Privacy policy

Version 1.0 · Updated 7 September 2026

This policy covers the Unfold waitlist and the Unfold mailing list — the signup form on this site and the emails that follow. It explains what the form collects, why, and what your choices are.

Unfold’s app isn’t open yet; when it is, it will have its own privacy terms for what it handles. This policy will keep covering the mailing list.

It’s written to be read, not to bury you in jargon. If anything is unclear, email [email protected] and ask.

Who we are

Unfold is run by Unfold AI Products Ltd (“Unfold”), a company registered in England and Wales, company number 16567499. Registered office: 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF.

Unfold is the data controller for the waitlist and mailing list, and decides what’s collected and why. For anything to do with your data, contact [email protected].

What Unfold collects when you sign up

When you use the form, Unfold stores:

  • Your email address.
  • A record of your consent: the exact wording you agreed to, a version label for that wording, and the date and time.
  • A shortened version of your IP address, with the last part removed (for example 81.108.10.0). It’s kept as evidence that the consent came from a real connection at that moment, and isn’t precise enough to identify you or your device.
  • The page you came from, if your browser shares it.
  • The date you joined, and — behind the scenes — which update email you’ve been sent up to and whether you’re still subscribed.

No name, no phone number, nothing about your health or how you use the app — the app doesn’t exist yet.

The form runs a background spam check (Cloudflare Turnstile). Turnstile briefly looks at your IP address, browser and connection to tell a person from a bot. It shows no puzzle, sets one strictly-necessary cookie to do its job, and isn’t used to track or profile you. Cloudflare’s own terms for it are at cloudflare.com/turnstile-privacy-policy.

Why, and the lawful basis

One reason: to email you when Unfold opens, plus the occasional update on what’s being built. That’s what the form is for, and the data won’t be used for anything else.

The lawful basis under UK GDPR is your consent — the box you ticked. You can withdraw it at any time (see How to unsubscribe), and doing so doesn’t affect anything done before you withdrew it.

Who Unfold shares it with

Unfold doesn’t sell your data or share it for advertising. Three service providers help run the waitlist, and each gets only what it needs:

  • Supabase — stores the waitlist and mailing list and runs the form’s backend. The data is held in a London data centre.
  • Resend — sends Unfold’s emails. It receives your email address to deliver them, and processes it in the United States.
  • Cloudflare — serves this website and runs the spam check. Like any web host, it sees your IP address when the page loads.

Each is bound by a data-processing contract that limits it to acting on Unfold’s instructions, and each publishes its own privacy terms and list of sub-processors: Supabase, Resend, Cloudflare. Unfold may also share data if the law requires it.

Where your data is held

The waitlist and mailing list data are stored in the UK (London). Sending an email routes your address through Resend in the United States, and Cloudflare, a US company, handles the site and the spam check. Where data leaves the UK it’s covered by the safeguards UK law requires — standard contractual clauses with the UK Addendum, and, for Resend, the EU–US Data Privacy Framework.

How long it’s kept

Unfold keeps your email address and consent record for as long as you’re subscribed to the mailing list — through to launch and beyond. Unfold’s app opening doesn’t end this; the mailing list carries on.

If you unsubscribe, a minimal record — your email address and the fact that you opted out — is kept so you’re not accidentally added back or emailed again. Ask for everything to be deleted and it will be.

If Unfold shuts down, or the mailing list is retired for good, the list is deleted.

Cookies

This site doesn’t use cookies to track you or to advertise. The only cookie is one strictly-necessary cookie set by the spam check to do its job.

Your rights

Under UK GDPR you can ask Unfold to:

  • send you a copy of the data held about you;
  • correct anything that’s wrong;
  • delete it;
  • stop or limit how it’s used;
  • give it to you in a portable format;
  • stop emailing you (withdraw consent).

Email [email protected] and you’ll get a response within one month. There’s no charge.

How to unsubscribe

Any of these:

  • click the unsubscribe link at the bottom of any Unfold email;
  • reply to any Unfold email with the word “unsubscribe”;
  • email [email protected].

You’ll stop receiving emails straight away.

Complaints

If you’re unhappy with how your data has been handled, tell Unfold first at [email protected] so it can be put right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Changes to this policy

If this policy changes, the version number and date at the top change with it. If a change is significant, Unfold will email you about it before it takes effect.