Privacy Policy

Last updated: September 22, 2026

This Privacy Policy explains how Building Unity (“Building Unity,” “we,” “us”) collects, uses, shares, and protects information when you use the Building Unity mobile app and this website (together, the “Service”). Building Unity is a relationship-companion app for couples. It is not a healthcare provider, and it is not therapy or a crisis service.

The short version: we collect what you give us so the app can work for you and your partner. Your relationship content is shared with your partner by default, and with a therapist only if you connect one and give consent. We do not sell your personal information, and we do not use it for third-party advertising.

1. Information we collect

Information you provide

Account information: your email address, password (stored by our authentication provider in hashed form, never visible to us), display name, and optional profile photo.
Relationship content you create: daily check-ins (ratings for connection, respect, feeling heard, mood, stress, and energy; what you appreciate and need; an optional prayer request), journal entries (shared or private), assessment answers and results, goals and progress, conflict-resolution sessions, trust challenges, promises, transparency and forgiveness entries, saved conversation cards, date night history, calendar items, and homework responses.
Messages: messages you exchange with a connected therapist, and support requests you send us.
Connection information: invite codes you create or redeem to pair with a partner or connect with a therapist or practice.
Text you enter into AI features (see AI features).
Therapist and practice accounts additionally provide professional details such as license number, license state and type, specialties, and organization contact information, which we use to review and approve the account.

Some of what you write may be sensitive, for example details about your relationship, emotional wellbeing, or religious practice. You choose what to share, and you can edit or delete much of your content in the app.

Information collected automatically

Device and push information: device type, operating system and app version, and a push notification token so we can send the reminders and alerts you have turned on.
Usage analytics: information about how the app is used (for example, which screens are opened and features used), collected through Firebase Analytics to improve the app.
Diagnostics: crash reports and performance information collected through Firebase Crashlytics.
App integrity signals: Firebase App Check verifies that requests come from a genuine copy of our app, to protect against abuse.

Information that stays on your device

If you turn on biometric unlock (Face ID, Touch ID, or device passcode), authentication happens entirely on your device through Apple’s system frameworks. We never receive or store your biometric data; we only store whether the setting is on.

2. How we use information

To create and secure your account and pair you with your partner.
To provide the app’s features, including showing shared content to your partner and, with your consent, to your therapist.
To generate AI-assisted suggestions when you ask for them.
To send notifications you have enabled (for example check-in, homework, date night, goal, and message reminders). You can turn these off in Settings → Notifications or in iOS Settings.
To respond to support requests and communicate with you about the Service.
To review and approve therapist and practice accounts.
To understand usage, fix bugs, and improve the app, and to manage feature rollouts (Firebase Remote Config).
To keep the Service safe, prevent fraud and abuse, keep audit records of sensitive actions, and comply with law.

We do not sell personal information, share it for cross-context behavioral advertising, or use your relationship content to build advertising profiles.

Your partner. Once you pair, shared content (such as check-ins, shared journal entries, goals, and activity history) is visible to your partner. Journal entries marked Private are visible only to you.
Therapists and practices. A therapist can only be connected if you enter their invitation code. After connecting, a therapist can see only the categories you allow in Settings → Consent Management: daily check-ins, assessment results, goals, and the relationship dashboard. You can revoke consent at any time, and we keep a record of when consent was granted and revoked. Messages you send your therapist and homework they assign are shared between you and that therapist. Private journal entries are never visible to a therapist.
Practice administrators of the practice or agency your therapist belongs to may see limited operational information, such as that a couple is connected to one of their therapists, for administration and analytics.
Your therapist is independent of Building Unity. How they use information you share with them is governed by their own professional obligations and privacy practices, not this policy.

4. AI features

The AI companion (Reflection Assistant, Conversation Starters, Date Night Ideas, Weekly Encouragement, and Homework Explanations) is optional. When you use one of these features, the text you enter, or the relevant homework description, is sent from our servers to OpenAI (currently the gpt-4o-mini model) to generate a response. We do not send your name or email address with these requests.

The AI-generated response is saved to your couple’s space, where you and your partner can see it. If you have connected a therapist, your therapist can also see AI-generated responses for your couple, and may review Reflection and Weekly Encouragement responses.
OpenAI processes this data as our service provider. Under OpenAI’s API terms, data sent through its API is not used to train its models by default and may be retained by OpenAI for a limited period for abuse monitoring.
AI output can be inaccurate or incomplete. It is supportive and reflective only, and never diagnostic or clinical advice.
Please don’t include information in AI requests that you don’t want processed this way. If you don’t use the AI features, nothing is sent to OpenAI.

5. Service providers

We use trusted providers to run the Service. They process information on our behalf and under their own security and privacy commitments.

Provider	Purpose
Google Firebase Authentication	Account sign-in (email and password) and password reset
Google Cloud Firestore	Storing your account and relationship content
Google Cloud Storage for Firebase	Storing files and images uploaded to the Service
Google Cloud Functions for Firebase	Server-side processing, such as pairing, account deletion requests, and AI requests
Firebase Cloud Messaging	Delivering push notifications
Google Analytics for Firebase	Usage analytics
Firebase Crashlytics	Crash reporting and diagnostics
Firebase Remote Config	Configuring features and rollouts
Firebase App Check	Protecting our backend from abuse
OpenAI	Generating AI companion responses (only when you use an AI feature)

The app is currently free and has no in-app purchases. If we introduce paid plans in the future, purchases will be processed by Apple through the App Store, and we expect to use RevenueCat to manage subscription status. We do not receive your full payment card details. We will update this policy before paid features launch.

We may disclose information (a) if required by law, subpoena, or other legal process; (b) to protect the rights, safety, or property of our users, the public, or Building Unity; (c) in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information; or (d) with your direction or consent.

7. Retention

We keep your information for as long as your account is active and as needed to provide the Service. When you delete content in the app, it is removed from the active database. When you delete your account, we remove or de-identify your personal information as described below, except where we need to keep limited records to comply with legal obligations, resolve disputes, prevent abuse, or maintain security audit logs. Backups and provider logs are overwritten on their normal schedules.

8. Deleting your account

You can delete your account in the app at any time: More → Settings → Privacy & Legal → Delete My Account. You’ll be asked to re-enter your password to confirm.

Your access ends immediately and your account and data are scheduled for permanent removal.
Your partner keeps their own account, but content tied to your couple will no longer be accessible to them. Where shared content must be retained for your partner, it is de-identified rather than linked to you.
Deletion cannot be undone.

You can also request deletion by emailing kamran@kamrancreation.com from the email address on your account. We may need to verify your identity before acting on the request. See Delete your account for step-by-step instructions.

9. Security

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), encryption at rest provided by Google Cloud, database security rules that limit each record to the people allowed to see it, consent checks before any therapist access, App Check, audit logging of sensitive actions, and optional biometric lock on your device. No system is perfectly secure, so please use a strong, unique password and keep your device protected.

10. Your rights & choices

Depending on where you live (for example, the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to:

access the personal information we hold about you and receive a copy of it;
correct inaccurate information;
delete your information;
object to or restrict certain processing, or withdraw consent at any time (for example, therapist sharing via Consent Management);
data portability; and
not be discriminated against for exercising these rights.

You can edit your profile, manage consent, control notifications, and delete your account in the app. For any other request, email kamran@kamrancreation.com. We will respond within the time required by applicable law. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Legal bases (EU/UK): we process information to perform our contract with you (providing the Service), based on your consent (for example, therapist sharing, sensitive content you choose to enter, AI features, and notifications), and for our legitimate interests in securing and improving the Service.

California: we do not sell or “share” personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes beyond providing the Service.

11. Children

Building Unity is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at kamran@kamrancreation.com and we will delete it.

12. International users

We and our service providers may process and store information in the United States and other countries whose data protection laws may differ from those where you live. Where required, we rely on appropriate safeguards for these transfers.

13. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, notify you in the app or by email before the changes take effect.

14. Contact us

Questions or requests about privacy? Email kamran@kamrancreation.com.