01Who we are
Phaze 2 LLC, doing business as GoPhaze, owns and operates Unseriety, a GoPhaze software product. The Plaid account and security review are under Phaze 2 LLC / GoPhaze; Unseriety is the product using the proposed integration, not a separate operator. Bank connections remain inactive. Any activation requires a separate consent flow and product readiness review. This privacy notice describes the current Unseriety iOS app and website. Contact tonideb@gophaze.com about privacy or access requests.
02No sale of personal information
We do not sell personal information, private Notes, financial records, documents, mailbox content or account credentials. We use service providers to deliver the features you choose and protect the service, as described below. You can request access, correction, export or deletion at any time. We verify account ownership and explain any applicable preservation or backup limits.
03What you choose to save
Your account includes sign-in details, Notes and their attachments, categories, optional published content, and Finance records such as income, expenses, budgets, debt balances, credit limits, payment history and uploaded paystubs. Account data syncs to our backend so it can be available on your signed-in devices. The public Notes playground keeps its demo edits in the page memory and clears them when you reload.
04Passwords vault
The iOS Passwords module stores login names, websites, usernames, passwords, categories and notes only in an encrypted file on your device. Its encryption key is protected by device authentication in the local Keychain. Vault contents are not sent to our servers, Google Gemini, Notes publishing or Finance exports; the file is excluded from device backups. There is no cloud sync or recovery in this version. Removing the device passcode, losing the device or deleting app data can make the vault inaccessible. Copied credentials use a local-only clipboard item with a 45-second expiration. Account deletion removes that account’s local vault. System-wide AutoFill is not enabled.
05Bank activity screenshots
Import activity reads selected bank screenshots on your phone with Apple Vision. Screenshot originals and full recognized text are kept only in the current review and are not uploaded by this feature. Only transactions you confirm, including merchant, amount, date, category and non-reversible screenshot reference hashes for duplicate detection, become private Finance records and sync. Before importing, you explicitly choose whether the reviewed transactions affect current funds or remain history only. Saved transactions can be changed individually or in a selected batch with a funds preview.
06Debt screenshots
If you select a payment-history screenshot in Debt, Apple Vision reads it on your device. The screenshot and full recognized text are not uploaded or retained by this feature. Only payment amounts and dates you review and add become part of the saved debt record and sync privately with your Finance data. This local reading is separate from the optional Google Gemini paystub service below.
07AI paystub reading
If you allow AI scanning and select a document, we send that document, including personal and pay information visible in it, to Google Gemini to extract paycheck fields. Original documents and scan results are retained privately in your Unseriety account until you delete them. You review the extracted fields before they become income records. Google's processing is governed by its applicable paid API terms; we do not promise zero provider retention. Scanning is optional: you can enter paychecks manually.
08Privacy and account controls
In current app builds, Profile → Privacy & security offers authenticator-based two-factor authentication, a server-enforced choice for new paystub uploads and AI scans, policy acknowledgement and revocation of other sessions. We retain your preference, policy version and acknowledgement time, and a history of authenticated saves with a random receipt ID and server timestamp. These records are linked to your product account for restricted operator administration, support and evidence of your choices. We do not merge different product accounts solely by matching email addresses. Agreement-history records remain with the active account and are removed when its authentication account is deleted; minimal security deletion records follow the separate retention policy. Saving an acknowledgement is separate from enabling optional processing. Turning off new uploads and AI scans does not delete existing originals or results; remove those from Import paystubs or delete your account. Older app builds may need updating to show these controls. Authenticator setup is optional for current manual features; enrolled accounts must supply the second factor on subsequent sign-ins. Password recovery alone does not bypass an enrolled authenticator. The separately enrolled recovery phrase described below provides a password-verified reset path.
Bank connections remain unavailable. We do not collect bank credentials through these settings or treat policy acknowledgement as permission to connect a financial account. Any future bank connection will require a separate, specific consent flow. See Retention and deletion for current removal paths and limits.
09Our service providers
We use Cloudflare for the website, API, private files, Finance storage and application backups; Supabase for authentication and Notes storage; and Google Gemini for document extraction you request. These providers process the information needed to deliver those services under their applicable terms and security controls. Account credentials and provider API keys are not published or embedded in the app.
10Location and bank connections
Mileage tracking starts only when you choose Start drive and grant location permission. It may continue in the background until you stop it. Saved work records contain mileage and session totals; raw GPS routes are not uploaded by the current tracker. Bank linking through Plaid and credit-score access are not active features of the current app. We will update this notice and obtain the required consent before introducing new data flows.
11Sharing and security
Notes you publish or intentionally share are available to the audience you select. Private paystubs are not published through Notes links. We use authenticated requests, account separation, protected local storage and server-side access checks. No security system can guarantee that an incident will never occur. Operational logs may contain request metadata used to protect and run the service; we do not intentionally log paystub contents, passwords or authentication tokens.
12Export and deletion
Use Profile to export Notes or Finance backups. You can delete individual original paystubs from Import paystubs; confirmed income entries remain until you remove them separately. To delete your account, open Profile → Delete account, enter your current password and type DELETE. A server job revokes access and removes active account data, including Notes, publications, Finance and uploaded files. It continues if the app closes and retries interrupted steps.
Account deletion removes this account's local caches, saved note lock and preview files on the device requesting it. Other signed-in devices remove local account records when they next receive the deletion response; we cannot remotely erase an offline device. Shared device editor presets and saved signatures are reset on the requesting device. Copies you exported, screenshots, and copies other people already retained cannot be recalled.
13Recovery retention
Application-managed recovery snapshots are restricted and expire within 30 days. Account-specific file and Finance backups are removed by the deletion job. Recovery checks exclude deleted accounts, and minimal deletion records are retained to prevent restoration or reuse of revoked sessions. Provider-managed recovery copies and operational logs follow the relevant provider's retention rules; their availability and settings may differ from our application-managed snapshots.
14Passkeys and biometric verification
Passkeys use domain-bound WebAuthn credentials. Our authentication provider stores public credentials, names, identifiers and relevant timestamps; the private credential stays with your device or passkey provider. Face ID, Touch ID or your device PIN verifies use locally. We do not receive your biometric template. A local note or vault lock is separate from server sign-in. Register passkeys separately for Unseriety and GoPhaze. Recovery methods have different protections. Bank linking remains disabled. Web passkey management is available; availability of native app passkey sign-in depends on the released app build.
15Recovery phrase and security activity
On the account security website, you can create a product-specific, one-use 16-word recovery phrase after verifying your account. The phrase is generated in your browser. Enrollment stores a one-way digest associated with your account, rather than the readable phrase. To recover, you submit your account email, password and phrase to the recovery service for verification. Successful recovery removes enrolled authenticator-code and phone factors, signs out existing sessions and consumes the phrase; existing passkeys remain registered. We retain recovery status, security event types and timestamps to show recovery activity and investigate misuse. Keep the phrase private: support does not need it. Replacing the phrase invalidates the previous one. These records follow account deletion and applicable security-retention rules; minimal revocation records may remain to prevent reuse of old sessions.
16Authorized operator access
Unseriety is operated on GoPhaze software and infrastructure. Authorized GoPhaze operators may access account information through restricted administrative tools or provider consoles when needed for support, account administration, security, recovery or a legal obligation, subject to their assigned permissions. Operator tools record administrative actions and access changes. This is not end-to-end encryption that prevents the operator from accessing service data. Account-security authentication and hosting-console authentication are separate controls; we do not claim every administrative path uses phishing-resistant authentication.
17Plaid and future financial connections
Unseriety is the application intended to use Plaid under Phaze 2 LLC, doing business as GoPhaze. Plaid bank linking is not currently active. We do not treat accepting this notice, adding a passkey or entering manual financial records as permission to connect a bank. Before activation, the connection flow will identify the requested account data and purposes and ask you to authorize sharing. We will update this notice to describe the actual products, data categories, retention and disconnection controls before enabling collection. Plaid has its own End User Privacy Policy. Proposed credit-report access and hosting migrations are not current data flows.
18Website preferences and your rights
The website can remember your selected color theme in browser local storage. It does not load advertising or third-party analytics scripts. Browser playground content stays in page memory; downloads are saved only when you choose. Service providers may process network metadata needed to deliver and protect requests. Contact us to ask about access, correction, deletion or other privacy rights that apply to you. We may need to verify a request without collecting unnecessary identity information. Provider processing may take place in the United States and other locations under the applicable service arrangements.
19Feature requests
If you submit an idea through the roadmap, we store its category, title, description, submission time and random receipt ID privately for product review. No name or email is required. Please do not include sensitive information. A short-lived hashed network identifier limits abuse; it is not attached to the idea. Requests are removed by scheduled cleanup after 90 days, with up to one additional day for the date-based cleanup. Contact us with your receipt ID if you want your submission removed sooner. Ideas are not published automatically.
20Questions and changes
Contact us to request access, correction or deletion, or to ask about applicable privacy rights. This notice was updated October 29, 2026 (2026-10-29.2). We review it after material changes to collection, providers, authentication, recovery or sharing. Earlier acknowledgement receipts retain the version accepted at that time; publishing this notice does not backdate your consent. We will update this notice as the app and connected services change. The current notice does not claim Plaid approval, an independent security certification or completed App Store review.