👋 Introduction
Unsaid ("we", "our", or "the app") is a personal journal and emotional wellness application built for Android. We take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and what controls you have over your data.
By using Unsaid, you agree to the practices described in this policy. If you do not agree, please uninstall the application and contact us to delete your data.
📋 Information We Collect
| Data type | Purpose | Stored? |
|---|---|---|
| Email address | Account creation & authentication (email/password or Google Sign-In) | Yes — Firebase Auth & Firestore |
| Display name | Personalised greeting and profile display inside the app | Yes — Firestore & SharedPreferences (cached locally) |
| Username | Unique handle shown on your profile (e.g. @handle), set during onboarding | Yes — Firestore |
| Google profile photo URL | Shown on profile page (Google Sign-In users only) | Yes — Firestore |
| Journal entries (text) | Personal diary feature — text journals with auto-generated titles | Yes — Firestore (private, linked to your UID) |
| Gratitude entries (text) | Daily gratitude journalling feature (up to 3 items per day) | Yes — Firestore (private, linked to your UID) |
| Voice recordings (audio) | Voice journal entries — recorded via microphone, auto-titled sequentially | Yes — Device local storage only (never uploaded to servers, not accessible by Unsaid or any third party) |
| Anonymous confession text | "The Void" feature — posts are fully anonymous; your UID is never stored with them | Yes — Firestore (no UID attached) |
| Anonymous void token | Enforces the 6-hour posting cooldown without identifying you | Locally on device (SharedPreferences only) |
| Feedback submissions | Bug reports, feature requests, and general feedback submitted via the Feedback page | Yes — Firestore (linked to your UID and email) |
| FCM push token | Optional push notifications (Firebase Cloud Messaging) | Yes — Firebase |
| Notification preference (reminder time) | Daily journal reminder — user-selected time to schedule a local notification | Yes — Device local storage only (SharedPreferences). Never uploaded to servers or shared with any third party. |
| Sign-in timestamps | Account security & abuse prevention | Yes — Firestore |
🎙️ Microphone & Audio Access Sensitive
Unsaid requests the RECORD_AUDIO permission solely to enable the Voice Journal feature. This allows you to record audio entries as part of your personal diary.
- Audio is only recorded when you explicitly start a recording inside the app.
- Recordings are saved to your device's local storage only and are never uploaded to our servers or accessible by anyone else.
- Voice journal entries are automatically titled (e.g., "Voice Journal 1", "Voice Journal 2") — no manual input is required.
- We do not process, analyse, or share your audio recordings with any third party.
- You can delete any recording at any time from within the app.
🔔 Notifications & Reminders Permission
Unsaid requests the POST_NOTIFICATIONS permission solely to deliver daily journal reminders at a time chosen by you.
- Notifications are scheduled locally on your device — no data is sent to our servers to trigger them.
- Your chosen reminder time is saved only in your device's local storage (SharedPreferences) and is never uploaded or shared with any third party.
- You can change or disable reminders at any time from within the app settings.
- If you deny the notification permission, all other app features continue to work normally.
🌑 Anonymity & "The Void"
"The Void" is an anonymous confession feed. We have specifically engineered this feature to preserve your anonymity:
- Your real Firebase UID is never written to any confession document.
- A random, device-local token is used only to enforce the posting cooldown — it is not linked to your identity in our database.
- Confessions that receive 4 or more flags from other users are automatically deleted.
- Because posts contain no identity link, they cannot be retroactively deleted when your account is removed.
💬 Feedback Submissions
The Feedback page (accessible from your Profile) lets you submit bug reports, feature requests, or general feedback. When you submit feedback, we store the following in Firestore:
- Feedback type — Bug Report, Feature Request, or General Feedback.
- Description — the text you enter describing your feedback.
- Your user ID (UID) and email address — so we can follow up if needed.
- Submission timestamp — to track when the feedback was received.
Feedback data is used solely to improve the app and is never shared with third parties.
🔐 How We Use Your Data
- To authenticate you and secure your account.
- To store and display your private journal, gratitude, and voice entries.
- To personalise your experience with your display name and username.
- To provide the anonymous Void feature with cooldown enforcement.
- To receive and act on feedback you submit through the app.
- To send optional push notifications (only if you grant notification permission).
- To detect and prevent abuse (report thresholds, cooldowns).
We do not sell, rent, or share your personal data with advertisers or third parties.
🔗 Third-Party Services
Unsaid uses the following Firebase services provided by Google:
- Firebase Authentication — Email/password and Google Sign-In
- Cloud Firestore — Database for user profiles, journals, gratitude, void posts, and feedback submissions
- Firebase Cloud Messaging (FCM) — Push notifications
These services are subject to Google's Privacy Policy and Google's Terms of Service.
🗑️ Data Retention & Deletion
You can delete your account at any time from the Profile page inside the app. When you do, we permanently delete:
- Your Firebase Authentication account
- Your Firestore user profile document (including display name and username)
- All your text journal entries
- All your gratitude entries
- All your voice recordings
- Your username reservation
- Your locally cached display name (SharedPreferences)
Not automatically deleted on account removal:
- Anonymous void posts — these contain no UID and cannot be linked back to you.
- Feedback submissions — these are retained for product improvement purposes. To request manual deletion of your feedback, contact us at the email below.
👶 Children's Privacy
Unsaid is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
🛡️ Security
All data is transmitted over HTTPS and stored in Firebase's secure, encrypted infrastructure. Access to your private data (journals, voice notes, gratitude entries, profile) is enforced via Firebase security rules that allow only your authenticated account to read or write your data.
📝 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Unsaid after changes are posted constitutes acceptance of the updated policy.
✉️ Contact Us
If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us at: