Privacy Policy.

This policy covers My ADHD Dump and the other apps and websites operated by Unusual Software.

The short version: you talk, we turn it into text and organise it, and we try to hold as little of you as possible while doing it. Your recordings are deleted as soon as they're transcribed. We don't sell anything to anyone, and we don't track you across other apps.

1. What we collect

Your account. Your name, email address, profile photo and a unique identifier, from Google or Apple when you sign in. We never see or store your password.

Your voice recordings. When you record a dump, the audio is uploaded to our servers and sent to a transcription provider. The audio is deleted from our servers as soon as it has been transcribed — usually within seconds. We do not store recordings, and there is no setting that makes us keep them.

What you say, as text. The transcript of each dump, and everything we derive from it: tasks, events, people, places, topics and the connections between them that make up your mind map. You can edit or delete any of it.

How your dumps read emotionally. Our processing also estimates the mood of each dump — an overall sentiment, a short list of feeling words, and a representative line — and rolls those up into a per-day mood shown on your calendar. This is inferred by software from the words you used. It is a guess for your own reflection, not an assessment of you, and nobody reviews it. The app is a productivity and organization tool, not a medical or diagnostic tool, and it does not provide medical advice.

Device and usage data. Your push notification token (so reminders can reach you), your device model, operating system version and app version, a device identifier used by our analytics, and counts of how many dumps you've made (to enforce daily limits).

Your subscription status. Subscription status and purchase-related data are handled through RevenueCat and Apple's in-app purchase system. We use this data only to provide and restore subscription access. We do not collect or store payment-card information.

What we don't collect. We don't ask for and can't see your contacts, your photos, or your device's calendar. The app requests exactly two permissions: the microphone, used only while you're actively recording a dump, and notifications, used only to deliver reminders you set. The app does not request device location permission and does not collect precise GPS location. If analytics is enabled, PostHog may derive approximate country, region, or city information from the connection's IP address.

2. Why we collect it

• To run the app: signing you in, syncing across your devices, delivering reminders.
• To do the thing the app exists for: turning speech into text, and text into structure.
• To keep it working: crash reports and usage metrics tell us what's broken and what's used.
• To manage subscriptions and enforce daily limits fairly.

We do not use your data to train our own models, and we don't sell it or share it for advertising. There is no advertising in the app.

3. Who processes your data

We use a small number of specialist companies to run parts of the service. Each one only receives what it needs to do its job.

Speech-to-text and AI structuring. Your audio is sent to a transcription provider, and the resulting text to a language model that pulls out tasks, dates and topics. We use Groq for both by default. If Groq is unavailable we fall back to NVIDIA, and then to OpenAI.

Semantic matching. The text of every dump, and the labels of entries in your mind map, are sent to NVIDIA to generate embeddings — numerical fingerprints that let a new dump recognise something you've mentioned before instead of creating a duplicate. This happens on every dump, not only when a fallback is triggered.

What these providers do with what we send them is governed by their own terms, not by any special agreement with us. We have not negotiated separate no-training or zero-retention arrangements with them. We delete your audio from our servers as soon as it has been transcribed, but once it has been sent to a provider we cannot tell you how long they hold it or what they do with it, and we won't pretend otherwise. If that matters to you, read their policies before recording something sensitive.

Accounts. Supabase handles sign-in and holds your account record.

Storage and hosting. Heroku hosts our API server and the database that stores your dumps, tasks and mind map.

Subscriptions. Subscription status and purchase-related data are handled through RevenueCat and Apple's in-app purchase system. We use this data only to provide and restore subscription access. We do not collect or store payment-card information.

Notifications. Apple Push Notification service and Firebase Cloud Messaging deliver reminders to your device.

Sign-in. Google Sign-In and Sign in with Apple, if you choose them.

Crash reporting. Sentry receives a diagnostic report when the app or our servers hit an unexpected error: the error type, a stack trace, your device model, OS version and app version. We have configured it not to attach personal information, request bodies, or screenshots of your screen, so the contents of your dumps are not included.

Analytics. PostHog receives a small set of events describing how the app is used — that you signed in, started and finished a recording, saw the upgrade screen, deleted your account — along with your account identifier, device type and app version. These events never contain the audio, the transcript, or anything you said. You can switch this off at any time under Settings → Share Usage Data. Crash reporting stays on when you do, so we can keep fixing faults that affect everyone.

These analytics events are tied to your account, so we describe them as pseudonymous rather than anonymous. If analytics is enabled, PostHog may derive approximate country, region, or city information from the connection's IP address. We do not request device location permission or collect precise GPS location. We do not use advertising SDKs, we do not touch your device's advertising identifier, and we do not track you across other apps or websites.

Beyond the companies above, we don't share your data with anyone — except where the law requires it, or where it's genuinely necessary to protect someone's safety.

4. How long we keep it

• Your recordings: not at all, on our side. Deleted from our servers as soon as they're transcribed. How long the transcription provider keeps its copy is set by them, not by us — see section 3.
• Dumps, transcripts, mind map, tasks and mood history: until you delete them, or delete your account.
• Backups: we take an automated backup of our database once a day. Older ones are deleted automatically on our hosting provider's schedule. This means that for a short period after you delete something — including your whole account — a copy can still exist in a backup taken before you deleted it, until that backup rotates out. We don't restore backups to bring deleted accounts back.
• Crash reports and analytics events: held by Sentry and PostHog respectively, and deleted automatically according to the retention period of our plan with each. We don't keep separate copies, and we don't extend those periods.
• Deleted-account identifier: after account deletion, we may retain a one-way identifier fingerprint only to prevent recreation or abuse of a deleted account. This identifier cannot recover the account or any deleted content.

5. Your rights

See your data. Everything we hold about you is visible in the app: your dumps and transcripts under History, and everything derived from them in your mind map and calendar.

Delete individual items. Open any dump or mind-map entry and delete it from its detail screen. You'll be asked to confirm.

Delete everything. Open App settings, scroll to the bottom, and tap Delete account & all data. You'll be asked to sign in once more first — deletion is irreversible, and we want to be sure it's you. We delete your personal account content, including your account, every dump and transcript, your entire mind map, your reminders and your mood history. We may retain only a one-way identifier fingerprint to prevent recreation or abuse of a deleted account. This identifier cannot recover your account or its deleted content.

Two honest caveats. A copy may remain in a database backup until that backup rotates out (see section 4). And anything already sent to a transcription or AI provider is subject to their retention, not ours — deleting your account here does not reach into their systems.

If you can't reach the app — you've uninstalled it, or can't sign in — you can request deletion at unusualsoftware.studio/delete-account.

Note that deleting your account does not cancel your subscription. That's billed through Apple's in-app purchase system, so only Apple can cancel it. Cancel first, then delete.

Get a copy, or ask us to fix something. Contact us and we'll export your data or correct it.

If you're in the EU, the UK or California, you have specific rights under the GDPR, UK GDPR and CCPA — access, correction, portability, deletion, and objecting to certain processing. The routes above are how you exercise them; contact us if you'd rather ask directly.

6. Children

My ADHD Dump isn't directed at children under 13 (or under 16 in the EU), and we don't knowingly collect anything from them. If we find out we have, we'll delete the account.

7. Security

Everything travels between your device and our servers over encrypted connections (TLS). Our database is hosted on Heroku Postgres and is encrypted at rest under their platform's protections. Access to production systems is restricted to those who need it.

We're a very small operation, and we'd rather tell you that plainly than imply a security organisation we don't have. If a breach ever affects your data, we'll tell you and the relevant regulators as quickly as we can.

8. International transfers

Our servers and our providers operate in the United States and the European Union. Our own servers and database are in the United States. Groq, NVIDIA, OpenAI and RevenueCat are US-based. Sentry and PostHog store their data in the EU.

By using the app you understand your data will be processed in these regions. Where the law requires it, we rely on standard contractual clauses.

9. Changes to this policy

The date at the top always reflects the current version. If we change something material, we'll tell you in the app or by email before it takes effect.

10. Contact

Questions, data requests, or anything that looks wrong in this policy — contact us or email unusualsoftware.support@gmail.com. A real person reads every message.