UnityHelpPrivacy statement
Draft: under legal review. The commitments here are the ones we keep today; the wording may change.
This statement covers the web platform at unityhelp.org and its country sites. The mobile app has its own statement in the app stores. Last updated 25 October 2026.
Who is responsible
For an organisation's records, the organisation that recorded them is the controller and UnityHelp, Inc. is its processor. For your account, UnityHelp, Inc. is the controller. Contact: info@unityhelp.org.
What we hold about you, an account holder
Your name, email address, phone number, language, organisation and role; when you signed in; what you did on the platform, in a log kept for security and accountability. A field worker's phone number and national ID number are encrypted.
What organisations record
Sites, facilities, activities, field reports with their location and any photo or voice note, household registers, payment lists and referrals. These belong to the organisation. A referral case is sealed and readable by the receiving organisation alone. Gender-based violence records hold no location and no date of birth, and every access is logged permanently.
Where it is held
On servers in Ireland (Amazon Web Services, eu-west-1). Backups expire after 30 days.
Who else processes it
- Amazon Web Services, Ireland: hosting and backups.
- The AI model provider for the platform's assistant. It receives the question asked and the records read to answer it, never a sealed case. It does not train on this data and keeps it for at most 30 days.
- Mapbox: map tiles. Your browser fetches them, so Mapbox sees your address and the area of the map you look at, not the data on it.
- An email provider: sign-in codes, invitations and notifications.
- A web search provider, when the assistant searches the web: the search words only.
How long
Your account until it is closed. An assistant conversation until you delete it; its working state is deleted 7 days after each answer. A referral until it expires or is withdrawn. Logs of access to restricted records permanently.
Your rights
Export what the platform holds about you, ask for it to be erased, and see the log of who accessed your data, from your account settings or by writing to info@unityhelp.org. An organisation's records are the organisation's: ask it, and it can export or delete them.
What we never do
Sell data. Use it to train any model. Share a person's data with any partner, provider or authority except as described under Data and the authorities. Track you across other sites. This site sets no cookies and loads nothing from anyone else.
Security
Encryption in transit and of identifying fields at rest; sign-ins that expire; a permanent audit log for restricted data; small counts withheld from every shared figure. If a breach affects your data, the organisation concerned is told within 24 hours of UnityHelp knowing, and you are told by that organisation, with our help, within 72 hours of the breach being confirmed.