Privacy

This website

Fonts and images are served from the same place as the page. The contact form uses Cloudflare Turnstile to check for automated submissions; this sends technical browser and network information to Cloudflare. In production, Sentry receives technical error reports to help us fix faults. Session replay and performance tracking are disabled, and request data and user details are removed from reports.

The server keeps ordinary request logs for a short period so that faults can be diagnosed. They are not used to build a picture of a visitor.

Optional analytics

If you allow analytics, PostHog in the European Union helps us understand page visits, account creation, setup completion, plan use and subscription conversion. The website and app share an analytics identifier so we can understand the journey between them. After sign-in it is linked to a pseudonymous account identifier. We do not send your name, email, health details, calendar content, recipes, form answers or recordings.

Your browser choice and, if allowed, analytics cookies are stored for up to six months. Declining leaves the service fully usable. Change your choice with the Analytics preferences button below or in the app’s Account page. While signed in, declining also disables account and subscription analytics. If you are signed out, change that account preference after signing in. Contact us to request removal of earlier analytics data.

Analytics preferences

When you write to us

The contact form collects your email address, your message and, if you give it, your name. It is used to answer you, kept for twelve months and then deleted.

If you join the waiting list, we keep your email address and the date until the product opens, so that we can tell you once. You can ask to be removed at any time and it is removed.

When you use the app

An account holds your email address and the preferences you set: wake and sleep times, the activities and supplements you enable, your training plan, the people you cook for, and their dietary needs. The app stores the plans it builds for you and what you marked as done.

If you connect Google Calendar, the app reads the events in a bounded window so it can plan around them, and stores them until they pass. If you separately enable calendar export, it writes your scheduled blocks to a dedicated Unhasten calendar. Family meal times appear there with your personal blocks. Reading your calendar does not share its titles or details with family members. Disconnecting removes imported events from the app.

In a shared family, adults can see and edit meals, dietary restrictions needed for shared food, meal attendance, cooking assignments, shared recipes and shopping lists. Each adult controls their own nutrition profile. Body measurements, personal targets and calendar details stay private. Free/busy availability is shared only if you choose it. The family owner manages invitations and membership; payment details remain with the payer.

A saved shopping checklist can remain on a device for up to seven days. Its offline copy excludes people’s names, photos and health details. Membership is checked again when reconnecting.

There is no food, weight or step logging to collect, because the product does not ask for any.

Who else touches it

• Hosting and the database, in the European Union.
• The payment provider, which handles cards and invoices. Card details never reach us.
• The email provider that delivers your messages and ours.
• PostHog, hosted in the European Union, receives the limited usage events described above only when you allow analytics.
• Cloudflare Turnstile checks contact submissions, sign-ins and account registrations for automated abuse.
• Sentry receives technical error reports from the website, app and backend through its US endpoint. These reports are used to diagnose faults, not to track visits or record sessions.
• An AI provider, which receives the information needed to lay out your week: activity and supplement names, your wake and sleep times, calendar event titles and times, and whether you are travelling. It does not receive your email address, your password or your family’s health details, and nothing sent to it is used to train a model. Nutrition planning runs on our own servers and sends nothing anywhere.

Deleting it

Deleting your account removes your personal plans, preferences and stored calendar events. Shared family meals, recipes and shopping lists can remain for the other members. Your measurements and nutrition targets are removed from shared profile history; historical serving quantities remain so prepared food and past meals stay understandable. An owner must first transfer ownership to an accepting adult or close the family. Ask us and we will confirm what was removed. Accounting records of payments are kept as long as tax law requires, which is the one thing we cannot delete on request.

Your rights

Under the GDPR you can ask for a copy of your data, have it corrected, have it deleted, or object to how it is used. Write to the address below and we will answer within a month. If you are not satisfied, you can complain to the State Data Protection Inspectorate in Lithuania.

Asking us anything

Write to privacy@unhasten.com and a person will answer.