Privacy Policy

Unitos is run by an independent developer, not a company. Questions about this policy, your data, or a deletion request go to robertwzl311@gmail.com.

Unitos stores what it needs to be your notebook, and nothing else:

• Your account: the email address, name, and profile picture on the Google or Apple account you sign in with, or the name, email, and password you sign up with. Sign-in asks for those things and nothing more — it cannot read your Gmail or Calendar.
• Google Drive, only if you link it in Settings: a token that lets Unitos read your Drive files — every file you can read, or only the files you pick, as the Google consent screen said. Unitos reads a file only when you add it, keeps that copy as a document, and never changes anything in your Drive. Unlink in Settings any time; that revokes the token.
• What you put in: the documents and videos you upload, the pages you add by URL and the text parsed from them, and every project, section, note, annotation, highlight, comment, distillation, extraction, match, and summary you make.
• Your context: the background, purpose, and application you optionally write in the Context tab, which conditions what the assistant says.
• Your preferences: interface language and theme.
• Feedback you send: the message, the page you sent it from, and your browser's user-agent string.
• Usage: where you left off in each document, which controls you click, with the open project, and each AI call's provider, model, token counts, and cost — never the text of the call. Settings → Your data shows these counts.
• Ordinary server logs kept by the hosting provider, such as IP addresses and request times.

Unitos sets three cookies, all functional: one that keeps you signed in, one that remembers your language, and one for the administrator area. There are no advertising, analytics, or tracking cookies, and no third-party trackers on any page.

Unitos is an AI reading tool, so parts of what you store are sent to AI providers to answer your requests. This only happens when you ask for something — nothing is sent in the background:

• Anthropic (Claude) receives document text, page images, and your upload instructions, when you add a document or convert handwritten pages.
• Moonshot AI (Kimi) receives document text, your notes and annotations, and your context, when you use Simplify, Extract, Analyze, Summarize, or the assistant.
• OpenAI receives the text you ask to be read aloud. OpenAI and Groq receive the audio of videos you upload, or of YouTube videos you add that have no captions, for transcription.
• Google (Gemini) receives videos you upload, or the link to a YouTube video you add, for transcription and for describing a frame you ask about.
• YouTube receives a request for captions, preview frames, and — when the video has no captions — its audio, when you add a YouTube video.

These providers process this material to return a result. Unitos does not sell your material and does not use it to train any model. Each provider handles it under its own API terms — Anthropic and OpenAI do not train on API content by default; Moonshot AI's terms let it use API content to improve its models unless a restriction is agreed with it; Google's terms depend on the Gemini plan in use.

Everything is stored in a PostgreSQL database, including uploaded files, and the app runs on Vercel. Both are third-party providers that hold the data on Unitos's behalf.

Your material stays until you delete it. Deleting a project deletes its notes and annotations. Rejected notes are kept seven days so you can undo, then permanently deleted by a daily job. To delete your account and everything in it, email robertwzl311@gmail.com and it will be done.

It is your material, and you can:

• Export any project to Markdown or Word from the app, at any time.
• Edit or delete any document, note, or annotation yourself.
• Ask for a copy of your data, a correction, or full deletion, by email.

If you are in the EEA, the UK, or California, you have rights of access, correction, deletion, and portability under laws such as the GDPR and CCPA. Unitos honours these for everyone, by email, without charge.

Unitos is not intended for children under 13, and is not knowingly used by them. If a child's data has ended up here, email and it will be removed.

Traffic is encrypted over HTTPS, the sign-in cookie cannot be read by scripts, and each account can only reach its own projects. No service can promise perfect security, so please do not store anything you could not bear to lose or to see exposed.

If this policy changes, the date at the top changes with it. A change that materially affects what happens to your material will be announced in the app before it takes effect.

Email robertwzl311@gmail.com about anything on this page.