Privacy
Last updated 2026-09-15. Questions: [email protected].
Last updated: 2026-09-14
Unshelf is operated by Bori Labs LLC ("we", "us"). This policy explains what the Unshelf iOS app collects, why, who else sees it, and what you can do about it.
The short version
You share a link to a reel. We fetch the video, transcribe its audio, and send that transcript to Anthropic's Claude to produce a summary and a few action items. We keep the transcript and the summary so you can read them later. We also record what you do with the results — which reels you keep, which you drop, which you rate up or down — because that record is what makes the product improve. We do not sell your data, and we do not use it for advertising.
Two things are worth knowing up front, because they are easy to assume otherwise:
- We store the full transcript of every reel you share, not just the summary.
- Deleting a reel does not delete the record that you swiped or rated it, and that record keeps a few facts about the reel — which platform it came from, how many action items and how many cautions it produced, and how long it was. Not its link, its title, or anything it said. Only deleting your account removes those records. See "Deleting your data" below.
What we collect
Account and sign-in. Your email address; your Apple or Google account identifier if you sign in with those; the display name Apple provides on first sign-in. If you use Apple's "Hide My Email", we receive and store the relay address Apple gives us, not your real one. Session tokens and one-time login codes are stored only as cryptographic hashes — we cannot recover either.
IP addresses. Recorded when you request a login code and in our authentication log, to rate-limit and detect abuse.
Content you share. The reel's URL; the video's title and the uploader's handle; the full transcript of the video's audio; the summary and action items generated from it; any thumbnail; and the digests we assemble for you.
What you do in the app. We keep an append-only log of your interactions: keeping or dropping a reel, removing one from your library, clearing all, restoring, undoing, rating a reel up or down, and checking or unchecking an action item. Each entry records the type, the related reel or action item, the topic, and the time. We also record which onboarding screens you reached and how you signed in, each time we show you our plans and from which screen, when you open a topic digest or decline to use your free one, and when a purchase completes (recorded against the screen you bought from — never the price or your payment details).
Each entry about a reel also records a few plain facts about that reel at the moment you acted on it: which platform it came from (Instagram, TikTok, YouTube or other), how many action items it produced, how many cautions we flagged in it, and how long the video was. For a ticked action item we also record which screen you ticked it on. We keep these because they are what tell us which kinds of reels are worth your time — and, as the next paragraph explains, they are kept in a form that says nothing about what the video actually contained.
Safety reframing. When the model rewrites or removes an action item for safety reasons — for example, an item that reads as financial, medical, legal, physical-safety or similar risky advice — we record that this happened for that reel: the risk category and the reel it came from, and nothing else. We never store the original or reframed text of the item, and this record says nothing about you beyond the account it belongs to. We keep it so we can tell how often the safety step is doing its job and on what kinds of reels.
Purchases. Your subscription or lifetime-purchase status, the Apple transaction identifier, expiry, and whether auto-renew is on. We never see your payment details — Apple handles payment entirely. Our purchase records include the price paid, the currency, and the store country as reported by Apple through RevenueCat, the service we use to verify and manage purchases. RevenueCat holds your purchase history under an account identifier we generate for this purpose — not your email address.
Technical. A device push token if you enable notifications; your timezone and notification preferences; and error reports.
What we do not keep
- Audio is deleted immediately after transcription. We never store the video or its audio.
- We never store raw session tokens or raw login codes — only hashes.
- Transcripts are never placed in our shared cross-user cache (see below).
Who else receives your data
| Recipient | What they receive | Purpose |
|---|---|---|
| Anthropic | The transcript, caption, uploader handle, and source URL | Generating summaries and action items |
| Apple | Sign-in tokens, purchase transactions, push notifications | Auth, subscriptions, notifications |
| Sign-in tokens | Authentication (only if you use Google sign-in) | |
| RevenueCat | An account identifier we generate, your App Store purchase receipt and subscription status | Verifying and managing purchases |
| Expo | Your device push token and the text of each notification | Delivering notifications |
| Resend | Your email address and the message | Sending login codes and account notices |
| Sentry | Error reports | Diagnosing crashes |
| Cloudflare | Encrypted database backups | Disaster recovery |
| Hetzner | All server-side data at rest | Hosting |
Anthropic does not use the transcripts we send to train its models. Anthropic deletes API inputs and outputs within 30 days. There are two exceptions, which apply to any Anthropic customer: content flagged by Anthropic's automated trust-and-safety systems may be retained for up to two years, and data may be retained where required by law.
Our error reporting is configured not to send personal data: request bodies are dropped at the SDK level, local variables are excluded, and reel URLs and email addresses are redacted from error text before transmission.
We do not sell personal data. We do not share it with advertisers. We do not use it to train any machine-learning model of our own.
Where your data is processed
In the United States, on servers in Ashburn, Virginia. If you are in the UK, the EEA, or elsewhere outside the US, your data — including transcripts — is transferred to and processed in the United States. Backups are stored with Cloudflare.
A shared cache across users
Because many people share the same popular reels, we keep one cached extraction per source URL and reuse it. That cache holds the video's title, uploader, summary and thumbnail URL. It contains no transcript and no user identifier, so it cannot be linked back to you, and it is not deleted when you delete your account. Cached entries are removed on a rolling schedule.
How long we keep things
| Data | Retention |
|---|---|
| Reels, transcripts, summaries, action items | Until you delete them or delete your account |
| Interaction log | Until you delete your account |
| Sessions | Purged after 60 days of inactivity |
| Items in Recently Deleted | Purged after 30 days |
| Login codes | Short-lived; swept regularly |
| Authentication log | Up to 2 days |
| Shared extraction cache | Rolling window, independent of any account |
Deleting your data
You can delete your account from within the app. Doing so removes your profile, sign-in identities, sessions, reels, transcripts, summaries, action items, the full interaction log, entitlements and push tokens, and revokes our Apple sign-in token.
Four things deliberately survive account deletion, and none of them identifies you:
- A record that a lifetime purchase was made — the Apple transaction identifier and a date, with no link to any person. We keep it so our count of lifetime licences sold stays accurate.
- The shared extraction cache described above, which holds no user identifier.
- Rate-limiting records tied to an IP address, kept for up to two days; they are not linked to an account.
- A record that a purchase moved between accounts — the Apple transaction identifier, the internal numeric ids of the two accounts, and a date. We keep it to detect one purchase being passed around to obtain extra processing allowance. It contains no email, name, or content.
Because we keep 30 days of encrypted backups for disaster recovery, deleted data may also persist in those backups for up to 30 days before it is overwritten.
Deleting an individual reel removes that reel, its transcript and its action items. It does not remove the interaction-log entries recording what you did with it — those are unlinked from the deleted reel but retained until you delete your account.
Those retained entries keep a few attributes of the deleted reel, described under "What you do in the app" above: the platform, the counts, the length, and the topic. We are stating this plainly because it is easy to assume otherwise. What they never contain is the reel's link, its title, its transcript, its summary, or any of its text — nothing that identifies the video or could reconstruct it. Deleting your account removes these entries entirely.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or object to our use of your personal data, and to complain to a data-protection authority.
Deletion is available directly in the app. For any other request, contact [email protected] and we will respond within the period required by applicable law. We do not currently offer an automated data export; we will provide a copy of your data on request, manually.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives in exchange for personal information.
Security
Session tokens and login codes are stored only as hashes. Access to production systems is limited to the operator. Backups are held with Cloudflare. No system is perfectly secure, and we cannot guarantee absolute security.
Children
Unshelf is not directed to children under 13, and we do not knowingly collect personal data from them. Before an account can be created we ask for your birth month and year. That answer is checked on your device and is never sent to us — we store only the fact that an account passed the check, and the date it did. If you believe a child has provided us data, contact [email protected] and we will delete it.
Changes
We will update this policy as the product changes and revise the effective date above. Material changes will be announced in the app or by email.
Contact
Bori Labs LLC — [email protected]
The waitlist on this site
When you join the waitlist we store your email address and a few details about how you got here — which link you came from (for example, whether it was our Instagram or TikTok bio) and basic technical info like a one-way hashed form of your IP address. We use this only to email you when Unshelf launches and to understand which channels reach people. We do not sell it, and we do not add you to any other list.
Want your email removed? Email [email protected] and we'll delete it. When we launch, your first email from us will confirm you're subscribed; you can opt out from any message.