Privacy Policy — The Unspoken

This Privacy Policy explains how The Unspoken ("we", "us", "our") collects, uses, and protects information when you use theunspoken.io and related services (the "Service"). The Unspoken is a facilitator-led platform that surfaces anonymised reflections from couples and intending couples and converts them into training insights.

1. Who we are

The Unspoken is the data controller for personal data collected from facilitators and administrators. For anonymous survey responses submitted by respondents, the facilitator hosting the session is the data controller and The Unspoken acts as a data processor.

The Unspoken is registered with the UK Information Commissioner's Office (ICO) as a data controller under registration number ZC188145.

Contact: privacy@theunspoken.io

2. Information we collect

Facilitator account data: name, email, organisation, role, subscription tier, and billing metadata processed by our payment provider.
Survey session metadata: session codes, audience type, timestamps, and facilitator-defined settings.
Respondent submissions: answers to survey questions, relationship status, and gender. Responses are anonymous — we do not collect names, emails, or identifiers from respondents.
Technical data: device, browser, IP address, and usage logs required to secure and operate the Service.

3. How we use information

To provide the Service, generate reports, and deliver training insights.
To manage subscriptions, billing, and account communications.
To secure the platform, prevent abuse, and comply with legal obligations.
To improve the Service, using aggregated or anonymised data only.

4. Legal bases (UK/EU GDPR)

We process personal data on the bases of contract (to deliver the Service), legitimate interests (to secure and improve the Service), consent (for optional communications), and legal obligation.

5. Sharing

We share personal data only with trusted service providers necessary to run the Service — hosting, database, email delivery, payment processing, and AI processing for report generation. These processors are contractually bound to protect your data. We never sell personal data.

6. Anonymity of responses

Respondent answers are stored without personally identifying information and are only ever presented to facilitators in aggregated form. Facilitators cannot see individual identities linked to any answer.

7. Retention

Facilitator accounts and generated reports are retained while the subscription is active. If a subscription lapses or is cancelled, associated records and reports are automatically deleted seven (7) days after the effective expiry date, with prior email notice.

8. Your rights

Depending on your location, you have rights to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact privacy@theunspoken.io to exercise any right. You may also complain to your local supervisory authority (in the UK, the ICO).

9. Security

We use industry-standard measures including encryption in transit, role-based access controls, and row-level security on stored data. No system is perfectly secure; report concerns to security@theunspoken.io.

10. International transfers

Data may be processed in countries outside your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

11. Survey Response Privacy

Your survey answers are encrypted in your browser before they are transmitted, and are encrypted again at rest using AES-256 encryption. Answers are stored against an anonymous participant identifier rather than your account, so a stored response cannot be traced back to you through ordinary access to the database. No member of The Unspoken team, including system administrators, has access to individual survey responses or the full text of individual or couple reports. Administrative screens are restricted by policy and by database level controls to counts, status indicators and configuration only, and every access to confidential data is written to an immutable audit log. Facilitators only ever see aggregated group results and can never see who gave a particular answer. You can exercise your data rights at any time: go to Account and open the Privacy and data section to see your retention date, download a copy of everything we hold about you, or permanently delete your survey data. Deletion is immediate and irreversible. To close your account entirely, to request rectification, or to object to or restrict processing, email privacy@theunspoken.io and we will respond within one month.

12. Your Privacy in Plain Language

Here is the whole thing in plain English, with no legal jargon.

What we collect: your account details (name, email, plan), and your survey answers. Respondents in facilitator sessions give no name or email at all.
Who can see what: you can see your own report. Facilitators only ever see group totals, never who said what. Our team and system administrators cannot open individual answers or report text — the admin dashboard shows counts and status only.
How it is protected: answers are encrypted in your browser before they are sent, encrypted again at rest, and stored against an anonymous identifier rather than your account.
How long we keep it: 12 months. After that it is permanently deleted automatically, and we email you 30 days before that happens.
How to delete it sooner: go to Account → Privacy and data and choose Delete my data. It is immediate and irreversible. The same page has Download my data if you want a copy first.

13. Third Party AI Processing

The Unspoken uses Lovable AI (which routes requests to Google Gemini models) to analyse your survey responses and generate your personalised relationship insight report, growth priorities, action plan, and curriculum. Your survey responses are transmitted to the AI provider in anonymised form. No names, email addresses, account identifiers, or any other information that could identify you are included in the data sent for processing. The AI provider's usage policies confirm that data submitted via the API is not used to train AI models and is not retained beyond the processing of each individual request. You can read the privacy commitments at lovable.dev/privacy. The Unspoken reviews its data processing arrangements with its AI provider annually to ensure continued compliance with this commitment. If you do not wish your survey responses to be processed by the AI system please do not use the survey feature and contact us at privacy@theunspoken.io to request account deletion and data removal.

14. Platform Hosting Disclosure

The Unspoken platform is built and hosted using Lovable, a web application development and hosting platform. Please refer to Lovable's terms of service and privacy policy at lovable.dev/terms and lovable.dev/privacy to understand what data Lovable may process as part of hosting and delivering this application. The Unspoken has reviewed Lovable's data processing terms to ensure they are compatible with our privacy commitments to you. If you have any questions about how your data is handled at the platform hosting level please contact us at privacy@theunspoken.io.

15. Changes

We may update this policy from time to time. Material changes will be communicated by email or via the Service.

16. Contact

Questions? Email privacy@theunspoken.io.