Privacy Policy

Last updated: November 25, 2025

Introduction

Unbuilt Works ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Developer: Brett Cassidy
Contact: unbuiltapp@gmail.com

Information We Collect

1. Personal Information You Provide

We collect information that you provide directly to us when you:

• Create an account: Email address (and optionally, name if using Apple Sign-In)
• Save favorite projects: List of project IDs you've favorited
• Subscribe to premium: Purchase information processed by Apple or Google (we only receive subscription status via RevenueCat)
• Contact support: Any information you provide in support inquiries

2. Information Collected Automatically

When you use the app, we automatically collect certain information:

• Usage Data & Analytics:
  • Projects viewed and time spent viewing them
  • Features accessed (daily feed, archive, favorites, map)
  • Search queries
  • Navigation patterns within the app
  • App performance metrics and crash reports
  • Anonymous user interactions collected via PostHog analytics
• Device Information:
  • Device type and model
  • Operating system version
  • App version
  • Language settings
  • Time zone
• Identifiers:
  • User ID (Supabase-generated identifier)
  • Anonymous analytics ID (PostHog-generated, not linked to personal identity)
  • Device advertising identifier (IDFA on iOS) - used only for ad targeting
• Performance and Diagnostics:
  • Crash logs and error reports
  • App performance metrics (load times, response times)
  • Network connectivity status
• Advertising Data (Free Users Only):
  • Ad impressions and interactions
  • Ad placement performance
  • Time spent viewing ads

3. Information We Do NOT Collect

To be clear, we do not collect:

• Precise location data (GPS coordinates)
• Photos, videos, or other media from your device
• Contact lists or address books
• Browsing history outside the app
• Microphone or camera data
• Health or fitness data
• Financial information (credit cards, bank accounts)

Note on Location: The app displays project locations on an interactive map, but this uses pre-existing location data from our database. We do not access your device's location services or track where you are.

How We Use Your Information

We use the collected information to:

• Provide core functionality: User authentication, save favorites, sync across devices
• Personalize your experience: Remember your preferences and viewing history
• Curate daily content: Select and deliver daily featured projects
• Process subscriptions: Manage premium features and subscription status
• Send notifications: Deliver daily project notifications (only with your permission)
• Display ads (free users): Show contextually relevant advertisements to non-premium users
• Improve the app: Analyze usage patterns, fix bugs, optimize performance through anonymous analytics
• Develop new features: Understand how users interact with the app to build better features
• Provide support: Respond to inquiries and troubleshoot issues
• Comply with legal obligations: Meet regulatory requirements

Analytics & Product Improvement

We use PostHog to understand how users interact with our app and improve your experience. This analytics data includes:

• Which features you use and how often
• Projects you view and interactions with content
• App navigation patterns and session duration
• Device type and operating system
• Anonymous user ID (not linked to your personal identity)

Important: No personal information (email, name, etc.) is shared with PostHog. All analytics data is anonymous and used solely to improve the app experience.

Third-Party Services

We use the following third-party services to operate our app:

App Tracking Transparency (ATT)

We use Apple's App Tracking Transparency framework to request permission before tracking you across apps and websites. When you see the ATT prompt, we're asking permission to:

• Use your device's advertising identifier (IDFA) to show personalized ads
• Allow AdMob to use cross-app data for ad targeting

If you decline: You'll still see ads, but they won't be personalized based on your behavior across other apps.

If you accept: Ads will be more relevant to your interests, and we may earn slightly more revenue.

Premium subscribers: Never see the ATT prompt because we don't show ads at all.

What is "Tracking"?

According to Apple's definition, "tracking" means linking data collected about you from our app with data collected about you from other companies' apps, websites, or offline properties for targeted advertising or advertising measurement purposes.

In our app, tracking only applies to:

• Device advertising identifier (IDFA) used by AdMob
• Ad interaction data shared with Google for personalized advertising

NOT considered tracking:

• Your email address and user account data (stays within our app)
• Favorited projects (stays within our app)
• Anonymous analytics via PostHog (not used for advertising, not shared with ad networks)
• Crash reports (used only for debugging, not advertising)

Educational Content & Fair Use

Unbuilt Works provides educational content and critical analysis of historical architectural projects. All content is used for educational, commentary, and criticism purposes under fair use doctrine. Each project includes:

• Substantial original analysis explaining historical context
• Critical examination of design, political, and financial factors
• Educational value beyond the original material
• Attribution to original architects and sources where known

Information Sharing & Disclosure

We do not sell, trade, or rent your personal information. Period.

We may share information only in these limited circumstances:

With Service Providers

We share data with trusted service providers who help operate the app:

• Supabase: User authentication and data storage
• RevenueCat: Subscription management
• PostHog: Anonymous analytics (no personal information shared)
• Google AdMob: Ad serving (free users only)
• Contentful: Content delivery
• Expo: Push notifications

These providers are contractually required to keep your data secure and use it only for the purposes we specify.

For Legal Reasons

We may disclose information if required to:

• Comply with legal obligations or court orders
• Respond to lawful requests from government authorities
• Protect our rights, property, or safety
• Protect users from fraud, abuse, or security threats
• Enforce our Terms of Service

With Your Consent

We may share information with other parties when you explicitly give us permission to do so.

Business Transfers

If Unbuilt Works is acquired or merged with another company, user data may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Advertising

For Free Users

Free users see advertisements served by Google AdMob in the following locations:

• Banner ads within content feeds
• Interstitial ads between screens (limited frequency)
• Rewarded ads (optional - watch to unlock features)

Ad Frequency Limits:

• Interstitials: Maximum once every 2 minutes
• Banners: Strategic placement to minimize disruption
• Rewarded ads: Always optional, never required

Personalized vs. Non-Personalized Ads

You have control over ad personalization:

• iOS Settings → Privacy & Security → Tracking: Disable to prevent cross-app ad tracking
• iOS Settings → Privacy & Security → Apple Advertising: Enable "Limit Ad Tracking"
• Google Ad Settings: Manage ad personalization at adssettings.google.com

Premium: Ad-Free Experience

Premium subscribers enjoy a completely ad-free experience. When you upgrade:

• All ads are removed immediately
• AdMob SDK stops loading and collecting data
• No advertising identifiers are used or collected
• You never see the App Tracking Transparency prompt

Data Security

We take data security seriously and implement industry-standard protections:

• Encryption:
  • All data transmitted between your device and our servers uses TLS/SSL encryption
  • Data stored on servers is encrypted at rest
• Authentication:
  • Secure password hashing (never stored in plain text)
  • OAuth support for Apple and Google Sign-In
  • Session token management with automatic expiration
• Access Controls:
  • Strict access controls on backend systems
  • Regular security audits and monitoring
  • Principle of least privilege for data access
• Infrastructure Security:
  • Trusted cloud providers (Supabase, Vercel)
  • DDoS protection and rate limiting
  • Automated backups with encryption

Important: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. Use a strong, unique password and enable device security features.

Your Rights and Choices

You have comprehensive control over your data:

Access Your Data

Request a copy of all personal data we have about you. Email unbuiltapp@gmail.com with "Data Access Request" in the subject line.

Update Your Information

Update your account information anytime:

• Open the app → Profile tab → Settings
• Update email, name, notification preferences

Delete Your Account

Permanently delete your account and all associated data:

• Open the app → Profile tab → Settings → Delete Account
• Or email unbuiltapp@gmail.com with "Delete Account" in the subject
• We'll delete all your personal data within 30 days

Manage Notifications

Control push notifications:

• In-app: Profile → Settings → Notification Preferences
• iOS: Settings → Unbuilt Works → Notifications

Opt Out of Ad Personalization

• iOS: Settings → Privacy & Security → Tracking → Deny for Unbuilt Works
• iOS: Settings → Privacy & Security → Apple Advertising → Limit Ad Tracking
• Or upgrade to Premium for an ad-free experience

Data Portability

Request your data in a machine-readable format (JSON). Email unbuiltapp@gmail.com with "Data Portability Request."

Withdraw Consent

You can withdraw consent for data processing at any time by:

• Disabling specific permissions in iOS Settings
• Deleting your account
• Uninstalling the app

Data Retention

We retain your information as follows:

• Active accounts: Stored indefinitely while your account is active
• Deleted accounts: Permanently deleted within 30 days of deletion request
• Legal retention: Some data may be retained longer if required by law (tax records, legal disputes)
• Anonymous analytics: Aggregated, anonymous usage statistics may be retained indefinitely for research and improvement
• Backup systems: Deleted data is removed from backups within 90 days

Children's Privacy

Unbuilt Works is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover we have collected information from a child under 13, we will:

• Delete the information immediately
• Terminate the account
• Notify parents if contact information is available

If you believe a child under 13 has created an account, please contact us immediately at unbuiltapp@gmail.com.

International Users

Unbuilt Works is based in the United States. By using the app, you consent to:

• Transfer of your information to the United States
• Storage and processing on US-based servers (Supabase, Vercel)
• Compliance with US data protection laws

If you're in the European Economic Area (EEA), UK, or other regions with data protection laws, you have additional rights under GDPR and other regulations. Contact us to exercise these rights.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, email unbuiltapp@gmail.com with your request. We'll respond within 45 days.

We do not sell personal information. Ad-supported features use AdMob, which may constitute "sharing" under CCPA, but you can opt out via iOS Tracking settings.

European Privacy Rights (GDPR)

Users in the European Economic Area (EEA) and UK have rights under GDPR:

• Right to Access: Obtain confirmation and access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to data processing, including profiling
• Right to Lodge a Complaint: File a complaint with your data protection authority

Legal basis for processing:

• Contract performance: Account management, favorites, subscriptions
• Consent: Push notifications, ad personalization (can be withdrawn)
• Legitimate interests: Analytics, app improvement, security

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Displaying a prominent notice in the app
• Updating the "Last Updated" date at the top of this policy
• Sending a push notification (for significant changes)
• Requiring acceptance of updated terms for continued use

Your continued use of the app after changes take effect constitutes acceptance of the updated policy. If you don't agree with changes, please delete your account before they take effect.

Version History:

• November 25, 2025: Added PostHog analytics disclosure
• November 11, 2025: Initial version for App Store launch