Privacy Policy

Last updated: 12 September 2026

The short version

Unpack works without an account and asks for nothing about you.

Two things leave your device whether or not you sign in. Which lessons you read and for how long, so we can tell which lessons work and which need rewriting. And whether you have a subscription, so the app knows what to unlock. Both are tied to a random identifier belonging to this installation, not to you, which disappears when you delete the app.

You can turn the first one off in Settings → Help improve the lessons.

There is also an optional account, whose only purpose is moving your progress to a new phone. If you never create one, nothing below about accounts applies to you, and your name and progress never leave the device.

What stays on your device

Calculator inputs — the figures you type into a lesson — are never transmitted under any circumstances. Not to analytics, not to an account, not ever. They are the one thing in this app you enter about your own money.

The following stays on the device too, unless you create an account, in which case it is copied there so a new phone can pick it up:

• The name you entered, if you entered one
• Your progress: XP, streak, which concepts you have met and when each is next due for review
• Your library: saved lessons and collections
• Your preferences: difficulty, chosen subjects, notification settings

This lives in the app's own private storage. If you have iCloud Backup enabled it may be included in your device backup, which is governed by Apple's terms rather than ours. Deleting the app deletes all of it. Settings → Reset progress clears it without deleting the app.

If you create an account (optional)

There is no account by default, and the app is complete without one. Nothing is gated on it — every lesson, quiz, streak and subscription works exactly the same either way.

Its one purpose is surviving a new phone. If you use Sign in with Apple under Settings → Your progress, then:

• Your email address is stored, and used only to know which account is yours. Nothing else — no marketing, no newsletters, and we never write to it. There is no password. If you choose to hide your address, what we receive and store is Apple's private relay address, not your real one.
• Your progress is copied to your account: the name you entered, XP, streak, saved lessons and collections, and your review schedule.

Two things that do not change when you sign in. Calculator figures still never leave your device — they are the one thing you type about your own money. And usage measurement stays unlinked: those records have no field for a user at all, so they cannot be connected to your email address by us or by anyone else.

Signing out leaves everything on the device and deletes nothing. To delete the account and everything in it, tap Delete my account in Settings — your email address and every stored progress record are erased immediately, and what is on the device stays there. The same deletion is also available by writing to the address below.

What is collected

How the lessons are used

So that badly written lessons can be found and fixed, the app records:

• Which card was shown, and for how many seconds
• Which page of a lesson you stopped at
• Whether a quiz answer was right or wrong, and which question it was
• When a session started and ended, and how long it lasted
• That you reached the end of the setup questions, and whether the name field was filled in — a yes or no, never the name itself
• Your app version, iOS version and language

Each record carries a random identifier generated by the app for this installation. It is not Apple's advertising identifier, not the device identifier, and cannot be connected to anything outside this app. Delete the app and the identifier is gone; reinstalling produces a new one with no link to the old.

We use this to answer questions like "which lesson do people abandon halfway" and "which quiz question does everybody get wrong". Nothing in it identifies a person, and no attempt is made to work out who anyone is.

Turning it off: Settings → Help improve the lessons. Switching it off stops collection immediately and discards anything still waiting to be sent. The app works identically either way.

Subscription status

Subscriptions are processed by Apple. We never see your payment details, card number or Apple Account.

We use RevenueCat to check whether a valid subscription exists. It receives the purchase receipt Apple issues, plus its own randomly generated identifier for this installation. It does not receive your name or email address.

What is never collected

• No phone number, postal address or date of birth
• No email address, unless you create the optional account — and then only for signing in
• No password, ever. Signing in goes through Apple
• No advertising identifier, and no tracking as defined by Apple's App Tracking Transparency framework — your data is never combined with data from other companies' apps or websites, and never shared with a data broker. This is why the app shows no tracking prompt
• No location, contacts, photos, microphone or camera access
• No financial account details, balances or holdings
• No sale or sharing of personal information for advertising

Who processes data on our behalf

The app also downloads lesson updates from Supabase. That is a read: nothing about you is sent with it, beyond the IP address any internet request necessarily reveals to the server answering it.

If you are in the UK or EEA: lesson usage records, and account data if you create an account, are stored in Canada, which both the UK and the EU recognise as providing an adequate level of data protection. Subscription data reaching the United States through RevenueCat is transferred under the standard contractual clauses that provider operates.

How long it is kept

Usage records are kept for 24 months and then deleted. Subscription records are kept by RevenueCat for as long as the subscription is active and for a period afterwards, per their policy.

Your rights

If you have an account, you can erase it yourself, immediately, with Delete my account in Settings. That is the reliable route and it needs nobody's help: if you hid your address behind Apple's private relay, a message from your real address is one we have no way to match to an account.

Usage records are different: they carry only an anonymous install identifier, deliberately not linked to any account, so we cannot look yours up even if you write to us — deleting the account does not reach them, and neither can we on request. What you can do is stop them at the source with the switch in Settings, and every stored record ages out on the schedule above.

Depending on where you live, you may have the right to access, erasure, objection and portability of data held about you. For anything tied to an account, Delete my account in Settings or a message to the address below exercises them. For usage records, the switch in Settings is the objection, exercised instantly — and because those records cannot be connected to you by us or by anyone else, there is nothing further to access or hand over.

Write to contacttouchstonetech@gmail.com with anything else and we will respond within 30 days.

You can also complain to your data protection authority — in the UK, the ICO.

Children

The app is not directed at children under 13 and asks for no information that would identify one.

Diagnostics

If the app hits a serious error it writes a short technical note — what failed and where — to its own storage on your device, so that a problem can be explained if you report it. These notes stay on the device and are not transmitted.

Educational content

Everything in the app is educational. It is not financial, investment, tax or legal advice, and nothing in it is a recommendation to buy, sell or hold anything. Figures are illustrative.

Changes

If this policy changes materially, the "last updated" date above changes and the new version is published here before the change takes effect.

Contact

Touchstone Tech
contacttouchstonetech@gmail.com