Unpause Privacy Policy

1. Who we are

Unpause is a menopause wellness app operated by Unpause LLC, 1801 16th Street NW, Suite 706, Washington, DC 20009 ("Unpause", "we", "us"). This policy covers the Unpause mobile apps and the unpause.ai website. Questions: privacy@unpause.ai.

2. What Unpause is, and is not

Unpause is a general wellness app that helps you track and understand your sleep, mood and menopause-related symptoms, read educational content, and set reminders. It is not a medical device. It does not diagnose, treat or prevent any condition and does not provide medical advice. It does not replace care from a qualified professional. In an emergency, call your local emergency number. In a mental-health crisis, the app may suggest resources such as 988 in the US; these are referrals to outside services, not a service we provide.

3. Information we collect

We collect only what we need to run the features you use.

Some wellness data is sensitive and may be "consumer health data" or "sensitive personal information" under law. We collect it only with your consent and use it only to provide the features you ask for. We do not collect clinical questionnaires, prescription or treatment records, or scored clinical assessments. We do not knowingly collect data from anyone under 18.

4. How we use your information

• To provide and personalize Unpause: journaling, insights, the assistant, reminders, content and points.
• To detect a possible crisis in what you write and offer referral resources.
• To keep Unpause secure, prevent abuse and fix problems.
• To communicate with you about your account and the service.
• To improve Unpause, using aggregated or de-identified data wherever possible.
• To comply with law and enforce our Terms.

We do not sell your personal information, share it for cross-context behavioral advertising, use it to show you ads, or use your health data to make decisions that produce legal or similarly significant effects about you.

5. Legal bases (EU, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on performance of our contract with you (to run the app), our legitimate interests (security, service improvement), and consent. For health-related data we rely on your explicit consent, which you can withdraw at any time in the app without affecting processing that already took place.

6. AI processing

Unpause uses two third-party AI providers for its intelligent features:

• Google Gemini (through the Gemini API) writes the assistant's replies. To answer you, your message is sent to Google together with relevant passages from Unpause's own curated knowledge base (never other users' data), earlier messages from the same conversation, and, when your question calls for it, your own profile, journal entries (including any notes you wrote in them) and wellness data such as sleep, mood, stress and symptoms. Gemini is also used to check your messages for signs of a possible crisis, to turn a journal entry you speak aloud into the fields of your daily journal, and to write the short summary in a report you choose to share with a health provider. For that summary it receives only totals and averages of what you logged, never your journal notes or assistant messages.
• Mistral creates embeddings. The messages you type to the assistant, together with the assistant's replies, are sent to Mistral and converted into numerical representations ("embeddings", also called vectors). Unpause stores these with your conversation and uses them to find relevant content and to recall earlier parts of your conversation. They are deleted with your conversations when you delete your account.

We use these providers under paid API terms that prohibit them from using your data to train their models, and they retain data only as needed to provide the service and for limited abuse monitoring under their terms.

AI output can be wrong or incomplete. It is general wellness information, not professional advice. The assistant is not a person and does not make decisions about you.

7. How we share information

We share personal information only as described here:

• Service providers that process data on our behalf under written data processing agreements: Amazon Web Services (hosting, United States), Prisma Data, Inc. (database), Google (Gemini API for the assistant, and email delivery), Mistral (embeddings).
• Our affiliate Healplace [confirm legal entity name], whose team builds, operates and supports Unpause under a services agreement with us and the same confidentiality and security obligations.
• Legal and safety. When required by law or valid legal process, or when needed to protect someone's life or safety, our users, or our rights.
• Business transfers. If Unpause is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner, who must honor this policy. We will notify you before your data becomes subject to a different policy.

A current list of service providers is available on request at privacy@unpause.ai.

8. Cookies and similar technologies

The unpause.ai website uses cookies that are necessary for it to work, such as keeping you signed in. It may also use privacy-respecting analytics to understand site traffic in aggregate. We do not use advertising cookies, tracking pixels or cross-site tracking, and the mobile apps do not include advertising SDKs. You can control cookies in your browser settings.

9. International transfers

Your information is stored and processed in the United States. It may be accessed by our affiliate's engineering team in Sri Lanka and by service providers in other countries. When we transfer personal data from the EU, UK or Switzerland, we use the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant). Access from any country is limited to what the role requires, protected by role-based access controls and audit logging, and governed by written confidentiality and data protection obligations.

10. Your rights and choices

Available to everyone, wherever you live: download a complete copy of your data in the app; correct your profile; withdraw consent; and delete your account and all associated data in the app or on unpause.ai (Profile → Data & Privacy → Delete my account and data).

Depending on where you live, you also have these rights:

• EU, UK, EEA and Switzerland: access, rectification, erasure, portability, restriction and objection, and the right to complain to your data protection authority.
• United States: the rights to know, access, correct, delete and port your information, and to opt out of sale, sharing, targeted advertising and profiling. We do not do any of those things, but we honor the request anyway. We extend these rights to all US users, not only residents of states with privacy laws.
• Consumer health data: see our Consumer Health Data Privacy Policy at unpause.ai/health-data.
• Sri Lanka: the rights provided by the Personal Data Protection Act, No. 9 of 2022, including access, correction, erasure and withdrawal of consent.

How to make a request. Use the in-app tools, or email privacy@unpause.ai. We will verify your identity by confirming the request through the email on your account, and respond within 45 days (extendable once by 45 days where the law allows, with notice). You may use an authorized agent; we will ask for proof of the agent's authority and may ask you to confirm your identity directly. We will not discriminate against you for exercising any right.

Appeals. If we decline your request, you may appeal by emailing privacy@unpause.ai with "Appeal" in the subject. We will respond within 45 days, explain our decision, and tell you how to contact your state attorney general if you disagree.

Global Privacy Control. We treat a GPC signal from your browser as a valid opt-out request.

11. Data retention

We keep your information while your account is active. When you delete your account in the app or on unpause.ai, we delete your personal data from our active systems immediately. If you ask us to delete it through our contact form, we do so within 30 days of verifying your identity. Deleted data is purged from backups within 90 days. We keep only what the law requires (for example, a record that a deletion request was fulfilled) and aggregated or de-identified data that can no longer identify you. Guest data is deleted when the guest session is cleared.

12. Security and breach notification

We protect your data with encryption in transit and at rest, role-based access controls, audit logging and regularly reviewed infrastructure. No system is perfectly secure. If a breach affects your information, we will notify you and the appropriate authorities as required by law, including under the FTC Health Breach Notification Rule and the GDPR.

13. Children

Unpause is for adults 18 and older and is not directed to children. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

14. Changes to this policy

We will post updates here with a new date. For material changes, we will notify you in the app or by email before they take effect, and we will ask for your consent again where the law requires it.

15. Contact

Unpause LLC · 1801 16th Street NW, Suite 706, Washington, DC 20009 · privacy@unpause.ai