UnmuteHome

Privacy Policy

Effective November 4, 2026

This Privacy Policy explains what personal data Bedroomlabs SRL ("Bedroomlabs", "we", "us") collects when you use the Unmute app for iOS (the "App") and the website at unmute.bedroomlabs.co (the "Website"), why we collect it, who we share it with, and the rights you have. We wrote it to be read, not skimmed past.

The short version: we collect only what Unmute needs to work. We never upload your voice; speech is turned into text on your phone. We don't sell or "share" your data for advertising, we don't run ads, and we don't use third-party analytics or tracking. You can delete your account and all its data in the App at any time.

1. Who is responsible for your data

The data controller is Bedroomlabs SRL, Strada Garoafei 17, Bloc S1, Scara B, Etaj 1, Apartament 28, Mărășești, Vrancea, Romania (CUI 54738881, ONRC J2026033450009, EUID ROONRC.J2026033450009). For anything about your data, including exercising your rights, email hi@bedroomlabs.co.

2. What we collect

Account data. When you sign in with Apple or Google, we receive a unique account identifier, your email address (with Sign in with Apple this may be a private relay address) and, if you allow it, your name and profile picture from the provider.

Profile data. The name Unmute calls you, your account name, and a profile picture if you upload one. Uploaded pictures are cropped to at most 512 × 512 pixels and stored at a web address that isn't guessable but isn't protected by a password either, so treat it as semi-public.

Onboarding answers. During onboarding we ask about you so we can tailor your plan: your goal, how you heard about Unmute, gender, age range, how often social situations come up, how you feel and what you think in them (for example, anxious thoughts and physical feelings you choose from a list), a short plan you write yourself, and your starting confidence scores. Some of these answers may reveal information about your mental wellbeing. You choose what to answer, and we use these answers only to personalise Unmute for you.

Progress data. Quests, lessons and missions you complete, XP and confidence scores, streaks and activity dates, and the reflections you write in lessons.

Practice data. When you use Practice, the App uses your iPhone's microphone and Apple's speech recognition to turn what you say into text. Where your device supports it, recognition happens entirely on the device; where it doesn't, Apple may process the audio on its servers under Apple's own privacy policy. We never receive, upload or store your audio. We receive the text transcript, the prompt you chose and how long you spoke, and we store the transcript with the feedback and scores generated from it.

Subscription data. Apple processes your payment; we never receive your card or bank details. Through RevenueCat we receive an anonymous app user ID linked to your account, the products you bought, the dates of purchases and renewals, your App Store country and currency, and basic device information (such as device model, iOS version and app version) needed to validate purchases.

Notifications. If you allow notifications, reminders (such as your daily reminder or a streak about to end) are scheduled locally on your phone. We don't send push notifications from our servers and don't collect a push token.

Data stored only on your phone. The App keeps some settings and caches on your device, such as your reminder time, your profile picture cache, and onboarding answers waiting to upload before you sign in.

Waitlist. If you join the waitlist on the Website, we store your email address, the time you joined and your consent to receive emails from us.

Support. If you email us, we keep your message and email address to reply.

We do not collect your precise location, contacts, photos library (only the single picture you choose to upload), browsing history, advertising identifier (IDFA) or any audio recordings.

If you are in the EU/EEA or UK, we must have a legal basis under the GDPR for each use:

We don't use your data for advertising, we don't sell it, and we don't make decisions with legal or similarly significant effects about you based solely on automated processing. Practice scores are generated automatically, but they are only feedback for you and have no effect on your account or your rights.

4. AI feedback

When you finish a practice session, the transcript and the prompt are sent through our server to Google's Gemini API, which generates your feedback and scores. We send only the text, never audio, and never your name, email or other account details. Google processes this data as our service provider under its paid API terms, which don't allow it to use the content to train its models. Google may keep it for a limited period to detect abuse, as its terms describe.

5. Who we share data with

We share personal data only with the service providers that run Unmute for us, each bound by a data processing agreement, and only as much as each one needs:

We may also disclose data if the law requires it, to protect the rights, safety or property of our users or others, or to a company that takes over the Service, in which case this Policy continues to protect your data. We never sell your personal data, and we never share it for cross-context behavioural advertising.

6. International transfers

Some of our providers are based in, or process data in, the United States and other countries outside the EU/EEA. Where they do, we rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed.

7. How long we keep it

8. Your rights

Wherever you live, you can ask us to access, correct or delete your personal data, and you can delete your account yourself in the App (You › your picture › Edit profile › Delete Account). Remember to cancel your subscription with Apple separately.

If you are in the EU/EEA or UK, under the GDPR you also have the right to receive your data in a portable format, to restrict or object to processing based on our legitimate interests, and to withdraw consent at any time. You can complain to your local data protection authority. In Romania, that is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

If you are a California resident, under the CCPA as amended by the CPRA you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. We don't sell or share personal information, and we use sensitive personal information (such as account log-in details and any wellbeing-related onboarding answers) only to provide the Service you asked for, as the CPRA permits. We will not discriminate against you for exercising your rights. In the last 12 months we collected these categories: identifiers (name, email, account IDs); customer records; commercial information (subscription purchases); internet or other electronic activity (in-app progress and usage needed to run the Service); audio information only in the sense that your voice is processed on your device and never collected by us; inferences (confidence scores); and sensitive personal information as described above. We disclose them only to the service providers in section 5, for the business purposes described in this Policy.

If you live in another U.S. state with a consumer privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon), you have similar rights to access, correct, delete and obtain a copy of your data, and to opt out of targeted advertising, sales and profiling. We don't do any of those things. If we refuse a request, you can appeal by replying to our answer.

To exercise any right, email hi@bedroomlabs.co from the email address linked to your account. We may need to verify that the request comes from you. You may use an authorised agent where the law allows. We will reply within one month (GDPR) or 45 days (U.S. state laws), which may be extended where the law allows.

9. Security

We protect your data with encryption in transit (HTTPS/TLS), access controls so each account can only read its own data, and providers with strong security practices. No system is perfectly secure, but if a breach that affects you happens, we will tell you and the authorities as the law requires.

10. Children

Unmute is not meant for children. You must be at least 16 to use it. We don't knowingly collect data from anyone under 16; if you believe a child has given us data, email us and we will delete it.

11. Cookies and the Website

The Website doesn't use advertising or analytics cookies. It uses only what's strictly necessary to serve the pages and to send your email to the waitlist when you join.

12. Changes to this Policy

If we change this Policy in a meaningful way, we will tell you in the App or on this page before the change takes effect, and update the effective date above.

13. Contact

Bedroomlabs SRL, Strada Garoafei 17, Bloc S1, Scara B, Etaj 1, Apartament 28, Mărășești, Vrancea, Romania. Email: hi@bedroomlabs.co