Privacy Policy

Last updated: 2026-10-22

Unplayist (“we”, “us”) provides audio book unplays via unplayist.com and our Android app on Google Play. This policy explains what we collect, why we collect it, and the rights you have. We aim to keep it readable — if anything below is unclear, email unplayist@gmail.com and we’ll explain.

1. Data we collect

Account. When you sign in with Google we receive your name, email address, profile photo URL, and a stable Google account identifier. If your Google profile includes a language preference, we store it too so we can format dates correctly. We never see your Google password.
Library & playback. The unplays you save, your listening progress, and (when you create them) your private notes. This is stored against your account so you can pick up on any device.
Comments. When you post a comment on a book, we store its text and show it publicly under your name and profile photo once a moderator approves it.
Basic request logs. Standard web server logs (IP address, user agent, timestamps) kept short-term for security, abuse prevention, and performance debugging.

2. What we do NOT collect

We do not collect your contacts, calendar, or address book.
We do not collect precise location. Our Android app does not request location permission. Offline downloads use on-device storage only.
We do not sell, rent, or trade your personal information.
We do not embed third-party advertising SDKs in the app (Google Play Data Safety: Ads = No).
We do not collect biometric, financial, health, or children-specific data.

3. How we use your data

To sign you in and keep your account secure.
To save your library and progress so you can resume on any device.
To diagnose crashes and improve reliability.
To send you operational emails (security alerts, important changes to this policy). We do not send marketing email today.

4. Legal bases (EEA & UK users)

Contract. Creating and operating your account, saving your library and progress.
Legitimate interest. Security, abuse prevention, basic product analytics on aggregated usage.
Consent. Any feature that explicitly asks you (e.g. push notifications, in the future). We will not rely on consent retroactively.

5. Storage, security and processors

Account data is stored in PostgreSQL databases we operate. Data is encrypted in transit with TLS 1.2 or higher; at rest it is protected by our cloud provider’s standard disk encryption. Access to production data is restricted to the engineering team on a need-to-know basis and logged.

We rely on Google (for Sign-In) and a small number of infrastructure providers (hosting, CDN, email delivery). These act as processors on our behalf and do not receive your data for their own marketing.

6. International transfers

Our infrastructure is operated outside the EEA / UK. Where applicable we rely on the European Commission’s Standard Contractual Clauses (or equivalent transfer mechanisms) with our processors.

7. Retention

We keep account data while your account is active. When you delete your account (see below) we remove or anonymise your profile, library, and progress promptly. Anonymised system logs may be kept for up to 90 days for security and fraud prevention, then deleted.

8. Your rights

Depending on where you live, you can ask us to:

access the personal data we hold about you;
correct inaccurate data;
delete or anonymise your data;
export a portable copy of your data (where applicable);
object to or restrict certain processing based on legitimate interest.

Email unplayist@gmail.com from the address linked to your account. We respond within 30 days (1 month in the EEA / UK). You also have the right to complain to your local data-protection authority.

9. California residents (CCPA / CPRA)

We collect the categories of personal information listed above for the purposes described above. We do not sell or share personal information for cross-context behavioural advertising. California residents have the right to know, delete, correct, and limit certain processing — please email the address above to exercise them.

10. Children

Unplayist is intended for users aged 13 and over (16 in the European Economic Area). We do not knowingly collect data from children under those ages. If you believe a child has signed up, email us and we’ll delete the account.

11. Changes

We will post changes to this policy on this page and update the date above. Material changes will be highlighted in-app or by email before they take effect.

12. Contact

Privacy questions, data requests, or anything else: unplayist@gmail.com.

Last updated: 2026-10-22

1. Data we collect

Account. When you sign in with Google we receive your name, email address, profile photo URL, and a stable Google account identifier. If your Google profile includes a language preference, we store it too so we can format dates correctly. We never see your Google password.

Library & playback. The unplays you save, your listening progress, and (when you create them) your private notes. This is stored against your account so you can pick up on any device.

Comments. When you post a comment on a book, we store its text and show it publicly under your name and profile photo once a moderator approves it.

Basic request logs. Standard web server logs (IP address, user agent, timestamps) kept short-term for security, abuse prevention, and performance debugging.

2. What we do NOT collect

We do not collect your contacts, calendar, or address book.

We do not collect precise location. Our Android app does not request location permission. Offline downloads use on-device storage only.

We do not sell, rent, or trade your personal information.

We do not embed third-party advertising SDKs in the app (Google Play Data Safety: Ads = No).

We do not collect biometric, financial, health, or children-specific data.

4. Legal bases (EEA & UK users)

Contract. Creating and operating your account, saving your library and progress.

Legitimate interest. Security, abuse prevention, basic product analytics on aggregated usage.

Consent. Any feature that explicitly asks you (e.g. push notifications, in the future). We will not rely on consent retroactively.

5. Storage, security and processors

8. Your rights

Depending on where you live, you can ask us to:

access the personal data we hold about you;

correct inaccurate data;

delete or anonymise your data;

export a portable copy of your data (where applicable);

object to or restrict certain processing based on legitimate interest.

Email unplayist@gmail.com from the address linked to your account. We respond within 30 days (1 month in the EEA / UK). You also have the right to complain to your local data-protection authority.

9. California residents (CCPA / CPRA)