Unpause Privacy Policy

1. Who we are

Unpause is a menopause wellness app operated by Unpause LLC, 1801 16th Street NW, Suite 706, Washington, DC 20009 ("Unpause", "we", "us"). This policy covers the Unpause mobile apps and the unpause.ai website. Questions: privacy@unpause.ai.

2. What Unpause is, and is not

Unpause is a general wellness app that helps you track and understand your sleep, mood and menopause-related symptoms, read educational content, and set reminders. It is not a medical device. It does not diagnose, treat or prevent any condition and does not provide medical advice. It does not replace care from a qualified professional. In an emergency, call your local emergency number. In a mental-health crisis, the app may suggest resources such as 988 in the US; these are referrals to outside services, not a service we provide.

3. Information we collect

We collect only what we need to run the features you use.

Some wellness data is sensitive and may be "consumer health data" or "sensitive personal information" under law. We collect it only with your consent and use it only to provide the features you ask for. We do not collect clinical questionnaires, prescription or treatment records, or scored clinical assessments. We do not knowingly collect data from anyone under 18.

4. How we use your information

• To provide and personalize Unpause: journaling, insights, the assistant, reminders, content, points and the optional leaderboard.
• To detect a possible crisis in what you write and offer referral resources.
• To keep Unpause secure, prevent abuse and fix problems.
• To communicate with you about your account and the service.
• To improve Unpause, using aggregated or de-identified data wherever possible.
• To comply with law and enforce our Terms.

We do not sell your personal information, share it for cross-context behavioral advertising, use it to show you ads, or use your health data to make decisions that produce legal or similarly significant effects about you.

5. Legal bases (EU, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on performance of our contract with you (to run the app), our legitimate interests (security, service improvement), and consent. For health-related data we rely on your explicit consent, which you can withdraw at any time in the app without affecting processing that already took place.

6. AI processing

Unpause uses third-party AI providers for its intelligent features:

• Google Gemini writes the assistant's replies. Your message is combined with relevant passages from Unpause's own curated knowledge base, never other users' data, and sent to Google to generate a grounded answer.
• Mistral and OpenAI convert text into numerical representations ("embeddings") so the app can find relevant content for you.

We use these providers under paid API terms that prohibit them from using your data to train their models, and they retain data only as needed to provide the service and for limited abuse monitoring under their terms.

AI output can be wrong or incomplete. It is general wellness information, not professional advice. The assistant is not a person and does not make decisions about you.

7. How we share information

We share personal information only as described here:

• Service providers that process data on our behalf under written data processing agreements: Amazon Web Services (hosting, United States), Prisma Data, Inc. (database), Google (Gemini assistant and email delivery), Mistral and OpenAI (embeddings).
• Our affiliate Healplace [confirm legal entity name], whose team builds, operates and supports Unpause under a services agreement with us and the same confidentiality and security obligations.
• Other users, only if you choose. If you join the leaderboard, other users see your username, avatar or photo, and point total. They never see your real name, email or anything you log.
• Legal and safety. When required by law or valid legal process, or when needed to protect someone's life or safety, our users, or our rights.
• Business transfers. If Unpause is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner, who must honor this policy. We will notify you before your data becomes subject to a different policy.

A current list of service providers is available on request at privacy@unpause.ai.

8. Cookies and similar technologies

The unpause.ai website uses cookies that are necessary for it to work, such as keeping you signed in. It may also use privacy-respecting analytics to understand site traffic in aggregate. We do not use advertising cookies, tracking pixels or cross-site tracking, and the mobile apps do not include advertising SDKs. You can control cookies in your browser settings.

9. International transfers

Your information is stored and processed in the United States. It may be accessed by our affiliate's engineering team in Sri Lanka and by service providers in other countries. When we transfer personal data from the EU, UK or Switzerland, we use the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant). Access from any country is limited to what the role requires, protected by role-based access controls and audit logging, and governed by written confidentiality and data protection obligations.

10. Your rights and choices

Available to everyone, wherever you live: download a copy of your data in the app; correct your profile; withdraw consent; and delete your account and all associated data in the app.

Depending on where you live, you also have these rights:

• EU, UK, EEA and Switzerland: access, rectification, erasure, portability, restriction and objection, and the right to complain to your data protection authority.
• United States: the rights to know, access, correct, delete and port your information, and to opt out of sale, sharing, targeted advertising and profiling. We do not do any of those things, but we honor the request anyway. We extend these rights to all US users, not only residents of states with privacy laws.
• Consumer health data: see our Consumer Health Data Privacy Policy at unpause.ai/health-data.
• Sri Lanka: the rights provided by the Personal Data Protection Act, No. 9 of 2022, including access, correction, erasure and withdrawal of consent.

How to make a request. Use the in-app tools, or email privacy@unpause.ai. We will verify your identity by confirming the request through the email on your account, and respond within 45 days (extendable once by 45 days where the law allows, with notice). You may use an authorized agent; we will ask for proof of the agent's authority and may ask you to confirm your identity directly. We will not discriminate against you for exercising any right.

Appeals. If we decline your request, you may appeal by emailing privacy@unpause.ai with "Appeal" in the subject. We will respond within 45 days, explain our decision, and tell you how to contact your state attorney general if you disagree.

Global Privacy Control. We treat a GPC signal from your browser as a valid opt-out request.

11. Data retention

We keep your information while your account is active. When you delete your account, we delete your personal data from our active systems within 30 days and from backups within 90 days. We keep only what the law requires (for example, a record that a deletion request was fulfilled) and aggregated or de-identified data that can no longer identify you. Guest data is deleted when the guest session is cleared.

12. Security and breach notification

We protect your data with encryption in transit and at rest, role-based access controls, audit logging and regularly reviewed infrastructure. No system is perfectly secure. If a breach affects your information, we will notify you and the appropriate authorities as required by law, including under the FTC Health Breach Notification Rule and the GDPR.

13. Children

Unpause is for adults 18 and older and is not directed to children. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

14. Changes to this policy

We will post updates here with a new date. For material changes, we will notify you in the app or by email before they take effect, and we will ask for your consent again where the law requires it.

15. Contact

Unpause LLC · 1801 16th Street NW, Suite 706, Washington, DC 20009 · privacy@unpause.ai