what happens to your words.

what we collect

if you use the free inbox without an account, your words live only in your browser on your device. we don't receive them, except for the one moment described below when a reply is generated.

if you create an account or pay, we hold:

• your email address, used only to sign you in with a one-tap magic link and to match your membership. no password is ever stored, because there isn't one.
• the messages you write and the replies that come back, when you choose to keep them and you have an account that syncs.
• your streak, check-ins and the few lines of context you give at the start (your situation, what's hardest, your goal).

we do not collect your name unless you type one, and we don't buy data about you from anywhere else.

where it lives

your account data is stored with Supabase, on servers in the United States. your kept messages are encrypted at rest before they touch the database, using AES-256.

honesty matters more than a nicer-sounding claim here: this is notend-to-end encryption, and it is not on-device-only once you have an account. the encryption key is held by us, the operator, so that your vault can sync between your devices. that means we technically could decrypt your entries. we don't, and no human here reads them, but you deserve to know the shape of the trust you're giving, not a marketing version of it.

the ai, and who reads your words

when you write a message and ask for a reply, that message is sent to Anthropic's Claude to generate the response, and only for that. it is not used to train a model, it is not stored by us for any other purpose, and no human at unsend sits and reads your messages.

there is one automated exception, and it exists to protect you: the app scans for signs of crisis so it can surface real help lines. that check is automatic. it is not a person reading over your shoulder.

deleting everything

you can wipe everything, any time. the "delete everything" control in the app erases your vault, your streak and your profile from your device, and when your account is linked it also deletes those rows from our server. it is permanent and there is no undo. the only thing that stays is an anonymous marker for messages you already chose to burn, so a burned message can never come back on another device.

if you'd rather we handle it, email unsend@dyzr.io and we'll delete your account data ourselves.

what we never do

we do not sell your data. we do not share it with advertisers. we do not build a profile of you to target you. the only outside party your words ever reach is the ai that writes your reply. payments run through Stripe, and we never see your full card details.

who runs this

unsend is operated by DYZR, an independent studio based in Australia. for anything about your privacy or your data, email unsend@dyzr.io.