Privacy Policy — UNTITLED

Last updated: 11 July 2026

UNTITLED is an anonymous story-discovery app. You see spoiler-free hooks for films, series, books, and games — no title, poster, rating, or cast — and save the ones you like to a private Library. This policy explains exactly what data the app handles, why, and the choices you have. We have tried to keep it short and honest.

Who we are

UNTITLED (“we”, “us”, the “app”) is an independent iOS application. For any privacy question or request, contact us at alishersv.dev@outlook.com.

What we collect, and why

1. An anonymous account identifier

When you first open the app, we create a persistent anonymous account for you. This is a random identifier (a UUID) — it contains no name, email, or phone number and is not derived from your device's advertising ID. Its only purpose is to associate your saved Library with your account so it can be backed up and restored.

• What it is: a random account ID (UUID).
• Why: so your Library can be saved to the cloud and restored.
• Legal basis (where applicable): performing the core function of the app you asked for.

2. Your Library (saved / revealed / dismissed stories)

When you save, reveal, or skip a story, we store that choice — the story's internal ID, its state (saved / revealed / dismissed), and a timestamp — so your Library survives across app restarts and, if you sign in, across devices.

• What it is: a list of internal story IDs plus a state and update time for each. It is a record of your in-app choices, linked to your anonymous account ID.
• Where: kept on your device first (the app works fully offline), and mirrored to our cloud database as a best-effort backup.
• Why: backup and cross-device restore of your Library.

3. (Optional) Sign in with Apple

Signing in is entirely optional. You only need it if you want your Library to be permanent and to sync across multiple devices.

If you choose Continue with Apple, the app asks Apple for no personal information at all — we request neither the name nor the email scope. Apple returns only an opaque, app-specific identifier for you, inside a signed token. We use that identifier for one thing: to recognise that a future sign-in belongs to the same person, so we can restore your Library. We never receive, store, or see your name or your email address — not even an Apple private-relay address.

Because we hold no email address for you, we cannot and do not email you, and we have no way to contact you outside the app.

If you never sign in, your account simply stays anonymous and on-device-first, exactly as it started.

4. A local reminder preference

If you turn on the optional Daily reminder, the app schedules a local notification on your device (default 6:00 PM). This preference is stored on your device only. The reminder is generated entirely on-device — there is no remote/push server, and the notification never contains a title, creator, or any spoiler.

5. Anonymous crash diagnostics

So we can find and fix bugs, the app reports technical error details when something goes wrong — the type of error, a cleaned-up error message and stack trace, your device platform and OS version, and the app version. These reports are sent to our own cloud database (Supabase, listed under Processors below) — there is no third-party crash service (no Sentry, Crashlytics, or Firebase).

• Not linked to you. A crash report carries no account ID and no name or email, and the message and stack are automatically scrubbed of anything identifying (emails, IDs, tokens, file paths) before they are sent. We cannot tie a crash report back to your account.
• Not used for tracking or advertising, ever. It is used only to diagnose and fix problems, and reports are automatically deleted after a retention period.
• What it is not: it is not analytics — we do not record which stories you view, how long you use the app, or any behavioural/usage events. Only error diagnostics.

What we do not do

• No advertising. No ad networks, no ad identifiers (IDFA), no ad SDKs.
• No analytics and no third-party tracking. We do not track you across apps or websites, we do not build advertising profiles, and we record no usage or behavioural analytics. Under Apple's definition, the app performs no tracking. The only diagnostic data we collect is the anonymous, first-party crash reporting described in section 5 above — kept in our own database and never shared with a third party. (If we ever add usage analytics, we will update this policy and the App Store privacy label before shipping it.)
• No name or email, ever — see the Sign in with Apple section above.
• No selling or sharing of your data with data brokers or third parties for their own purposes.
• No precise location, contacts, photos, microphone, or health data.
• No images of the content are ever shown or stored — the app is text and colour only.
• No third-party content is fetched to render the app. The typefaces are bundled inside the app, so no font CDN or other third party ever sees your IP address on launch.

Where your data lives (processors)

• Supabase — our cloud database and authentication provider — hosts your anonymous account and the cloud copy of your Library on our behalf. Data is transmitted over encrypted HTTPS connections and protected by row-level security so that an account can only ever read or write its own rows.
• Apple — if you use Sign in with Apple, Apple processes that authentication. Apple's handling of your Apple ID is governed by Apple's own privacy policy. As described above, Apple does not pass us your name or email.

Technical connection data. Like any internet service, our host receives the technical information needed to answer a request — including your IP address — and may retain it briefly in server logs for security and abuse prevention. We do not use it to profile you, we do not combine it with your Library, and we do not use it for advertising.

Links out. The “Where to watch / read / play” button opens your browser to a public search for the title you have just revealed. That is a normal web request to that site (e.g. JustWatch or a search engine); we send them no personal data, and once you leave the app, that site's own privacy policy applies.

We do not knowingly transfer your data to any other third party.

How long we keep it

• Your Library and account are kept until you delete them.
• If you delete the app without deleting your account, an anonymous cloud record may remain until you delete your account. It contains only a random ID and your list of story choices — no name or email.

Your choices and rights

• See your data: your entire Library is visible inside the app.
• Delete everything: go to Profile → Delete account. This permanently deletes your account and its cloud data (your Library rows are removed with it). This action cannot be undone.
• Sign out: Profile → Sign out returns you to an anonymous, on-device-only account without deleting your local Library.
• Reset your Library: Profile → Reset clears your saved stories.
• Turn off the reminder: toggle Daily reminder off in Profile.

Depending on where you live, you may have additional rights (access, correction, deletion, portability). Because the app is anonymous by design and gives you in-app deletion, you can exercise the core of these directly; for anything else, contact us at the email above.

Children

UNTITLED is not directed at children under 13 (or the equivalent minimum age in your region) and we do not knowingly collect data from them.

Security

Data in transit is encrypted with HTTPS/TLS. Cloud data is isolated per account by row-level security. No method of transmission or storage is 100% secure, but we keep the data we hold to the practical minimum (a random ID and your story choices).

Changes to this policy

If we make material changes, we will update the “Last updated” date above and, where appropriate, note it in the app. Continued use after an update means you accept the revised policy.

Contact

Questions or requests: alishersv.dev@outlook.com