legal
Privacy Policy
Last revised August 10, 2026
What Color LLC is committed to a clear, transparent policy for how data is collected, stored, and shared. What Color LLC is a New Jersey Limited Liability Company and the developer, owner, and operator of the Unclear mobile and web applications ("Unclear").
This document explains what information we collect, why, and who we share it with — and how you can access, change, or delete your data. We chose a short, plain-language policy over pages of legal jargon. If anything is unclear, email us at unclearapp@gmail.com.
The short version
Unclear is end-to-end encrypted. Your lists, todos, ratings, and notes are encrypted on your device before they're ever sent to us, using a key derived from a recovery phrase that never leaves your device. We store only the encrypted result and cannot read your content — this is sometimes called "zero-knowledge." We can't sell, hand over, or accidentally leak what we can't read. Because of this, if you lose your recovery phrase, we cannot recover your content for you.
Who's involved
- What Color LLC, and its worldwide subsidiaries and affiliates, together "Unclear," "the Service," "we," "us," or "our," provides the service and technology.
- A User ("User," "you," "your") is a person who uses Unclear.
This Privacy Policy governs all data supplied to the Service by a User.
What information we collect
Account information
When you create an account, we collect your email address (through our authentication provider, Auth0) and any profile details you choose to add, such as a nickname and time zone.
Your content — encrypted
Your lists, todos, ratings, and notes are end-to-end encrypted on your device. We store only the ciphertext, along with the encrypted keychain needed to unlock it on your other devices. We cannot read, index, or hand over the contents of your notes and lists. (If you use the app without enabling encryption, your content is stored in plain form; you can enable encryption at any time in settings.)
Billing information
If you subscribe to Unclear Pro, payment is handled by our payment processor, Stripe. We do not collect or store your full card number — Stripe does. We keep a record of your subscription status and the Stripe identifiers needed to manage it.
Usage data
During normal operation we collect information about how Users interact with the Service — such as IP address, browser, device and operating system, referral source, session length, and in-app events. This helps us troubleshoot, secure, analyze, and improve the Service.
Contact form
If you message us through the contact form on our website, we (and our form provider, Formspree) receive the name, email, reason, and message you submit so we can reply.
How we collect information
Information is provided directly by you — when you register, edit your profile, subscribe, use the app, or contact us — and gathered automatically as you use the Service (see Cookies).
Cookies
Like most websites, we use cookies — small text files saved by your browser — to keep you signed in, prevent abuse, and provide the Service. You can refuse some or all cookies in your browser settings, but parts of the Service may stop working.
- Chrome: support.google.com/chrome/answer/95647
- Edge: support.microsoft.com — Edge browsing data and privacy
- Safari: support.apple.com/guide/safari — manage cookies
- Firefox: support.mozilla.org — cookies
We also use third-party services that set cookies to analyze usage and improve our marketing. Unclear does not respond to "Do Not Track" signals from browsers.
How we use information
- To provide, operate, secure, and troubleshoot the Service.
- To process subscriptions and payments.
- To analyze usage and prioritize improvements.
- To send you Service-related announcements — such as updates, policy changes, or security notices.
We do not sell your personal information. Unclear is a paid product; you are the customer, not the product.
Children
Unclear is not intended for anyone under the age of 13. If we learn that someone under 13 has used the Service, we will take appropriate steps to remove their information and restrict future access.
International data transfer
The Service operates on computers located in the United States. Data collected from outside the U.S. will be transferred to, processed, and stored in the United States.
Disclosure to other parties
We use companies and individuals to help operate the Service (for example, hosting, authentication, payment processing, error monitoring, analytics, and support). These sub-processors are given only the data necessary to perform their task, must comply with this policy, and may not use it for any other purpose. See the sub-processor list below.
Because your notes and lists are end-to-end encrypted, we cannot disclose their contents — to sub-processors, to a buyer in a business transaction, or in response to a legal request — because we do not have access to them.
We will comply with any lawful request from a government, law-enforcement agency, or court as required by law. We may also disclose information where we believe it reasonably necessary to prevent illegal, harmful, or unauthorized activity, or to protect our rights. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that deal, subject to this Privacy Policy. We will notify you of any change of ownership that affects how your personal information is used.
Sub-processors
The following companies may be used to help provide the Service. We will update this list as needed.
- Auth0 / Okta (Privacy Policy) — account authentication
- Stripe (Privacy Policy) — payment processing
- Heroku / Salesforce (Privacy Policy) — server and application hosting
- IBM Cloudant (Privacy Policy) — hosting for your end-to-end encrypted lists and notes (CouchDB)
- Neon (Privacy Policy) — PostgreSQL database (accounts and subscriptions)
- Upstash (Privacy Policy) — Redis (caching and rate limiting)
- MongoDB Atlas (Privacy Policy) — database hosting
- Sentry (Privacy Policy) — error monitoring
- Mixpanel (Privacy Policy) — product analytics
- Google Analytics (Privacy Policy) — analytics
- Vercel (Privacy Policy) — website hosting and analytics
- Formspree (Privacy Policy) — contact-form delivery
Retention
We use standard backup procedures and retain database backups for 30 days, so a deleted item can take up to 30 days to clear from backups. Some information may be retained longer for legal or legitimate business purposes (for example, billing records). Data that no longer serves a legitimate purpose is deleted upon request or when no longer needed.
Accessing, changing, or deleting your data
You can edit your profile and manage your subscription from within the app. To request access to, correction of, or deletion of your personal information, email us at unclearapp@gmail.com. Note that we cannot recover encrypted content if you have lost your recovery phrase, because we never have access to your keys.
Updates to this policy
We may update this Privacy Policy from time to time. The "last revised" date at the top reflects the most recent change. Material changes affecting your personal data will be announced by email or a prominent notice on our website. Your continued use of the Service after an update takes effect constitutes acceptance of the changes.
Our details
What Color LLC is a New Jersey Limited Liability Company. You can reach us — including our data-protection contact — at unclearapp@gmail.com.