Privacy Policy

Last Updated: August 2026 · App: Undo (Web & Mobile)

1. Privacy-First Philosophy (Zero Data Retention)

Undo is designed from the ground up as a private sanctuary. Our fundamental principle is that your thoughts belong only to you. By default, your journal entries and ephemeral thoughts are stored locally on your device and are permanently destroyed when their countdown expires.

2. Data We Collect and How It Is Handled

Data Category	Storage Location	Retention Policy
Temporary Thoughts & Entries	Local Device Only (Encrypted AsyncStorage)	Auto-purged permanently after timer (10m, 1h, 3h, 24h, 7d, 30d)
Daily Focus Intentions (To-Do)	Local Device Only	Auto-resets at midnight (or saved in user vault if toggled)
Account & Authentication	Supabase Auth (Google OAuth)	Email and name used strictly for sign-in & subscription sync
Subscription Payments	Razorpay Payment Gateway	Processed via PCI-DSS compliant Razorpay APIs. No card/UPI pins stored by Undo.

3. Security & Anti-Surveillance Features

Biometric Security Lock: FaceID / Fingerprint / Device PIN authentication before opening the app.
Stealth Calculator Disguise: Conceals Undo behind a fully functional standard calculator until a secret PIN is typed.
Duress Panic Wipe: Instant emergency data flush upon entering a duress code or panic trigger.

4. Third-Party Services

Supabase: For secure OAuth authentication.
Razorpay: For secure in-app payments (UPI, Cards, NetBanking).

5. Contact Us

If you have any questions regarding our privacy practices, please contact us at support@undo.app.