Privacy Policy

Compound is a habit tracker and personal growth platform that helps you build habits, track goals, create routines, maintain streaks, and measure long-term progress through small daily improvements.

Compound is a product developed and operated by Unohu. In this Privacy Policy, “Compound”, “we”, “us” and “our” refer to Unohu acting as the data controller for personal data processed through Compound at https://compound.unohu.app.

Registered address: [Registered address — to be provided]. Company registration: [Company registration number — to be provided]. Contact: [hello@unohu.app]. Data protection contact: [privacy@unohu.app].

Personal information

• Name
• Email address
• Profile information you choose to provide

Account information

• Authentication records
• Login history
• Security events (e.g. password changes, failed logins)

User content

• Habits, goals, routines
• Progress, streaks, achievements
• Statistics generated from your activity
• Journal entries, notes and reflections (where offered)

Technical information

• IP address, browser, device and operating system
• Cookies and similar technologies (see our Cookie Policy)
• Analytics events, crash reports and performance metrics

We process your personal data to:

• Create and secure your account, and authenticate you.
• Provide the core habit-tracking, goals, routines and analytics features.
• Send transactional emails (verification, password resets, security alerts, billing, receipts).
• Send optional marketing emails where you have opted in.
• Deliver AI-powered insights and recommendations, where you have enabled them.
• Detect, investigate and prevent fraud, abuse and security incidents.
• Comply with legal and regulatory obligations.
• Improve and develop Compound.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract — to provide Compound to you.
• Legitimate interests — to secure the service, prevent abuse and improve the product.
• Consent — for marketing communications and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — where we are required to retain records (e.g. tax, security).

We use trusted third-party services to operate Compound. Where they process personal data on our behalf, they act as subprocessors under written data processing terms.

• Supabase — database, authentication and storage.
• Resend — transactional and marketing email delivery.
• Stripe — payment processing and subscription billing.
• Google Analytics — aggregated usage analytics.
• PostHog — product analytics and feature experimentation.
• Cloudflare — DNS, CDN and security.
• Vercel — application hosting and edge delivery.
• Sentry — error monitoring and crash reporting.

This list may change as the service evolves. Material changes will be reflected here.

Compound is a product operated by Unohu. Authentication, infrastructure, customer support, analytics, security and email communications for Compound may be provided by Unohu.

You may therefore receive emails from official @unohu.app email addresses. Those emails may reference both Compound and Unohu. Your data is processed by Unohu solely for operating and improving the Compound service.

We do not sell your personal data to third parties.

Depending on where you live (including under GDPR, UK GDPR and CCPA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Export your data in a portable format.
• Delete your account and associated data.
• Withdraw marketing consent at any time.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.
• For California residents: request disclosure of the categories of personal information collected, request deletion, and opt out of “sale” or “sharing” (we do not sell your data).

To exercise any of these rights, contact us at [hello@unohu.app] or [privacy@unohu.app]. We will respond within the timeframes required by applicable law.

Your data may be processed in countries outside your own, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.

We use industry-standard technical and organisational measures — including encryption in transit, access controls and monitoring — to protect your data. No system is perfectly secure; if we become aware of an incident affecting your data, we will notify you and the relevant authorities as required by law.

Compound is not directed at children under 13 (or under 16 in the EU/UK where applicable local law requires a higher age of consent). If we learn that we have collected personal data from a child without appropriate consent, we will delete it.

We may update this Privacy Policy from time to time. Material changes will be notified to you by email or through the service. The “Last updated” date at the top reflects the latest revision.

Questions about this Privacy Policy or how we handle your data can be sent to [privacy@unohu.app] or [hello@unohu.app].