Privacy Policy

Last updated: October 7, 2026

Unspoken is a relationship assessment platform based in Edmonton, Alberta, Canada. We built Unspoken because we believe every couple deserves access to research-backed relationship insights — not just those who can afford traditional counseling. This policy explains, in plain language, what data we collect, why we collect it, who we share it with, and what rights you have over it.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and — for California residents — the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

1. What We Collect

We only collect what we need to run the service:

• Email address — to create your account, log you in, and send you notifications (like when your partner finishes an assessment).
• Name — to personalize your experience and reports.
• Assessment answers — your responses to our relationship questions. These are the core of what Unspoken does.
• Payment information — processed entirely by Stripe. We never see or store your credit card number. We only receive your subscription status and billing email.
• Usage analytics — basic page-view and interaction data via Vercel Analytics, only if you consent. If you allow analytics, we also store fixed campaign codes in a first-party cookie (unspoken_campaign, up to 30 days) to understand which marketing links lead to product use. These codes contain no answers or free-text relationship information. When you sign up, these consented codes may be attached to the signup event, including when you open your sign-in link on another device. Consented page-speed measurements are sampled on static public pages only; sign-in, assessments, reports and URLs with query parameters are excluded from these speed measurements.
• Error logs — technical error reports via Sentry to help us find and fix bugs. These contain no personal content.
• Product usage events & session cookie — which actions you take in the app (pages viewed, assessments started or completed), tied to a first-party session ID stored in a cookie (unspoken_sid, ~180 days), so we can understand and improve the product. This is not used for cross-site tracking or advertising.
• Crisis-safety signals — we automatically scan text you submit for indicators of crisis, abuse, or self-harm so we can show you relevant support resources. We log only a severity level and category — never the content of what you wrote.

2. How We Use It

• Provide the service — run your account, authenticate you, deliver assessments, and pair you with your partner.
• Generate reports — send your assessment answers to our AI provider (Anthropic) to produce personalized relationship insights. Your answers are processed for your report only and are not used to train AI models.
• Improve the product — use aggregated, anonymous usage data and error logs to fix bugs and make Unspoken better.
• Communicate with you — send transactional emails like partner notifications, account confirmations, and policy updates. We will never send you spam or sell your email.

3. Third-Party Services

We rely on a small number of trusted providers to run Unspoken. Each one only receives the data it needs. All are based in the United States.

We do not sell your personal information to anyone. Each provider is bound by its own privacy policy and our data processing agreements.

See Anthropic's commercial data retention policy for the provider's current retention rules. We do not record Sentry session replays or performance traces. Monitoring excludes request bodies, cookies, headers, user identities, and console/input breadcrumbs.

4. Your Rights

Depending on where you live, different privacy laws give you specific rights over your data. Here's what applies:

PIPEDA (Canada — Federal)

Under Canada's federal privacy law, you have the right to:

• Access your personal information — ask us what we have and get a copy.
• Correct any inaccurate or incomplete information.
• Delete your personal information by closing your account.
• Withdraw consent for collection, use, or disclosure of your information (subject to legal or contractual restrictions).
• Complain to the Office of the Privacy Commissioner of Canada if you believe we've mishandled your data.

PIPA (Alberta)

Alberta's provincial privacy law provides the same rights as PIPEDA, plus:

• We must respond to your access or correction request within 30 days.
• You can file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you are unsatisfied with how we handle your information.

CCPA / CPRA (California)

If you are a California resident, you have additional rights:

• Right to Know — request the categories and specific pieces of personal information we have collected about you.
• Right to Delete — request that we delete your personal information.
• Right to Opt-Out of Sale — we do not sell your personal information, so there is nothing to opt out of.
• Right to Non-Discrimination — we will never charge you more, give you worse service, or treat you differently for exercising your privacy rights.
• Right to Correct — request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Information — we only use sensitive information (your assessment answers) to provide the service you signed up for.

5. Data Retention

• Active accounts — your data is kept for as long as your account is active.
• Deleted accounts — when you delete your account, all personal data is permanently purged within 30 days.

6. Data Security

We protect your data with multiple layers of security:

• Encryption in transit — all data sent between your browser and our servers is encrypted with TLS.
• Encryption at rest — your data is encrypted at rest in our database via Supabase.
• Access controls — row-level security ensures users can only access their own data. Authentication uses secure, httpOnly cookies.

7. Children's Privacy

Unspoken is not intended for anyone under 18 years of age. We require age confirmation during signup. If we learn that we have collected data from someone under 18, we will delete it promptly.

8. How to Exercise Your Rights

You have two ways to manage your data:

• Self-service — go to your Account Settings to download your data or delete your account.
• Email us — send a request to contact@unspoken.to and we'll take care of it. We respond to all requests within 30 days.

9. Changes to This Policy

If we make significant changes to this policy, we will notify you by email. The "Last updated" date at the top of this page always reflects the most recent version.

10. Contact

Questions, concerns, or privacy requests? Reach out:

• Email: contact@unspoken.to
• Service: Unspoken
• Location: Edmonton, Alberta, Canada