PRIVACY POLICY

LAST UPDATED: JANUARY 2025

INTRODUCTION

Project Unredacted ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Developer: Brett Cassidy
Contact: projectunredactedapp@protonmail.com

INFORMATION WE COLLECT

1. Personal Information You Provide

We collect information that you provide directly to us when you:

• Create an account: Email address (and optionally, name if using Apple Sign-In)
• Save favorite case files: List of case file IDs you've favorited
• Subscribe to Declassified Access: Purchase information processed by Apple (we only receive subscription status via RevenueCat)
• Contact support: Any information you provide in support inquiries

2. Information Collected Automatically

When you use the app, we automatically collect certain information:

• Usage Data & Analytics:
  • Case files viewed and time spent viewing them
  • Features accessed (discovery, archive, favorites, map)
  • Search queries
  • Navigation patterns within the app
  • App performance metrics and crash reports
• Device Information:
  • Device type and model
  • Operating system version
  • App version
  • Language settings
  • Time zone
• Identifiers:
  • User ID (Supabase-generated identifier)
  • Device advertising identifier (IDFA on iOS) - used only for ad targeting
• Advertising Data (Free Users Only):
  • Ad impressions and interactions
  • Ad placement performance
  • Time spent viewing ads

3. Information We Do NOT Collect

To be clear, we do not collect:

• Precise location data (GPS coordinates)
• Photos, videos, or other media from your device
• Contact lists or address books
• Browsing history outside the app
• Microphone or camera data
• Health or fitness data
• Financial information (credit cards, bank accounts)

Note on Location: The app displays case file locations on an interactive map, but this uses pre-existing location data from our database. We do not access your device's location services or track where you are.

HOW WE USE YOUR INFORMATION

We use the collected information to:

• Provide core functionality: User authentication, save favorites, sync across devices
• Personalize your experience: Remember your preferences and viewing history
• Curate daily content: Select and deliver daily featured case files
• Process subscriptions: Manage Declassified Access features and subscription status
• Send notifications: Deliver daily case file notifications (only with your permission)
• Display ads (free users): Show contextually relevant advertisements to non-premium users
• Improve the app: Analyze usage patterns, fix bugs, optimize performance
• Provide support: Respond to inquiries and troubleshoot issues
• Comply with legal obligations: Meet regulatory requirements

THIRD-PARTY SERVICES

We use the following third-party services to operate our app:

APP TRACKING TRANSPARENCY (ATT)

We use Apple's App Tracking Transparency framework to request permission before tracking you across apps and websites. When you see the ATT prompt, we're asking permission to:

• Use your device's advertising identifier (IDFA) to show personalized ads
• Allow AdMob to use cross-app data for ad targeting

If you decline: You'll still see ads, but they won't be personalized based on your behavior across other apps.

If you accept: Ads will be more relevant to your interests.

Declassified Access subscribers: Never see the ATT prompt because we don't show ads at all.

WHAT IS "TRACKING"?

According to Apple's definition, "tracking" means linking data collected about you from our app with data collected about you from other companies' apps, websites, or offline properties for targeted advertising or advertising measurement purposes.

In our app, tracking only applies to:

• Device advertising identifier (IDFA) used by AdMob
• Ad interaction data shared with Google for personalized advertising

NOT considered tracking:

• Your email address and user account data (stays within our app)
• Favorited case files (stays within our app)
• Crash reports (used only for debugging, not advertising)

ENTERTAINMENT CONTENT DISCLAIMER

Project Unredacted provides entertainment content exploring unexplained phenomena, conspiracy theories, UFO sightings, cryptid encounters, and related topics. All content is presented for entertainment purposes only. We make no claims about the accuracy, validity, or truthfulness of any theories, stories, or case files presented.

INFORMATION SHARING & DISCLOSURE

We do not sell, trade, or rent your personal information. Period.

We may share information only in these limited circumstances:

With Service Providers

We share data with trusted service providers who help operate the app:

• Supabase: User authentication and data storage
• RevenueCat: Subscription management
• Google AdMob: Ad serving (free users only)
• Contentful: Content delivery
• Expo: Push notifications

These providers are contractually required to keep your data secure and use it only for the purposes we specify.

For Legal Reasons

We may disclose information if required to:

• Comply with legal obligations or court orders
• Respond to lawful requests from government authorities
• Protect our rights, property, or safety
• Protect users from fraud, abuse, or security threats
• Enforce our Terms of Service

Business Transfers

If Project Unredacted is acquired or merged with another company, user data may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

ADVERTISING

For Free Users

Free users see advertisements served by Google AdMob in the following locations:

• Banner ads within content feeds
• Interstitial ads between screens (limited frequency)

Personalized vs. Non-Personalized Ads

You have control over ad personalization:

• iOS Settings → Privacy & Security → Tracking: Disable to prevent cross-app ad tracking
• iOS Settings → Privacy & Security → Apple Advertising: Enable "Limit Ad Tracking"
• Google Ad Settings: Manage ad personalization at adssettings.google.com

Declassified Access: Ad-Free Experience

Declassified Access subscribers enjoy a completely ad-free experience. When you upgrade:

• All ads are removed immediately
• AdMob SDK stops loading and collecting data
• No advertising identifiers are used or collected
• You never see the App Tracking Transparency prompt

DATA SECURITY

We take data security seriously and implement industry-standard protections:

• Encryption:
  • All data transmitted between your device and our servers uses TLS/SSL encryption
  • Data stored on servers is encrypted at rest
• Authentication:
  • Secure password hashing (never stored in plain text)
  • OAuth support for Apple and Google Sign-In
  • Session token management with automatic expiration
• Access Controls:
  • Strict access controls on backend systems
  • Principle of least privilege for data access
• Infrastructure Security:
  • Trusted cloud providers (Supabase, Vercel)
  • Automated backups with encryption

Important: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

YOUR RIGHTS AND CHOICES

You have comprehensive control over your data:

Access Your Data

Request a copy of all personal data we have about you. Email projectunredactedapp@protonmail.com with "Data Access Request" in the subject line.

Update Your Information

Update your account information anytime:

• Open the app → Profile tab → Settings
• Update email, notification preferences

Delete Your Account

Permanently delete your account and all associated data:

• Open the app → Profile tab → Settings → Delete Account
• Or email projectunredactedapp@protonmail.com with "Delete Account" in the subject
• We'll delete all your personal data within 30 days

Manage Notifications

Control push notifications:

• In-app: Profile → Settings → Notification Preferences
• iOS: Settings → Project Unredacted → Notifications

Opt Out of Ad Personalization

• iOS: Settings → Privacy & Security → Tracking → Deny for Project Unredacted
• Or upgrade to Declassified Access for an ad-free experience

DATA RETENTION

We retain your information as follows:

• Active accounts: Stored while your account is active
• Deleted accounts: Permanently deleted within 30 days of deletion request
• Legal retention: Some data may be retained longer if required by law
• Backup systems: Deleted data is removed from backups within 90 days

CHILDREN'S PRIVACY

Project Unredacted is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover we have collected information from a child under 13, we will:

• Delete the information immediately
• Terminate the account

If you believe a child under 13 has created an account, please contact us immediately at projectunredactedapp@protonmail.com.

INTERNATIONAL USERS

Project Unredacted is based in the United States. By using the app, you consent to:

• Transfer of your information to the United States
• Storage and processing on US-based servers
• Compliance with US data protection laws

CALIFORNIA PRIVACY RIGHTS (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, email projectunredactedapp@protonmail.com with your request. We'll respond within 45 days.

EUROPEAN PRIVACY RIGHTS (GDPR)

Users in the European Economic Area (EEA) and UK have rights under GDPR:

• Right to Access: Obtain confirmation and access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to data processing, including profiling

Legal basis for processing:

• Contract performance: Account management, favorites, subscriptions
• Consent: Push notifications, ad personalization (can be withdrawn)
• Legitimate interests: Analytics, app improvement, security

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Displaying a prominent notice in the app
• Updating the "Last Updated" date at the top of this policy
• Sending a push notification (for significant changes)

Your continued use of the app after changes take effect constitutes acceptance of the updated policy.