DRAFT, NOT LEGALLY REVIEWED
Effective date: November 4, 2026
The controller under the GDPR is Christian Hoffmann, Mönchstraße 11, 18439 Stralsund, Germany, email: info@unsealy.de.
Unsealy is a private door calendar. You create a calendar with one image for each of its days, up to 31, or join one with an invite code, and each door opens on its date.
Your acceptance of this policy (policy version and date), your language, your theme and which doors you have opened are stored on your device. They are not sent to us, except your language for the daily reminder as described above. They are removed when you uninstall the app or clear its data.
If you turn on the app lock, a salted hash of your PIN, the account it belongs to, your choice about Face ID or fingerprint and the number of wrong tries are stored in your device's secure storage. They are never sent to us and do not sync to other devices. They are removed when you turn off the lock, sign out or delete your account. Face ID and fingerprint are checked by your phone's operating system, which only tells Unsealy whether the check passed; Unsealy never receives biometric data.
We process account and calendar data to provide the service you asked for (Art. 6(1)(b) GDPR). We process IP addresses for the security of the service (Art. 6(1)(f) GDPR). Without an email address and password you can only join calendars as a guest; creating a calendar needs both. There is no automated decision-making.
We process reports to keep the service safe and to act on content that breaks the rules (Art. 6(1)(f) GDPR).
Google provides Firebase as our processor under the Firebase Data Processing and Security Terms. Data sent to the United States is transferred under the EU-U.S. Data Privacy Framework, for which Google LLC is certified, and under Google's standard contractual clauses where those terms apply them.
Sources: https://firebase.google.com/support/privacy and https://firebase.google.com/terms/data-processing-terms
If you write to info@unsealy.de, we process your address and your message to reply to you (Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for a contract enquiry). Our email provider is united-domains. We forward incoming messages to a Gmail mailbox at Google and also store them there. Data may be transferred to the USA in the process. We delete messages once they are dealt with, unless we must keep them by law.
Deleting your account in the app deletes all data linked to it: your login (your email address and password in Firebase Authentication, or your anonymous account ID), every calendar you created with its doors, images, thumbnails, memberships, join requests and invite codes, your membership, display name and open join requests in other people's calendars, your list of joined calendars, your reminder registrations and, on this device, which doors you opened. If a step fails, the app tells you and you can try again. Firebase then removes your login from live and backup systems within 180 days, and Cloud Storage can keep deleted images recoverable for up to 7 days before removing them for good. If you are still signed in on another device, it can keep working for up to about an hour after the deletion, and whatever it saves in that time is not deleted automatically. So sign out on other devices first, or write to info@unsealy.de if something was saved after you deleted your account.
A guest cannot sign back in after signing out. Signing out removes the reminder registration and which doors you opened from the device, but your anonymous account ID, memberships, display names and join requests stay until a calendar's owner removes them or you write to info@unsealy.de. If you write to us, we delete your account ID and all data linked to it. Deleting your guest account in the app needs no password and deletes the same data as for any other account.
The app removes the reminder registration of a device when you sign out on it, and of all your devices when you delete your account.
A join request is deleted when it is accepted, declined or withdrawn. Your membership and display name in a calendar are deleted when you leave it or its owner removes you. A list entry with only the calendar's ID stays under your account so the app can look it up, and it gives no access. It is deleted with your account.
When someone deletes their account, every calendar they created is deleted for all its members too, with all its images, and the members are not told first. It then disappears from the app of everyone who belongs to it or asked to join it. Someone who left it or was removed earlier keeps the list entry with only the calendar's ID until they delete their own account.
We delete a report within 30 days after we have dealt with it, unless we need it longer for a legal claim or the police. This also applies if you or the person reported delete the account in the meantime. If an account breaks the rules, we can disable it.
An entry on your block list stays until you unblock the person. Your block list and your list of sent reports are deleted with your account.
Firebase removes installation IDs from live and backup systems within 180 days after they are deleted. Firebase keeps IP addresses logged by Authentication for a few weeks and those logged by Hosting for a few months.
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15 to 21 GDPR). To use them, write to info@unsealy.de. You can also complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Vorpommern.
If this policy changes, the app asks you to accept the new version.