Privacy without fine-print surprises.

1. Scope and controller

Rikhath LLC (“Rikhath,” “we,” “us”) operates Unlater and is responsible for the personal information described here. This policy applies to the Unlater mobile application, its API, and this website.

2. Information we collect

Account and device information

• Email address, authentication challenges, account identifier, and session records used for passwordless sign-in and account security.
• An installation identifier, push token, notification preferences, timezone, quiet hours, and app/build version used to deliver and troubleshoot reminders.

Content you choose to save

• Links, notes, reasons for saving, intended outcomes, messages or excerpts, screenshots, and other images you deliberately share or select.
• Titles, readable image text, summaries, proposed actions, action plans, reminders, source-monitoring conditions and results, research requests and results, item history, grouping, outcomes, and private cancellation feedback.

Purchases

Subscription status, product identifiers, purchase and renewal state, store environment, and an opaque billing customer identifier. Payment card details are handled by Apple or Google and are not received by Unlater.

Usage and diagnostics

We keep first-party, categorical events about capture, reminders, follow-through, and result sharing. These events exclude saved content, copied share text, URLs, titles, notes, monitoring text, and private feedback. Production crash reports may include stack traces, platform, app version, and fixed operation names; they are configured to exclude account identity, saved content, URLs, request data, screenshots, view hierarchy, session replay, tracing, and breadcrumbs.

3. How we use information

• Provide authentication, sync, search, reminders, exports, deletion, subscription access, and customer support.
• Process only the saves and actions you request, including optional text extraction, summarization, research, action plans, and public-page monitoring.
• Secure the service, prevent abuse, diagnose failures, restore service, and enforce release compatibility.
• Understand aggregate product follow-through without reading saved content into analytics.
• Comply with law, resolve disputes, and enforce our terms.

Where applicable, our legal bases are performance of our contract with you, our legitimate interests in operating and protecting Unlater, your consent for optional processing, and compliance with legal obligations.

4. AI and external processing

Saving, manual organization, search, reminders, and Waiting follow-ups work without AI. AI assistance and external-provider processing are separate settings and are off by default.

If both settings are enabled, capture analysis may send the content you shared, your reason, and text read from its public page to OpenAI. An image may also be sent when text needs to be read. Research sends your question and relevant saved-item context and may search the public web. Action-plan generation sends the details needed to draft a plan. Research and action plans run only when you request them.

Unlater labels the provider and model used. A generated proposal cannot change commitments, dates, reminders, or status until you confirm it. Turning processing off cancels queued work, but cannot recall a request already received by a provider.

5. When information is shared

We disclose information only as needed to operate Unlater, at your direction, or as legally required. Provider categories include:

• Cloud database, storage, networking, backup, and email-delivery providers.
• Expo for mobile build and push-delivery infrastructure.
• OpenAI for optional AI processing you enable or request.
• Sentry for restricted production crash diagnostics.
• RevenueCat, Apple, and Google for subscriptions, purchase restoration, and store operation.
• Professional advisers or authorities when reasonably necessary to comply with law or protect rights and safety.

We do not sell or rent personal information and do not share it for targeted or cross-context behavioral advertising. If Rikhath undergoes a merger, financing, acquisition, or sale, information may transfer subject to this policy and applicable law.

6. Retention and deletion

• Vault and account information is kept while your account exists, unless you delete individual items sooner.
• First-party categorical product events expire after 90 days.
• Authentication challenges are short-lived. Sessions and push registrations are invalidated when appropriate, including sign-out and account deletion.
• After account deletion, active account records and linked content are hard-deleted. Uploaded objects are deleted immediately on a best-effort basis and a delayed prefix cleanup catches uploads that were still in flight.
• Encrypted database backups are scheduled to expire after 35 days. Deleted data may remain in a protected backup until that backup expires, is isolated from ordinary use, and is subject to deletion reconciliation before any recovery could serve users.
• A content-free billing event record may be retained without the account association for financial integrity, fraud prevention, and webhook idempotency. A billing deletion job may retain only an opaque account identifier until RevenueCat confirms deletion.

We may retain limited information longer when required by law, to resolve disputes, or to protect the service, and will keep it only for the necessary purpose.

7. Your controls and rights

In Unlater Settings you can export a portable copy of your account, correct or remove derived content, delete saved items, control AI and external processing, manage notifications, and permanently delete your account. Account deletion does not cancel an Apple or Google subscription, which must be managed in the applicable store.

Depending on where you live, you may also have rights to access, correct, delete, restrict or object to processing, portability, withdraw consent, and appeal or complain to a supervisory authority. We do not discriminate for exercising a privacy right. Contact us to make a request; we may verify that the request belongs to your account.

8. Security, transfers, and children

Release builds require TLS. Unlater uses encrypted on-device storage, platform secure storage, private object storage, encrypted managed persistence, restricted workload identities, and access controls. No system can guarantee absolute security.

Rikhath is based in the United States and providers may process information in the United States or other countries. Where required, we use appropriate transfer safeguards.

Unlater is not directed to children under 13, and we do not knowingly collect their personal information. If local law requires a higher minimum age to consent to online services, that higher age applies.

9. Changes and contact

We may update this policy as Unlater changes. Material changes will be presented through the app or another appropriate channel before they take effect when required.