UniBao collects information you provide and information the app generates to deliver the features you choose:
Account information: email address, password hash, display name, avatar and biography; when you use Apple or Google sign-in, the name, email address and account identifier they provide.
Contact details: WeChat ID, WhatsApp number or other details you provide voluntarily, visible for a limited period only after both users agree to exchange them.
Address and location: a saved home address is used only for account features and is never copied automatically into public listings; public location text should contain only a city, area or neighbourhood. Public coordinates generated after you grant location permission are reduced in precision.
Listings and community content: marketplace, housing and service listings, posts, comments and their images.
Customer support content: the category, subject, message and resolution records submitted through feedback, reports or support requests.
Device identifiers: when app notifications are enabled, an APNs token is associated with your account to deliver notifications to this app on this device; if you opt in to diagnostics and PostHog is configured, a random installation UUID is generated for product analytics.
Usage and technical data: access times, service logs, IP address, city selection and security or troubleshooting information.
Analytics and diagnostics: the Web service uses first-party, analytics-cookie-free product counts. It accepts only reviewed event names, word/latency buckets, status, model/prompt versions and a fixed tool slug, then aggregates them by UTC date. Humanizer records Helpful and Not helpful only as two fixed categories, with Meaning changed as a separate event; it accepts no arbitrary rating or free-form feedback. The analytics payload, application processing and aggregate tables contain no user or device IDs, IP addresses, email, names, full URLs/query strings/referrers, or Humanizer source or result text. Cloudflare and Caddy may still process limited access metadata for security and operations. Web does not initialise third-party analytics or error tracking. Only if you opt in within the iOS app and the services are configured may PostHog receive product interactions and the installation UUID, and Sentry receive crashes, errors, performance data and related diagnostic context.
Humanizer data: your English text, purpose, adjustment intensity, spelling, mode and advanced choices are processed only when you choose Rewrite. After a signed-in user successfully generates a result, Humanizer saves those settings plus the source and result to the account's private history for 30 days by default. You can turn off future automatic saving and delete individual or all existing entries. Failed or rejected requests, static examples and model reasoning are not saved. To enforce plan and bonus allowances and provider budgets, UniBao separately stores account ID, entitlement period, input word count, random request ID, model, mode, tokens, cost, status and timestamps; those ledgers do not contain the text. Redemption codes are stored only as server-peppered digests and safe prefixes.
Humanizer billing data: Stripe processes Web subscriptions, one-time word packs, cards, tax, refunds, disputes, invoices and receipts. UniBao stores only necessary Stripe customer, subscription, Checkout Session, Payment Intent, price, quantity, amount, billing-period and payment/refund/dispute status identifiers, not full card details. Resend processes the email address and message content needed for subscription, word-pack and redemption transactional messages.
2. How we use information
Provide sign-in, publishing, browsing, favourites, contact exchange, community, notifications and customer support.
Detect and respond to fraudulent listings, scams, harassment, abuse and security incidents.
Send essential account emails and notifications you choose to enable.
Use anonymous UTC-day aggregates to understand the Web tools funnel and improve the product; optional iOS analytics and diagnostics are used only after you enable them.
To perform automated content-safety review, we may send Alibaba Cloud DashScope's content-safety service locally redacted listing titles, descriptions and allergen text, risk markers indicating whether location and WeChat/WhatsApp contact fields are present, and up to six images. Exact location and contact-field values are not included in the review text, although images may themselves contain personal information. This data is used only to identify prohibited, fraudulent or unsafe content. If automated review is unavailable, the content enters an access-restricted manual review queue.
Resend processes only the email address and message content needed to deliver essential transactional email. Optional GitHub sync creates an operations alert in an access-restricted private repository containing only the feedback ID, category, source and internal admin link; it does not include the user ID, label, email address, subject or feedback message.
When Humanizer is enabled, UniBao's server sends the text and editing choices you actively submit to an external AI processing service to process the English rewrite you requested. Any retention or further processing by that service must be described from the final verified and accepted API contract and account settings. The real API remains disabled until processing location, retention, training use and contract terms have been reviewed.
We do not sell personal information. We disclose it only with your consent, to processors needed to provide the service, or where required by law or a valid law-enforcement request.
2.1 Lawful bases for processing
Performance of a contract: creating and maintaining an account and providing publishing, browsing, favourites, contact exchange, messaging, notifications, support and account deletion requested by the user.
Legitimate interests: preventing fraud and abuse, protecting the service and users, moderating content, investigating reports, maintaining necessary audit and operational logs, and using identifier-free daily aggregates to understand whether Web tools work and are useful. We balance these interests against user rights and limit the data to what is necessary.
Consent: optional analytics and diagnostics enabled in the iOS app, and location or push notifications that require system permission. Consent can be withdrawn in the app or iOS Settings without affecting processing that was lawful before withdrawal.
Legal obligations: responding to valid regulatory or law-enforcement requests, preserving and reporting safety incidents where required by law, and meeting applicable online-safety and data-protection duties.
Automated moderation is used only to decide whether content can be displayed publicly or requires human review; it is not used to make decisions with legal or similarly significant effects. For human appeals and safety complaints, read the Online Safety and Complaints policy.
3. Cookies and local storage
We use necessary cookies and local storage to maintain sign-in, save drafts and remember city, language, notification and diagnostics preferences. Humanizer's Return to editor action uses a time-limited, one-time sessionStorage payload that is removed immediately after the editor reads it. Web product counts do not set or read an analytics cookie, device ID or persistent analytics identifier. Read the Cookie Policy.
4. Your rights and choices
Access, correct, delete or export your profile and content.
Delete your complete account and associated data in Profile → Settings → Delete account.
Turn off notifications or diagnostics in app settings and revoke system permissions in iOS Settings.
Exercise your UK GDPR rights to restrict or object to processing and complain to the UK Information Commissioner’s Office (ICO).
5. Storage and international transfers
Core account, listing and image data is hosted by Supabase in the UK region. The production web service runs on a Vultr server in London; public requests pass through Cloudflare for reverse proxying, TLS and security protection. Passwords are stored as one-way hashes.
Production automated moderation currently uses Alibaba Cloud DashScope's China-region content-safety service, so the redacted review text, risk markers and images described above are processed in China. Cloudflare, Resend, GitHub and, when enabled, PostHog and Sentry may also process limited data outside the UK or EEA. Depending on the processing location and provider, we use an applicable Data Processing Agreement (DPA), UK International Data Transfer Agreement or Addendum (IDTA/Addendum), Standard Contractual Clauses (SCCs), or another lawful mechanism, and verify the actual region and transfer safeguards before production release.
When Humanizer generation is enabled, English text you actively submit is sent server-to-server to the DeepSeek Open Platform operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. to produce the rewrite. A signed-in user's successful result may be retained under the rules above in UniBao's separate private history table; allowance, cost, billing, logging and anonymous analytics data still do not contain the text. DeepSeek's public policies point to processing in China, while API-specific DPA, complete location, retention/deletion, no-training and UK transfer evidence is still being requested. A technical feature flag is not provider approval; paid launch remains closed and we will suspend this processing if the evidence is not satisfactory.
6. Service providers
Supabase — database, authentication and storage
Vultr — production web hosting
Cloudflare — reverse proxy, TLS, CDN and security protection, which may process IP addresses and request metadata
DeepSeek Open Platform — Humanizer English rewriting; provider data-processing review remains open
Stripe / Link — Humanizer Checkout, subscriptions, receipts, refunds, disputes and customer billing management; full card numbers are not returned to UniBao
Resend — essential transactional email delivery
GitHub — minimised feedback operations alerts in an access-restricted private repository (optional)
PostHog — opt-in iOS product analytics
Sentry — opt-in iOS crash, error and performance diagnostics
Where a supplier acts as our processor, applicable contracts must require processing on agreed instructions and purposes with corresponding protection. Any other role will be disclosed from verified contract facts before enablement; the external AI processing service's final role remains under review, so Humanizer generation stays disabled.
7. Retention and deletion
We retain service data while an account remains active. After deletion, the account, user-generated content, images and other identifiable information are deleted immediately or within the 30 days needed to complete asynchronous cleanup. Report or audit records required for legal or security obligations are access-restricted and later deleted or de-identified. APNs tokens are removed when notifications are disabled, on sign-out or account deletion. Each Humanizer private-history entry becomes unavailable 30 days after creation and an hourly cleanup job physically removes it from the active database; you can also delete one or clear all entries earlier. Turning off automatic saving affects only future successful results. History writes are enabled only after verifying that the provider's encrypted off-site database snapshots expire automatically and retain deleted active-database text for no more than 14 additional days; copies within that backup window are not available through the product History page. Web product analytics keeps only anonymous aggregates for the current and previous 89 UTC dates; global identifier-free ingest rate counters are kept for at most 48 hours. The Humanizer allowance ledger and operational logs have separate purposes and retention rules and are not joined to product analytics. Other support and diagnostic data is retained only as long as needed to resolve a request, complete security analysis or meet legal duties, then deleted or de-identified.
8. Contact us
For privacy questions or to exercise your rights, use the Contact us page and its public support channel.