Privacy Policy
Last updated: 20 May 2026
Who We Are
UNstuck is a service provided by SSA Services Group Ltd ("we", "us", "our"), a company registered in England and Wales. We operate the website unstuck-app.com and related applications. We are based in England, United Kingdom, and act as the data controller for personal data processed through the Service. For any privacy questions, contact hello@unstuck-app.com.
What Data We Collect
- Account data: display name, email address, hashed password (or Google account identifier if you sign in with Google).
- Task data: the tasks, categories, sub-tasks, deadlines, and notes you create within UNstuck.
- Usage data: basic telemetry such as pages visited, feature usage, device type, browser, and IP address.
- Support data: the content of any messages you send us.
Payment details (card numbers, billing address) are collected and stored directly by Paddle, our Merchant of Record. We do not see or store your full payment details.
How We Collect It
We collect data directly from you when you sign up, complete onboarding, create tasks, contact support, or otherwise use the Service. Some information (e.g. IP address, device data, cookie identifiers) is collected automatically when you interact with the Service.
Why We Collect It and How It Is Used
- To create and manage your account (legal basis: contract performance);
- To provide, maintain, and improve the Service (contract; legitimate interests);
- To process payments and manage subscriptions via Paddle (contract);
- To send transactional emails such as confirmations and password resets (contract);
- To prevent fraud, abuse, and secure the Service (legitimate interests; legal obligation);
- To respond to support requests and user enquiries (contract; legitimate interests);
- To comply with our legal and regulatory obligations.
Data Storage and Security
Your account and task data are stored in Supabase, a managed PostgreSQL database provider. Data is encrypted in transit (TLS) and at rest. Access is restricted via row-level security so that only you (and our authorised systems) can access your records. We apply appropriate technical and organisational measures to protect your information against unauthorised access, loss, or alteration.
Third-Party Services
- Paddle — our Merchant of Record. Processes all payments, subscription billing, tax compliance, and invoicing.
- Supabase — database and authentication infrastructure that stores your account and task data.
- Google — optional sign-in provider. If you choose Google sign-in, Google shares your basic profile (name, email) with us per Google's policies.
- Email delivery providers — to send transactional emails from notify.unstuck-app.com.
These providers may transfer data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.
Cookies
We use a small number of cookies and similar technologies:
- Essential cookies — required for sign-in and session management. These cannot be disabled.
- Analytics cookies — used in aggregate to understand how the Service is used and improve it.
- Payment cookies — set by Paddle during checkout.
You can control cookies in your browser settings.
Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request deletion of your data ("right to erasure");
- Restrict or object to certain processing;
- Receive your data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
We will respond to verified requests within one month.
Data Retention
We keep your data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain certain records (e.g. invoicing) for legal or accounting purposes — typically up to 6 years under UK law. Backups are rotated on a 30-day cycle.
How to Request Data Deletion
To delete your account and personal data, email hello@unstuck-app.com with the subject line "DELETE MY ACCOUNT" from the email address registered to your account. We will confirm completion in writing.
Contact for Data Requests
All data requests and privacy enquiries should be sent to hello@unstuck-app.com.
Questions? Email hello@unstuck-app.com
