Last updated: 6 May 2026

1. Introduction

This Privacy Policy explains how Unravl ("we", "us", "our") collects, uses, and protects your personal information when you use Unravl ("the Service"). We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988.

2. Information We Collect

We collect the following types of information:

Account information: Your name and email address when you sign in via an OAuth provider (Google, Microsoft, GitHub, or others) or email magic link
Audio recordings: Voice recordings you submit for processing. These are sent to OpenAI for transcription and are not stored by us after processing.
Structured data: The tasks, events, notes, and grocery lists generated from your recordings, stored in our database
Usage data: Daily usage counts to enforce plan limits
Payment information: Managed securely by Stripe. We do not store your credit card details.

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Process your voice recordings into structured data
Manage your account and subscription
Enforce usage limits and prevent abuse
Communicate with you about your account or changes to the Service

4. Third-Party Services

We use the following third-party services to operate Unravl:

OAuth Providers: For authentication, we support Google, Microsoft, GitHub, and other providers. Each is subject to their respective privacy policies, including Google's Privacy Policy
OpenAI (Whisper & GPT-4o-mini): For audio transcription and text processing. Audio is sent to OpenAI's API for processing. Subject to OpenAI's Privacy Policy
Stripe: For payment processing. Subject to Stripe's Privacy Policy
Resend: For sending authentication emails. Subject to Resend's Privacy Policy
Vercel: For hosting and database services. Subject to Vercel's Privacy Policy

5. Data Retention

Your structured data (tasks, events, notes, groceries) is retained for as long as your account is active. Audio recordings are not stored — they are processed in real time and discarded. When you delete your account, all personal data will be permanently removed within 30 days. We retain only anonymized, non-identifiable audit records (such as account creation and deletion timestamps) for security monitoring and aggregate usage metrics.

6. Your Rights

Under Australian Privacy Law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Export your data (available to Pro or higher subscribers)
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

7. Cookies

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page. Continued use of the Service after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at [email protected].