Privacy Policy

Last updated: June 15, 2026

Data Controller

The controller responsible for your personal data is Health3 AG, Wiesenstrasse 10A, 8952 Schlieren, Switzerland. For privacy questions or to exercise your data protection rights, contact privacy@unbuzz.app.

EU and UK Representatives (Article 27)

Health3 AG is based in Switzerland, outside the EU/EEA and the UK. Under Article 27 of the EU GDPR and the UK GDPR we have appointed representatives that you and data protection authorities can contact about how your personal data is handled:

• EU representative: iuro Rechtsanwälte GmbH t/a Prighter, Schellinggasse 3, 1010 Vienna, Austria.
• UK representative: Prighter Ltd, United Kingdom.

You can contact the relevant representative about any data protection matter concerning your personal data.

1. Information We Collect

Data You Provide:

• Caffeine logs: Drinks you log, including type, amount, and timestamp
• Settings: Your bedtime goal, metabolism preferences, and app preferences
• Account information: Email address (only if you create an account for cloud sync)

Data Collected Automatically:

• Device information: Device type, operating system version (for app compatibility)
• Usage analytics (optional, off by default): Anonymous product-usage events and screen views, collected only if you turn analytics on. No session recording or screen capture. See Section 4b (App Analytics) for exactly what is and isn't collected.

Health Data (Optional, iOS only):

• Health-data integration is currently available only on iOS, through Apple Health (HealthKit). The Android version of the app does not access health data in this release.
• If you enable Apple Health integration on iOS, we may read and write your caffeine intake (dietary caffeine) to HealthKit.
• If you enable it, we also read your sleep data (time asleep and time in bed) from Apple Health so the app can show you how your caffeine intake relates to your sleep. We do not write any sleep data back to Apple Health.
• All health data is read on your device for these features only. It is never sent to our servers or shared with third parties.

2. How We Use Your Information

• To provide caffeine tracking and sleep-safe time calculations
• To sync your data across devices (if you enable cloud sync)
• To process in-app purchases and subscriptions
• To improve the app based on anonymous usage patterns
• To send important service notifications (not marketing)

3. Data Storage and Security

Your caffeine logs and settings are stored locally on your device by default. If you enable cloud sync:

• Data is encrypted in transit using TLS 1.3
• Data is stored securely on Supabase servers (SOC 2 compliant)
• We use row-level security to ensure only you can access your data

4. Third-Party Services

We use the following trusted third-party services:

• Supabase: Cloud database and authentication (if you use sync)
• RevenueCat: Subscription and purchase management
• Apple HealthKit (iOS only): Optional health-data integration on iOS for reading/writing caffeine and reading sleep data. The data stays on your device and is not sent to us. Not used on Android, which does not access health data.
• PostHog (EU): Anonymous analytics for both our website and our app, processed as our data processor in PostHog's EU infrastructure. See Website Analytics and App Analytics below for details and how to opt out.

These services have their own privacy policies and we encourage you to review them.

4a. Website Analytics and Cookies

Our website (unbuzz.app) uses PostHog for anonymous analytics so we can understand which pages help visitors and which do not. This section applies only to the website, not the iOS / Android app.

What we collect (only with your consent):

• Pages you visit (URL and page title)
• Buttons and links you click (including App Store / Google Play download taps)
• Approximate location (country, derived from IP), browser, device type
• Time spent on each page and overall session

What we do NOT collect:

• Your precise IP address (anonymized at ingestion)
• Your name, email, or any directly identifying personal data on the website
• Session recordings or replays (disabled at the SDK level)
• Cross-site tracking data

Where it goes: data is processed in PostHog's EU infrastructure (Frankfurt). It is not transferred outside the EEA. We honor the browser Do Not Track signal in addition to our own consent banner.

Your control:

• When you first visit, a banner appears at the bottom of the page asking whether to enable analytics. If you click Reject, no analytics SDK is loaded; if you click Accept, analytics start.
• Your choice is stored in a cookie called unbuzz_cookie_consent for 365 days.
• You can change your choice anytime by deleting that cookie in your browser settings, or by clicking the "Cookie preferences" link in the site footer (where present).
• The PostHog cookies set after acceptance are prefixed ph_*_posthog and used to count unique sessions.

4b. App Analytics

The Unbuzz iOS / Android app uses PostHog for product analytics. It is optional and off by default. We only collect usage analytics if you explicitly turn them on. You are asked once during onboarding, and you can change your choice anytime in Settings → Privacy → Share anonymous analytics. If you decline, no analytics or session data is collected or sent.

What we collect (only with your consent):

• Anonymous product-usage events and screen views only: which screens are visited and which actions occur (for example, completing onboarding, logging a drink, scanning a barcode, viewing the paywall, completing a purchase). There is no session recording or screen capture of any kind.
• Events contain no personal data: no names, emails, account identifiers, the names or exact amounts of drinks you log, or any free text you type. Numeric values (such as caffeine) are stored only as coarse ranges.
• Standard technical metadata from the analytics SDK: an anonymous device identifier, device type, operating system version, app version, and approximate location (country) derived from your IP address.

Anonymous and not sold: analytics are anonymous (we do not identify you or link analytics to an account) and we never sell your data.

Who processes it and where: analytics are processed by PostHog, Inc. on our behalf as a data processor, hosted in the European Union under a signed Data Processing Agreement. Your app analytics data is not transferred outside the EU by this service. See PostHog's privacy policy at https://posthog.com/privacy.

5. Data Sharing

6. Your Rights and Choices

You have the right to:

• Access: View all data we have about you
• Delete: Request deletion of your account and all associated data
• Export: Export your caffeine data in a readable format
• Opt-out: Disable analytics and cloud sync at any time

To exercise these rights, visit Account Deletion or contact us at privacy@unbuzz.app.

7. Data Retention

• Local data: Retained until you delete the app or clear app data
• Cloud data: Retained until you delete your account
• Anonymous analytics: Retained for up to 30 days, then deleted

8. Children's Privacy

Unbuzz is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

If you use cloud sync, your data may be transferred to and processed in the United States, where our servers are located. We ensure appropriate safeguards are in place to protect your data.

10. California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@unbuzz.app.

11. European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Legal basis: We process your data based on your consent and legitimate interests. All analytics (website and app) rely specifically on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, on the website via the cookie banner / preferences and in the app via Settings → Privacy. Withdrawing consent stops all further collection.
• Data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Supervisory authority: You may lodge a complaint with your local data protection authority

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@unbuzz.app
• Support: support@unbuzz.app