Signal · by Unleashed

Privacy Policy

Effective date: 2026-06-26 · Last updated: 2026-06-26

All sensing and all derivation happen 100% on your device. No account, no servers, no analytics, no third-party SDKs, no advertising, no cross-app tracking. Your precise location never leaves your device. The only time anything leaves your phone is when you choose to propose a meet-up — and then only a coarse, labelled area and a time window (never your exact location or your calendar).

Apple requires this policy to be reachable at a stable HTTPS URL listed in App Store Connect and linked inside the app (Settings / About). Use the same URL in both places.

Who we are

Signal is built by Elliot Kelly, trading as Unleashed. For any privacy question or request, contact elliotkelly@unleashed.vision. As a UK user's app, we act as the data controller under UK GDPR for the limited processing described below.

What Signal processes on your device, and why

Data	Source	Why	Where it goes
Location	CoreLocation — When-In-Use and Always, including visits (CLVisit), significant-location-change, and background/terminated-app relaunch	To recognise the places you go and derive your daily rhythm and commute	Processed only on your device. Never transmitted.
Motion activity	CoreMotion (CMMotionActivityManager)	To tell walking from driving or transit, so your commute is described accurately	Processed only on your device. Never transmitted.
Derived places, routines, commutes, "1% delta" insights	Computed on-device from the above	The whole point of Signal — your second self	Stored only on your device. Never transmitted.

Legal basis (UK GDPR): your consent, given through the iOS permission prompts, which you can withdraw at any time (see Your controls). Processing is local and limited to the features above (data minimisation).

The one thing that leaves your device: the twin-relay

When you explicitly choose to propose a meet-up to someone, Signal sends a single, coarse message to relay it to that one person's device:

a labelled area with a radius of at least 0.5 km (never a precise point),
a time window,
a provenance label (e.g. "from Elliot's twin").

It never sends raw GPS, your precise location, your calendar, or any continuous stream. It carries no account, login, name, or device identifier. It is a single, user-initiated event each time.

Infrastructure sub-processor: this relay runs on Cloudflare Workers, used purely as transport. The message is held briefly (short time-to-live) only until the recipient collects it, then it expires. Cloudflare provides protection at least equivalent to this policy.

Third parties

None. Signal contains no analytics, advertising, attribution, or tracking SDKs.

Tracking

Signal does not track you across other companies' apps or websites and does not use the advertising identifier (IDFA). We do not ask for App Tracking Transparency permission because we have nothing to track.

Retention and deletion

On-device data lives only on your device. Deleting the app removes it.
The in-app "Wipe all Signal data" button erases every place, intention, and day on your device immediately and irreversibly.
Twin-relay messages on the Cloudflare Worker are ephemeral and expire on a short TTL after delivery.

Your controls

Revoke location or motion access any time in iOS Settings → Privacy & Security.
Stop using the twin-relay at any time; nothing is sent unless you act.
Use the in-app Wipe all Signal data button to erase everything locally.
To make a UK GDPR request (access, erasure, objection), email us at the address above.

Children

Signal is not directed at children and is not intended for use by anyone under 13.

Changes

We will update this policy as Signal evolves and revise the effective date above. Material changes will be surfaced in the app.