Privacy Policy

Last updated: December 2025

Introduction

At Unveil, we take the protection of your personal data seriously. This privacy policy explains what data we collect, how we use it, and your rights.

Data Controller

The data controller is:

Data Collected

Account Data

  • Email address (for authentication)

Calendar Data

  • Calendar title
  • Recipient name
  • Day content (text, images)
  • Start and end dates

Technical Data

  • IP address (server logs)
  • Browser type
  • Language preferences

Purpose of Processing

Your data is used to:

  • Provide the Unveil service (creating and sharing calendars)
  • Authenticate your account
  • Improve our service
  • Respond to support requests

The processing of your data is based on:

  • Contract performance: to provide the service
  • Your consent: for optional communications
  • Legitimate interest: to improve the service and ensure security

Data Retention

  • Account data: retained as long as your account is active
  • Calendars: retained until deleted by the user
  • Technical logs: 12 months maximum

Data Sharing

We never sell your data. It may be shared with:

  • Supabase: database and file hosting
  • Vercel: website hosting

These providers comply with GDPR or equivalent data protection standards.

Your Rights

Under GDPR, you have the following rights:

  • Access: obtain a copy of your data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Portability: receive your data in a structured format
  • Objection: object to the processing of your data

To exercise these rights, contact us at: contact@unveil.app

Security

We implement appropriate security measures:

  • Data encryption in transit (HTTPS)
  • Secure authentication (magic links)
  • Restricted data access

Changes

This policy may be updated. In case of significant changes, we will notify you by email.

Contact

For any questions about this policy, contact us via our contact page.