Privacy Policy

Last updated: April 2026

1. Who are we?

Unstoppable is a personal productivity application operated by an independent developer based in Quebec, Canada. The data controller is the publisher of the application ("Unstoppable"), reachable at: hello@get-unstoppable.app

The publisher is your single point of contact for any question about your personal data, your rights, and our practices.

2. Data we collect

We only collect data necessary for the service to function:

Account data

  • Email address (account creation, authentication, account-related communication)
  • First or full name (optional, freely entered by the user)
  • Password (stored encrypted - we never have access to it in plain text)
User content
  • Tasks, projects, habits, objectives, notes, golden rules, reviews (anything you create in the app)
Technical data
  • IP address, browser user-agent, login timestamps (security, abuse detection, diagnostics)
  • Server error logs (solely to fix bugs)
Local storage (localStorage)
  • UI preferences (language, theme, dismissed banners) - stored in your browser, not on our servers

3. Use of data

Your data is used exclusively to:

  • Run the application and display your content
  • Ensure the security of your account and prevent abuse
  • Send account-related emails (password reset, security notifications)
  • Diagnose and fix technical bugs
We never sell, rent, or share your data with third parties for commercial or advertising purposes.

Legal basis for processing (GDPR art. 6)
  • Performance of contract: operating the application in accordance with the Terms
  • Legitimate interest: security, stability, fraud prevention
  • Consent: for any non-essential communication or optional feature (withdrawable at any time - see section 6)

4. Subprocessors and international transfers

To operate the service, we rely on the following subprocessors. Each is bound by contractual obligations of confidentiality and security:

  • Web Hosting Canada (WHC) - web host based in Montreal, Quebec, Canada - storage of your account and content
  • Google LLC (United States) - only if you use "Continue with Google" sign-in
  • Transactional email services - sending account emails (reset, notifications)
Your primary data is hosted in Canada, a country recognized by the European Union as providing an adequate level of protection (adequacy decision under Article 45 GDPR).

Some ancillary subprocessors (such as Google, for OAuth) may process data in the United States. These transfers are governed by recognized mechanisms (Standard Contractual Clauses, DPF, or equivalent safeguards under the GDPR and Quebec's Law 25).

5. Data retention

We retain your data only for as long as necessary:

  • Account data and content: as long as your account is active. Upon account deletion, erased within 30 days.
  • Technical logs (IP, connections): 12 months maximum, then automatically deleted
  • Transactional emails (reset, etc.): 90 days
  • Support emails: 3 years (for case tracking)
  • Security backups: up to 60 days after account deletion, then permanently erased

6. Your rights

Under the GDPR (Europe), Law 25 (Quebec - Act respecting the protection of personal information in the private sector), and equivalent laws, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request deletion of your account and data
  • Right to data portability: receive your data in a readable, structured format
  • Right to object: object to certain processing activities
  • Right to restriction: request temporary suspension of processing
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
  • Right to de-indexation (Law 25): request that information no longer be accessible by technological means
To exercise these rights, contact us at hello@get-unstoppable.app. We will respond within 30 days.

Supervisory authorities - If you believe your rights are not being respected, you may lodge a complaint with:
  • In Quebec: Commission d'accès à l'information (CAI) - cai.gouv.qc.ca
  • In France: CNIL - cnil.fr
  • Other countries: your local data protection authority

7. Security and incidents

We implement reasonable measures to protect your data: encryption in transit (HTTPS), password hashing, access controls, regular backups.

In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you and the competent authorities (CAI in Quebec, CNIL in France) without undue delay, as required by law (within 72 hours under the GDPR).

8. Cookies and local storage

Unstoppable does not use advertising cookies or third-party trackers. Only the following are used:

  • Technical cookies strictly necessary for authentication and security
  • Browser localStorage to remember your UI preferences (language, theme, dismissed banners) - this data never leaves your device

9. Minimum age

Unstoppable is intended for users aged 16 and over. If you are under 16, please do not create an account without the explicit consent of a parent or legal guardian.

10. Changes

This policy may be updated. In the event of a substantial change, you will be notified by email or through the application before the changes take effect.