Privacy Policy
Effective July 19, 2026 · The Unsent Sky for iOS
1. Who we are
The Unsent Sky ("the app," "we") is an iOS application for writing messages you never sent and releasing them anonymously as stars in a shared sky, or keeping them privately encrypted on your device. Questions about this policy: support@theunsentsky.app.
2. What we don't collect
- No accounts. There is no sign-up, no email, no phone number, no password, no social login.
- No identity. We never collect your name, contacts, precise location, photos, or advertising identifiers.
- No tracking. The app contains no analytics SDKs, no advertising SDKs, and no third-party trackers. We do not track you across apps or websites, and we do not sell or share data — there is nothing to sell.
3. Private stars — yours alone
Messages you keep private are encrypted on your device using AES-GCM 256-bit encryption. The encryption key is created on your device and stored in the iOS Keychain. It is never transmitted to us or anyone else.
- Private star content never reaches our servers in any form.
- If you enable the optional iCloud Sync setting, only the encrypted ciphertext is stored in your personal, private iCloud database (hosted by Apple, tied to your Apple Account, inaccessible to us). The decryption key still never leaves your device's Keychain.
- You can additionally lock your private sky behind Face ID / Touch ID.
- Deleting the app permanently destroys the local key. Without it, any synced ciphertext is unreadable — by anyone, forever.
4. Public stars — anonymous by design
When you deliberately release a star to the public sky, the following is stored on our servers (hosted by Supabase):
- Your message text (screened on your device before sending — see section 7)
- Its category (e.g. love, hope, goodbye), mood style, and position in the sky
- A system-generated alias (e.g. "Wandering Comet #4821") — never a chosen username
- Anonymous reaction counts and a timestamp
Public stars are permanent and anonymous. The app warns you before every release. Because no identity is attached, we cannot later find "your" stars for you — not even if you ask. Please don't include identifying details in a public star (see the Community Guidelines).
5. The anonymous session
On first launch, the app generates a random identifier and obtains an anonymous session token. This exists solely to rate-limit star creation (10 per day), to record which stars you've reacted to, and to enforce moderation. It is stored in your device's Keychain, is never shown to anyone, is never linked to your identity, and is never returned to other users. Deleting the app destroys it; there is no account recovery because there is no account.
6. Notifications & widgets
- Push notifications are optional. If you enable them, your device's push token is stored so Apple can deliver notifications; it identifies a device, not a person. Disable notifications at any time in iOS Settings.
- Widgets read only data already on your device (one already-public star and the count of your private stars — never their content).
7. On-device safety screening
Before any public release, your message is screened on your device for banned terms, personal information patterns, and crisis language. If crisis language is detected, the message is not sent or stored anywhere, and the app shows support resources instead. This screening never transmits your text.
8. Sky+ subscriptions
Sky+ purchases are processed entirely by Apple. We never see or store your payment details, Apple ID, or billing information. Subscription status is verified on-device through Apple's StoreKit framework. Manage or cancel in your App Store account settings.
9. Data retention & deletion
- Private stars: exist only on your device (and optionally, encrypted, in your personal iCloud). Delete them in the app, use "Delete All Data" in Settings, or delete the app itself.
- Public stars: anonymous and permanent by design, like a message in a bottle. Stars that violate the guidelines are removed through moderation. If you need to request removal of a specific public star, contact support@theunsentsky.app with its exact text; because stars are anonymous, we cannot verify authorship, but we review every request.
- Session data: destroyed when you delete the app.
10. Children
The Unsent Sky is rated 12+ and is not directed at children under 13. We do not knowingly collect personal information from anyone — including children — because the app collects no personal information at all.
11. Your rights
Depending on where you live (GDPR, CCPA, and similar laws), you may have rights to access, correct, or delete personal data. Our honest answer to access requests: we hold no data that identifies you, so there is typically nothing to look up. For anything else, email us and we'll help: support@theunsentsky.app.
12. Changes to this policy
If we change this policy, we'll update this page and the effective date above. Material changes will be noted in the app. We will never quietly add tracking — that would defeat the entire point of this app.