Delaware Ave
Ste 210 #260
Wilmington, DE 19801
United States
Contact support@unrotten.app, or use Settings → Privacy → Your data → Request access or deletion.
Your profile and activity
Unrotten saves your chosen name, language, app preferences, goals, schedules, usage summaries, session estimates, scores, check-ins and progress on your device. Apple’s Screen Time frameworks provide privacy-protected app, category and website selections and activity signals. We use these to track the apps you select, apply your rules and show your progress. We do not read the content inside your other apps or your browsing pages. Screen Time selections are not a list of readable app names sent to our service. Earlier versions may have stored an Apple sign-in identifier and email locally; you can remove them in Settings → Privacy → Your data.
Apple Health
Health access is optional and controlled by Apple’s permission system. Depending on the categories you allow and records available, Unrotten reads steps, workouts and their timing, energy, exercise and move minutes, distances, flights climbed, mindful minutes, sleep stages and timing, heart rate and related metrics (including resting and walking heart rate, heart-rate variability, cardiorespiratory fitness and respiratory rate). We use this information for goals, activity and sleep summaries, and MindBattery™ recovery. With write permission, completed breathing sessions can be saved as mindful minutes, and the nights and workouts you log by hand as sleep and workouts. We do not write invented health measurements. Health information is not sold, used for advertising or used for data brokerage. With your separate AI data-sharing permission, available health context may be sent to our AI service providers to support your requested wellbeing features. Health permission alone does not enable AI sharing.
Personalized AI and voice
Your AI Coach is included as a standard part of Unrotten, with no Coach on/off setting. During onboarding, a short Coach step asks for your explicit permission to share personal data with third-party AI. Existing users who have not granted it see the same short choice before their first request. Choosing “Allow & continue” grants this permission; simply viewing the step, accepting the Terms or choosing “Not now” does not. You do not need to grant it again for each conversation. Coach replies, Home messages and AI Insights send relevant app context to Unrotten’s service: usage and session summaries, goals, scores, settings, available health context, language and an installation identifier. A chat request also includes your message, recent conversation and saved memories. If you record a voice note, its audio is sent for transcription; the resulting text is used in the conversation. Do not put passwords, payment details or other information you do not want processed into messages. You can review or withdraw data-sharing permission in Settings → Privacy → AI personalization. Withdrawal stops new requests containing personal data but cannot recall data already processed. Your existing chats and local features remain available.
Community comparisons
To show the level distribution, the app sends its installation reference, level-policy version, confirmed level (when available) and number of qualifying days to our service. The service stores a hashed participant reference with the level and update time, and returns aggregate percentages rather than individual records. Only recently updated records contribute to the distribution, and percentages are hidden when fewer than ten participants qualify. This feature does not use an AI model and works independently of the personalized AI permission. You can request access to or deletion of related service records using the privacy contact form.
Service providers and delivery
Cloudflare hosts our backend and its operational storage. OpenRouter routes AI and transcription requests to the model providers serving each request; those providers can change. These services receive the data needed to process the feature. Apple processes system permissions, Health access, notifications and Live Activities. Our Live Activity service uses push tokens, an installation reference, display preferences, score and usage/recovery state to keep the display current. Our servers also process request metadata, such as timestamps, outcomes, latency, usage and cost counters, and may retain AI memory/response evaluation metadata for service operation and troubleshooting. Network providers may process IP addresses and security logs. We do not use advertising trackers or sell personal data. Providers must protect personal data consistently with this policy and applicable law; their separate privacy terms also apply to their services.
Support and feedback
When you contact us, we receive your message, email address and any files you choose to send. Feature ideas and improvement suggestions are treated as support correspondence. A diagnostic attachment is required for “Something isn’t working” and optional for other topics. It contains a system and app snapshot: versions, model, locale and time zone, permissions, tracking and blocking configuration, recorded rot minutes and MindBattery™. It excludes readable app names, chat content, saved memories, Health measurements and access tokens. You can review the exact attachment first. Privacy requests include the installation reference so we can locate relevant service records. The form sends your message through Cloudflare from an Unrotten address to our support inbox, with your email as the reply-to address. We use correspondence to reply, troubleshoot, improve the app and handle rights requests, not to subscribe you to marketing.
How long information stays
Local history and preferences remain until removed. Unpinned chats are cleaned up after 24 hours of inactivity when the app performs its chat cleanup; pinned chats remain until deleted, with a maximum of 300 persisted messages per chat. Saved memories remain until removed. The optional recovery backup stores history and key settings in this device’s protected, non-synchronizing Keychain and can survive an app reinstall. Turn it off in Settings → Privacy → Your data to remove that copy. System device backups, if enabled by you, are managed by Apple. Server delivery records expire according to their operational purpose; AI usage/evaluation records and support correspondence are retained as needed to operate and secure the service, resolve the request, investigate disputes and meet legal obligations. We do not promise that deleting an on-device chat also deletes previously processed service records. Request service deletion through the in-app privacy contact form; legally required records may be retained with restricted use.
Your choices and legal bases
Where data-protection law requires a legal basis, we rely on consent for Health access, microphone access and sharing personal data with AI providers; performance of the service you request for core features and support; legitimate interests for proportionate security and reliability; and legal obligations where applicable. For health data where special-category rules apply, optional sharing relies on your explicit consent. You can withdraw Health or microphone permissions in iOS or Apple Health, and AI data-sharing permission in Settings → Privacy → AI personalization. Withdrawal affects future processing and does not make earlier lawful processing unlawful. Some features need their related permission to work, but declining optional permissions does not prevent you from using unrelated features.
Access, deletion and other rights
Depending on where you live, you may request access, correction, deletion, a portable copy, restriction or objection to processing, and withdraw consent. Use Settings → Privacy → Your data → Request access or deletion or email support@unrotten.app. We may ask for proportionate verification to protect your information and will respond within applicable legal deadlines. You may complain to your local data-protection authority and will not be penalized for exercising your rights. To remove this device’s app data, disable and remove the recovery backup, then delete Unrotten. Health records remain in Apple Health and can be managed there. Online service records require a separate request.
Security and international processing
We use protected platform storage, encrypted transport and access controls. No storage or transmission is perfectly secure. Our providers may process data in countries other than yours. Where required, transfers must use an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about safeguards relevant to your request. Avoid sharing unnecessary sensitive information in support messages or chats.
Young users and policy updates
Unrotten is a personal wellbeing tool, not a children’s service. It is not intended for children under 13 or below the age at which they can lawfully consent to relevant processing in their country. A parent or guardian should contact us if a child has provided personal information without required permission. We may update this policy as the app or law changes. The revision date appears above; material new uses of optional data require a renewed choice where required. This policy does not remove mandatory rights under local law.