Privacy Policy
Last updated: March 31, 2026
AFOM Solutions Pvt Ltd
Operating under the brand name Unstuck
CIN: U72200TG2019PTC134304
16-9-417/A/1, Near Water Tank, Opposite R J Function Hall Old Malakpet, Hyderabad, Telangana 500036, India
Website: unstuckforlife.com | Email: hello@unstuckforlife.com
AFOM Solutions Pvt Ltd, operating under the brand name Unstuck ("we," "us," or "our"), operates the Unstuck mobile application (the "App") through its website unstuckforlife.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our App. AFOM Solutions Pvt Ltd is the data controller for your personal information. Unstuck is a mental health support application that provides guided audio sessions, daily journaling tools, and exposure therapy features to help users manage anxiety, panic attacks, and intrusive thoughts.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide when you create an account and use the App:
- Account Information: Phone number (required for authentication), email address (optional), display name, gender, and profile photo.
- Journal Entries: Mood ratings, anxiety levels, sleep quality, energy levels, and any free-text reflections you record in your daily journal.
- Exposure Therapy Logs: Records of your exposure therapy sessions, including anxiety ratings (SUDS scores), session notes, hierarchy items, and progress data.
- Playlists and Saved Tracks: Audio content you save, favorite, or organize into playlists within the App.
- Profile Photo: An optional avatar image you upload to personalize your account.
1.2 Information Collected Automatically
When you use the App, we may automatically collect certain technical information:
- Device Information: Device type, operating system version, and unique device identifiers necessary for push notification delivery.
- Usage Data: App feature usage patterns, session duration, and interaction data to improve our services.
- Log Data: Error logs and crash reports to diagnose and fix technical issues.
We do not currently use any third-party analytics services. If we add analytics in the future, we will update this Privacy Policy accordingly.
1.3 Information from Third-Party Authentication
If you choose to sign in using a third-party service, we receive limited information from that provider:
- Google OAuth: Your name, email address, and profile picture associated with your Google account.
- Facebook/Meta OAuth: Your name, email address, and profile picture associated with your Facebook account.
- Apple Sign-In: Your name and email address (or a private relay email address if you choose to hide your email) associated with your Apple ID.
- Phone OTP: Your phone number, which is used to send a one-time verification code via SMS.
We do not receive or store your passwords from any third-party authentication provider.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Maintain the App: To create and manage your account, deliver the core features of the App (guided audio, journaling, exposure therapy), and personalize your experience.
- Authentication: To verify your identity when you sign in via phone OTP, Google, Facebook, or Apple.
- Improve Our Services: To understand how users interact with the App and identify areas for improvement, bug fixes, and new feature development.
- Communications: To send you important service-related notifications, such as security alerts, account verification messages, and updates to our terms or policies.
- Safety and Security: To detect, prevent, and address technical issues, fraud, and abuse.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
We do not use your journal entries, exposure therapy logs, or other mental health data for advertising, marketing, or any purpose other than providing and improving the App's core functionality for you.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:
3.1 Service Providers
We use trusted third-party service providers to operate and support the App. These providers have access to your information only to perform specific tasks on our behalf and are contractually obligated to protect your data:
- Supabase: Provides our database (PostgreSQL), user authentication, and file storage infrastructure. Your account data, journal entries, exposure therapy logs, and uploaded files (audio, profile photos) are stored on Supabase servers located in the US East region. Supabase processes data in accordance with their privacy policy and data processing agreements.
- Twilio: Provides SMS delivery for phone number verification (one-time passcodes). Twilio receives your phone number solely for the purpose of sending verification codes and does not use it for any other purpose.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with a legal obligation, court order, or legal process.
- Protect and defend our rights or property.
- Prevent or investigate possible wrongdoing in connection with the App.
- Protect the personal safety of users of the App or the public.
- Protect against legal liability.
3.3 Business Transfers
If Unstuck is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice within the App before your information becomes subject to a different privacy policy.
4. Data Storage and Security
Your data is stored securely on Supabase infrastructure located in the US East region. We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of data at rest on our database servers.
- Row-level security policies on our database to ensure users can only access their own data.
- Secure authentication via one-time passcodes (OTP), OAuth tokens, and JSON Web Tokens (JWT).
- Regular security reviews of our infrastructure and access controls.
While we take reasonable measures to protect your information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
- Account Data: Retained for the duration of your active account.
- Journal Entries and Exposure Logs: Retained for the duration of your active account so you can access your historical data and track your progress over time.
- Uploaded Files: Profile photos and other uploaded content are retained for the duration of your active account.
- Technical Logs: Crash reports and error logs are retained for up to 90 days for debugging purposes.
When you delete your account, all of your personal data, including journal entries, exposure therapy logs, playlists, saved tracks, profile photos, and account information, is permanently deleted from our systems. This deletion is irreversible.
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: You can access your personal data at any time through the App's profile and settings screens.
- Correction: You can update or correct your account information (name, email, gender, profile photo) through the App's settings.
- Deletion: You can delete your account and all associated data at any time through the App's account settings. Upon deletion, all your data is permanently removed from our servers.
- Data Export: You can request a copy of your personal data by contacting us at hello@unstuckforlife.com.
- Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting us or adjusting your settings within the App.
- Opt Out of Communications: You can manage your notification preferences within the App's settings or by contacting us.
7. Additional Rights for EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
7.1 Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Performance of a Contract: Processing your account data, journal entries, and exposure therapy logs is necessary to provide you with the App's services that you have requested.
- Consent: Where you have given specific consent, such as when you voluntarily provide optional data (email, profile photo) or choose to sign in via a third-party provider.
- Legitimate Interests: Processing for purposes such as improving the App, ensuring security, and preventing fraud, where these interests are not overridden by your data protection rights.
- Legal Obligation: Where we are required to process data to comply with applicable law.
7.2 Your GDPR Rights
In addition to the rights listed in Section 6, EU/EEA users have the right to:
- Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
- Restriction of Processing: Request that we restrict the processing of your personal data under certain circumstances.
- Object to Processing: Object to the processing of your personal data based on legitimate interests.
- Lodge a Complaint: File a complaint with your local data protection supervisory authority if you believe your rights have been violated.
To exercise any of these rights, please contact us at hello@unstuckforlife.com. We will respond to your request within 30 days.
7.3 International Data Transfers
Your personal data is stored and processed in the United States. If you are located in the EU/EEA, your data is transferred to the United States on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards as required by applicable law. By using the App, you acknowledge this transfer.
8. Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
8.1 Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers: Phone number, email address, name, and unique account identifiers.
- Personal Information under Cal. Civ. Code 1798.80(e): Name, phone number, and email address.
- Characteristics of Protected Classifications: Gender (voluntarily provided).
- Internet or Network Activity: App usage data, interaction history, and device information.
- Sensory Data: Profile photos you upload.
- Sensitive Personal Information: Health-related data including mood ratings, anxiety levels, sleep quality, energy levels, journal entries, and exposure therapy session logs. This information is collected and used solely to provide the App's core mental health support functionality at your direction.
8.2 Your CCPA/CPRA Rights
As a California resident, you have the right to:
- Know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
- Delete: Request deletion of your personal information, subject to certain exceptions.
- Correct: Request correction of inaccurate personal information.
- Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. There is no need to opt out because we never engage in these practices.
- Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information. We only use your health-related data for the purpose of providing the App's services to you.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise your CCPA/CPRA rights, please contact us at hello@unstuckforlife.com. We will verify your identity before processing your request and will respond within 45 days.
8.3 Do Not Sell or Share My Personal Information
We do not sell your personal information to third parties. We do not share your personal information with third parties for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.
9. Health and Sensitive Data
The App collects and processes data related to your mental health, including mood ratings, anxiety levels, sleep quality, energy levels, journal reflections, and exposure therapy progress. We understand the sensitive nature of this information and are committed to handling it with the utmost care.
- Your mental health data is used exclusively to provide the App's core features: journaling, mood tracking, and exposure therapy tools.
- We do not use your health data for advertising, marketing, or profiling.
- We do not share your health data with third parties for their own purposes.
- Your health data is stored with the same security measures described in Section 4 and is subject to row-level security policies ensuring only you can access your own data.
- You can delete all of your health data at any time by deleting your account.
Please note that Unstuck is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or condition. The App is designed to provide self-help tools and is not a substitute for professional medical or psychological care.
10. Children's Privacy
Unstuck is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not use the App or provide any personal information to us.
If we become aware that we have collected personal information from a child under 13, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and you believe your child under 13 has provided us with personal information, please contact us at hello@unstuckforlife.com so that we can take appropriate action.
For users between the ages of 13 and 18 (or the age of majority in their jurisdiction), we recommend that a parent or guardian review this Privacy Policy and supervise their use of the App.
11. Third-Party Links and Services
The App may contain links to third-party websites, services, or content that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.
Third-party authentication providers (Google, Facebook/Meta, and Apple) have their own privacy policies governing how they handle your data. We encourage you to review their policies:
12. Push Notifications
With your permission, we may send push notifications to your device to provide reminders, encouragement, and updates related to the App's features. You can disable push notifications at any time through your device's settings or the App's notification settings.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify you via a prominent notice within the App or by email (if you have provided one) before the changes take effect.
- Where required by law, obtain your consent before applying material changes.
We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: hello@unstuckforlife.com
- Company: AFOM Solutions Pvt Ltd
- CIN: U72200TG2019PTC134304
- Address: 16-9-417/A/1, Near Water Tank, Opposite R J Function Hall Old Malakpet, Hyderabad, Telangana 500036, India
- Website: unstuckforlife.com
For GDPR-related inquiries, please include "GDPR Request" in the subject line of your email. For CCPA-related requests, please include "CCPA Request" in the subject line. We will acknowledge your request within 72 hours and provide a substantive response within the timeframes required by applicable law.