Privacy
Most products in this category describe themselves in ways that sound stronger than what they do. Here is the accurate version.
Your answers
Your answers stay in your Circle. Our AI Guide reads them so it can ask good follow-up questions. No one outside your Circle sees them. We don’t sell your conversations and we don’t train AI on them.
What we do not claim
Because our Guide needs to read your session content, that content isn’t end-to-end encrypted, and we could be legally required to hand it over. Private reflections carry stronger protection, but we hold those keys too. We say this plainly so you can decide what to share.
We never claim end-to-end encryption for your sessions. It would be the easier thing to write, and it would not be true.
Private reflections
Private reflections are yours alone. The AI Guide never reads them, and no one in your Circle can see them. They’re stored with separate encryption from everything else.
Answering anonymously
When you answer anonymously, we don’t store your name with your answer. Other members can’t see who wrote it, and neither can your Circle’s admins. You can choose to reveal yourself later — no one can do it for you.
This is enforced by how the data is stored and who is permitted to read it, not by hiding a name in the app. The part of our system that saves an anonymous answer is not able to read it back.
Circle admins
Circle admins manage members and settings. They can’t read anything you’ve kept private, and they can’t see who wrote an anonymous answer.
Our staff
We don’t read your conversations. In rare cases — investigating a report, or a technical emergency — a small number of staff can access content. Every one of those accesses is logged, requires a reason, and is reviewed.
Leaving
You can delete your account from inside the app or from the account deletion page. Deletion removes your answers and your reflections. Where something must be kept — an audit record of a safety report, for instance — we keep only what is required and say so.
This page describes how Unwritten works. The formal privacy policy is a separate document and is currently pending legal review.