Privacy policy
Last updated 3 September 2026
This covers the Unfold waitlist — the signup form on this site and the emails that follow. Unfold isn’t open yet, so the waitlist is the only thing collecting your data here for now. When the app launches, a fuller policy will cover it, and you’ll hear about any change first.
It’s written to be read, not to bury you in jargon. If anything is unclear, email [email protected] and ask.
Who we are
Unfold is run by Unfold AI Products Ltd (“Unfold”), a company registered in England and Wales, company number 16567499. Registered office: 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF.
Unfold is the data controller for the waitlist and decides what’s collected and why. For anything to do with your data, contact [email protected].
What Unfold collects when you join the waitlist
When you use the form, Unfold stores:
- Your email address.
- A record of your consent: the exact wording you agreed to, a version label for that wording, and the date and time.
- A shortened version of your IP address, with the
last part removed (for example
81.108.10.0). It’s kept as evidence that the consent came from a real connection at that moment, and isn’t precise enough to identify you or your device. - The page you came from, if your browser shares it.
- The date you joined, and — behind the scenes — which update email you’ve been sent up to and whether you’re still subscribed.
No name, no phone number, nothing about your health or how you use the app — the app doesn’t exist yet.
The form runs a background spam check (Cloudflare Turnstile). Turnstile briefly looks at your IP address, browser and connection to tell a person from a bot. It shows no puzzle, sets one strictly-necessary cookie to do its job, and isn’t used to track or profile you. Cloudflare’s own terms for it are at cloudflare.com/turnstile-privacy-policy.
Why, and the lawful basis
One reason: to email you when Unfold opens, plus the occasional update on what’s being built. That’s what the form is for, and the data won’t be used for anything else.
The lawful basis under UK GDPR is your consent — the box you ticked. You can withdraw it at any time (see How to unsubscribe), and doing so doesn’t affect anything done before you withdrew it.
Who Unfold shares it with
Unfold doesn’t sell your data or share it for advertising. Three service providers help run the waitlist, and each gets only what it needs:
- Supabase — stores the waitlist and runs the form’s backend. The data is held in a London data centre.
- Resend — sends the waitlist emails. It receives your email address to deliver them, and processes it in the United States.
- Cloudflare — serves this website and runs the spam check. Like any web host, it sees your IP address when the page loads.
Each is bound by a data-processing contract that limits it to acting on Unfold’s instructions, and each publishes its own privacy terms and list of sub-processors: Supabase, Resend, Cloudflare. Unfold may also share data if the law requires it.
Where your data is held
The waitlist itself is stored in the UK (London). Sending an email routes your address through Resend in the United States, and Cloudflare, a US company, handles the site and the spam check. Where data leaves the UK it’s covered by the safeguards UK law requires — standard contractual clauses with the UK Addendum, and, for Resend, the EU–US Data Privacy Framework.
How long it’s kept
Unfold keeps your details for as long as you’re on the waitlist. If you unsubscribe, a minimal record — your email address and the fact that you opted out — is kept so you’re not accidentally added back or emailed again. Ask for everything to be deleted and it will be.
When Unfold launches, or if the waitlist is wound down, the list is either moved over (asking for fresh consent where needed) or deleted.
Cookies
This site doesn’t use cookies to track you or to advertise. The only cookie is one strictly-necessary cookie set by the spam check to do its job.
Your rights
Under UK GDPR you can ask Unfold to:
- send you a copy of the data held about you;
- correct anything that’s wrong;
- delete it;
- stop or limit how it’s used;
- give it to you in a portable format;
- stop emailing you (withdraw consent).
Email [email protected] and you’ll get a response within one month. There’s no charge.
How to unsubscribe
Any of these:
- click the unsubscribe link at the bottom of any Unfold email;
- reply to any Unfold email with the word “unsubscribe”;
- email [email protected].
You’ll stop receiving emails straight away.
Complaints
If you’re unhappy with how your data has been handled, tell Unfold first at [email protected] so it can be put right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this policy
If this policy changes, the date at the top changes too. If a change is significant, Unfold will email you about it before it takes effect.
