Privacy Policy

This policy explains what Untangled collects, why, where it's kept and for how long. The short version: we can't read your vault, marketing is optional, and vaults delete themselves after 90 days. Untangled is provided by JYNE Labs, the Netherlands. It works alongside our Terms of Use.

Data we collect when you sign up

• Your email address, first name and last name.
• The date and version of the terms you accepted.
• Whether you opted in to marketing emails.

Data in your vault

Your vault is encrypted on your device before it's uploaded, using AES-class XSalsa20-Poly1305 encryption. Your keys never leave your devices. We only store the encrypted version (ciphertext), and we can't read it.

Emails we send

We use Resend to send your six-digit sign-in code and other essential account messages. These are not marketing.

Marketing

Only if you tick the optional checkbox. We'll use your email to send updates and offers, and you can turn this off at any time in Your profile in the app, or unsubscribe from any email.

AI features

When you use the AI tidy-up during setup, or ask the Vault Assistant a question, your phone decrypts the relevant notes and sends them, with your question, through our servers to our AI provider, Anthropic. This happens only for the moment an answer is generated. We don't store or log the content of your notes or questions.

Notifications

If you allow notifications, we store your phone's push token with your account so we can tell you when the other person shares something. Notifications are relayed through Expo and Apple and only ever say “New items in your handover.”, never what was written. You can turn them off in Privacy & data in the app. The token is deleted when you delete your account.

Reports

If you report an item or an answer from the Vault Assistant, your phone sends us a readable copy of just that item or answer, together with your reason. The rest of your vault stays end-to-end encrypted and is never sent. The report is linked to your account and the vault, and only JYNE Labs can read it. We use reports to review abuse and, if a report is upheld, to remove the item for both people. Legal basis: our legitimate interest in keeping Untangled safe (GDPR Art. 6(1)(f)).

How long we keep things

• Vaults are deleted 90 days after they're created.
• Accounts are deleted when you delete them, or when your vault is deleted — unless you opted in to marketing.
• Marketing data is deleted when you withdraw consent.
• Reports are deleted 30 days after we've decided on them.
• Push tokens are deleted when you delete your account.

Where your data lives

Your account and your encrypted vault are stored with Supabase in the EU (Ireland, eu-west-1). Some of our sub-processors below are based outside the EU; each transfer is covered by the safeguard listed next to it.

Sub-processors

• Supabase — hosting, EU.
• Anthropic — AI processing, under a data processing agreement with EU transfer safeguards. Content is processed transiently: never stored, never used for training.
• Resend — sends sign-in codes and account emails. US-based, certified under the EU-US Data Privacy Framework.
• Expo — relays push notifications to Apple. US-based, under a data processing agreement with EU transfer safeguards. Notification text never includes your vault content.
• Apple — app distribution.

Your rights under GDPR

• Access — see the account details we hold in Your profile in the app (Privacy & data → Your profile), where you can also copy them; export your vault from the app; or email us.
• Correction — change your name in Your profile in the app. To change your email address, email us.
• Deletion — delete your account in the app at any time.
• Portability — export your vault from the app.
• Objection — email us if you object to how we use your data.
• Withdrawing consent — turn off Updates from Untangled in Your profile, use the unsubscribe link in any email, or contact us.

You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Untangled isn't intended for anyone under 18.

Changes to this policy

If we change this policy in a meaningful way, we'll let you know.

Contact us

Email support@tryuntangled.com or visit our Support page.