Your data, your choices
Privacy policy
Operated by ARVELABS LTD (formerly OGY DIGITAL LTD) · Company no. 15848226 · Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact: info@ogydigital.com.
What this policy covers
This policy describes the Unheated iPhone app and unheated.app. Unheated is operated by ARVELABS LTD (formerly OGY DIGITAL LTD), which is responsible for the personal data described here. Unheated is intended for adults aged 18 or older. It supports self-monitoring and coping; it does not provide medical treatment.
Your records on your iPhone
Your profile, usual stick count, products, pack price and currency, plans, stick logs, trigger tags and craving check-ins are stored on your device. Your personal reason, savings goal and reminder settings are also local. No account is required to use the core app. Records can reveal information about tobacco use and health, so treat exports as sensitive.
The app uses iOS file protection. Device backups may contain app data according to your Apple settings. An export is a file you choose to save or share; we do not receive it automatically. Local records remain until you delete them or remove the app, subject to any device backup you retain.
Optional account and cloud sync
If you choose an account, Supabase processes your email address, account identifier and authentication information to sign you in. When you select Sync now, your baseline, products, plans, daily targets, logs, trigger tags and check-ins are associated with that account. Your personal reason, savings goal and analytics choice remain on the device.
The configured database region is Tokyo, Japan. The purpose is to store and sync the records you choose to send. Cloud records remain with the account until you delete individual records through sync or delete the account. Access is restricted by account permissions. This is not a claim of end-to-end encryption.
Optional product analytics
If you opt in, PostHog receives limited app-action events, permitted experiment identifiers, a pseudonymous device identifier and technical information used by the SDK. Session replay, automatic interaction capture and automatic screen capture are disabled. Personal reasons, trigger names and exact stick-log times are not included in analytics events. Analytics is not tied to the cloud account email by the app.
You can turn off analytics in You → Privacy & your data. This stops future optional events. It does not automatically delete events already received by the analytics provider. Contact us to request deletion of those records; we may need information that allows us to locate them. Analytics events are kept under the provider’s retention settings until they expire or are deleted on request.
Purchases
Apple processes App Store payments. Unheated does not receive your complete payment-card details. RevenueCat and Superwall process purchase and app-user identifiers, entitlement status and associated technical or paywall information to present offers, restore purchases and provide access. They do not receive your local stick journal from the app.
Purchase records may need to be retained to restore access, handle refunds, prevent fraud or meet legal obligations. Deleting an Unheated account does not delete records Apple holds or cancel an Apple subscription.
This website and support
Vercel hosts the website and processes normal connection data, such as IP address, requested URL, browser information and request time, for delivery and security. This site uses DataFast to measure page visits and traffic sources, and serves its fonts locally. Custom goals measure app and guide link clicks, language changes, support email clicks and whether the calculator was used. These goals attach only an allowlisted page language and interface placement, not the numbers or text you enter. The savings calculator and journal search run in your browser; this integration does not send their inputs to DataFast or connect website visits to your app account or private journal.
Website analytics is separate from optional PostHog analytics in the iPhone app; the app's analytics toggle does not control DataFast on this website. DataFast describes using cookies and IP addresses for website analytics and keeps website analytics under its own retention settings. See DataFast's privacy policy for provider information.
If you email support, the message and contact details are used to answer your request. Send only information needed to investigate the problem. Do not send passwords or one-time codes. Support records should be kept only as needed to resolve the request, handle related follow-up and meet applicable obligations.
Service providers and international processing
The providers described above process information for the relevant service, subject to their terms and applicable data-protection obligations. Information may be processed outside your country; where it is, we rely on the data-protection terms and transfer safeguards these providers offer. We do not sell your journal or use it for targeted advertising.
Provider information: Supabase, PostHog, RevenueCat, Superwall, Vercel, and Apple.
Your controls and deletion
- Export: You → Privacy & your data → Export my data.
- Delete local records: choose Delete data on this iPhone. Cloud records and subscriptions remain.
- Delete the account: while signed in, choose Delete account and all data. After successful cloud deletion, the app also clears this iPhone.
- Withdraw analytics consent: turn off Anonymous product analytics.
- Cancel purchases: use your Apple subscription settings.
Deletion from active account records does not necessarily erase copies already included in restricted provider backups immediately; those copies expire on the providers’ backup schedules. Keep any export you want before deleting data.
Privacy requests
Depending on where you live, you may have rights to access, correct, erase or receive your personal data, restrict processing, object to processing, and withdraw consent. You may also complain to your local data-protection authority. We process app records to provide the features you choose (including optional sync), optional analytics only with your consent, and website and security data for our legitimate interest in running a reliable, safe service.
Send privacy requests to info@ogydigital.com. We may request proportionate verification before disclosing or deleting account data.
Updates
We will update the date above when this policy changes and explain material changes before introducing a new use of your data that requires notice or consent.