Legal
Privacy policy
A plain-language account of what Unumae collects, what becomes public, how long information is kept, and the choices every person retains.
What we collect
Your email address, and the profile you fill in: a username, a name, a year of birth, a country, and optionally a city and one line about you. If you are selected, the portrait you write and the photograph you choose. Questions you ask and the Journeys you remember.
One number about your app, not about you
After the app and device pass platform attestation, our server issues a short-lived random installation session so we can count how many people came back the next day and protect submission queues. It is not an advertising identifier, its secret is stored securely on your device, and analytics events are deleted after 90 days.
Account and device assurance
For draw eligibility we keep your confirmed normalized email and stable Apple or Google provider identifier while your account exists. Apple App Attest and DeviceCheck or Google Play Integrity verify the app and device. Raw attestation payloads and raw network addresses are never stored. An opaque abuse-prevention flag can remain at the platform and in our anti-abuse records after account deletion, without your user ID or personal information, so deleting and reinstalling cannot create another draw entry.
Website measurement without a profile
On this website, we count only when someone chooses the selection explainer, Archive, or mission page. An event contains only its name, source page, and language, and follows the same 90-day retention. We set no analytics cookie or identifier, send nothing to an advertising service, honor Global Privacy Control and Do Not Track, and never measure a person, story, question, Archive entry, or popularity.
What we never collect
Your precise location — a country is the only place we ask for, and never automatically. Your contacts. Your activity in other apps or on other websites. Anything for advertising: there are no adverts here and no advertising partners.
Who sees it
Your profile is private to you. If you are published, your first name, country, optional city, photograph and portrait become public — that is the point, and you agree to it before it happens. Nobody else can read your library, your votes, or which draws you entered.
How long we keep it
Product analytics for 90 days. Account-linked assurance data is deleted with your account; the non-identifying platform device flag remains for abuse prevention. Draw and review audit records are retained without your provider identifier or normalized email. Daily draw records remain permanently so fairness stays checkable.
Your rights
You can download a structured export of the account data that applies to you, hide your city, leave the draw, delete your account, and ask to be removed from the Archive if you were published. The export identifies security fields and third-party identifiers withheld to protect abuse controls and other people. These controls are available inside the app; a person handles any broader legal access request.
Age
You must be at least 16 to hold an account. We ask for a year of birth to check that, and for nothing else.
Questions
Write to us and a person will answer. We do not use an automated system for privacy requests.
Last updated 23 August 2026.