Select Page

Privacy policy

Introduction

This Privacy Policy explains how Unmuddled collects, uses, stores, and protects your personal information when you visit our website, purchase products, use our digital tools, download resources, subscribe to emails, or otherwise interact with us.

This Privacy Policy applies to unmuddled.co and any products, services, downloads, applications, resources, and digital tools operated by Unmuddled, including Time Buckets and Stop the Spiral.

Who we are

Unmuddled is operated by Amanda Appiagyei.

If you have any questions about this Privacy Policy or how your information is handled, please contact:

amanda@unmuddled.co

Information we collect

Depending on how you interact with our website, products, and digital tools, we may collect:

Information you provide

  • Name
  • Email address
  • Billing address
  • Account information
  • Purchase history
  • Messages, enquiries, or support requests

Information collected automatically

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Referring websites
  • Dates and times of visits
  • Login and security information, where applicable

This information helps us operate, improve, and secure our website and services.

Digital product purchases

When you purchase a product through Unmuddled, we collect information required to process your order and provide access to your purchase.

This may include your name, billing address, email address, order history, transaction details, and records of purchased products.

Payment information is processed securely by our payment providers. We do not store full payment card details on our servers.

How we use your information

We may use your information to:

  • Provide access to products, services, and digital tools
  • Process payments and orders
  • Deliver purchased products
  • Respond to enquiries and support requests
  • Send important service-related communications
  • Send newsletters and marketing emails, either with your consent or, if you’ve bought or claimed a product, under the UK soft opt-in rules (see “Email communications” below)
  • Improve website performance and user experience
  • Maintain website and application security
  • Prevent fraud or misuse
  • Comply with legal and regulatory obligations

Email communications

If you buy or claim a product from us, including free or discounted products, we’ll send you emails about your order and access. We’ll also add you to our email list to send you tips and offers related to similar products. We do this under the UK “soft opt-in” rules (the Privacy and Electronic Communications Regulations, or PECR), so you don’t need to tick a box. You’ll be told about this when you check out.

If you download a free resource or sign up to our newsletter, we’ll only send you marketing emails with your consent.

You can unsubscribe from marketing emails at any time using the link in every email, or by emailing amanda@unmuddled.co. Unsubscribing won’t affect your access to anything you’ve bought, and we’ll still send you essential emails about your orders.

Cookies

Our website uses cookies and similar technologies to:

  • Remember preferences
  • Maintain secure sessions
  • Process purchases and checkout activity
  • Improve website performance
  • Analyse website usage
  • Support the functionality of digital tools, where applicable

You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

Where required by law, non-essential cookies will only be used with your consent.

Login and Security Data

To help protect accounts, digital tools, and website security, we may collect and store technical information including IP addresses, login activity, browser information, device information, and security logs where applicable.

This information is used for security, fraud prevention, troubleshooting, and system administration purposes.

Time Buckets app

Time Buckets is a productivity app available as a progressive web app (PWA).

Creating an account
To use Time Buckets, you’ll need to create an account using your email address. We use this solely to let you log in and recover your account. We don’t use it for anything else, and we don’t send marketing emails to it unless you separately opt in elsewhere.

What we store
Once you’re signed in, your bucket data, including bucket names, tasks, schedules, colours, and settings, is stored securely in our Supabase database, on servers located in the European Union, linked to your account, so it stays available and synced across your devices automatically.

What we don’t store
We don’t collect any personal information beyond your email address. We have no way to identify you beyond that.

Who can see it
Access to your data is kept very tightly controlled. The safeguards I describe below mean other users can never see your tasks or get into your account. As the person who runs Unmuddled on my own, I’m the only one with admin access to the systems your data sits on. I only ever use that access to run, maintain, and secure the service, or to help with a problem you’ve raised, never to read your tasks out of curiosity or for any unrelated purpose. No one else is given access to your personal data, apart from the service providers I’ve named above (Supabase and MailerSend), who only handle it on my instructions and have their own data protection duties to follow.

How I keep it safe
I take looking after your data seriously, and I’ve put proper measures in place to do that. Every account I use to run the service, including the database, email, hosting and domain accounts, is protected by multi-factor authentication (MFA), so no one can get in with just a password. On top of that, your tasks are protected by database-level controls that keep each person’s records walled off from everyone else’s. I deliberately keep the number of people and systems that can reach your data to the absolute minimum: it’s just me, and no one else has access.

Third parties
Time Buckets uses Supabase to provide account login and store your data securely. No data is sold, shared with advertisers, or provided to unrelated third parties.

Deleting your data
You can delete your account and all associated data at any time via the app settings. This permanently removes your data from our database.

What this actually means
In short: your email only ever logs you in, your tasks sit in a locked box only your account can open, I only go near the system to keep it running or help when you ask, everything is protected with multi-factor authentication, nothing is ever sold or shared for advertising, and you can delete it all yourself, permanently, whenever you like.

Stop the Spiral App

Using it without an account

You can use Stop the Spiral straight away with no sign up. In this case, an anonymous account is created behind the scenes so the app can save your progress, but it isn’t linked to your email or any personal information, and it stays only on your device.

Creating an account

If you want to keep your progress across devices, you can turn your anonymous account into a full account using your email address. We use this solely to let you log in and recover your account. We don’t use it for anything else, and we don’t send marketing emails to it unless you separately opt in elsewhere.

What we store

Once you’re signed in, your tasks, colour labels, timer preferences, and routine selections are stored securely in our Supabase database, on servers located in the European Union, linked to your account, so it stays available and synced across your devices automatically.

If you never create a full account, your data stays in your browser’s localStorage and is never transmitted to our servers.

What we don’t store

We don’t collect any personal information beyond your email address, and only once you choose to create a full account. We have no way to identify you beyond that.

Who can see it

Access to your data is kept very tightly controlled. The safeguards I describe below mean other users can never see your tasks or get into your account. As the person who runs Unmuddled on my own, I’m the only one with admin access to the systems your data sits on. I only ever use that access to run, maintain, and secure the service, or to help with a problem you’ve raised, never to read your tasks out of curiosity or for any unrelated purpose. No one else is given access to your personal data, apart from the service providers I’ve named above (Supabase and MailerSend), who only handle it on my instructions and have their own data protection duties to follow.

How I keep it safe

I take looking after your data seriously, and I’ve put proper measures in place to do that. Every account I use to run the service, including the database, email, hosting and domain accounts, is protected by multi factor authentication (MFA), so no one can get in with just a password. On top of that, your tasks are protected by database level controls that keep each person’s records walled off from everyone else’s. I deliberately keep the number of people and systems that can reach your data to the absolute minimum: it’s just me, and no one else has access.

Third parties

Stop the Spiral uses Supabase to provide account login and store your data securely. No data is sold, shared with advertisers, or provided to unrelated third parties.

Deleting your data

You can delete your account and all associated data at any time via the app settings. This permanently removes your data from our database. If you never created a full account, clearing your browser or app data removes it from your device.

What this actually means

In short: using the app without signing up keeps everything on your device, your email only ever logs you in if you choose to create an account, your tasks sit in a locked box only your account can open, I only go near the system to keep it running or help when you ask, everything is protected with multi factor authentication, nothing is ever sold or shared for advertising, and you can delete it all yourself, permanently, whenever you like.

Sticky Notes App

Creating an account: To use Sticky Notes, you sign in with your email address. I send you a one-time code to log in, so there’s no password to remember or leak.

What we store: Once you’re signed in, your notes are stored securely in our Supabase database so they sync across your devices. That includes what you write, plus each note’s colour, date, position, and whether it’s pinned or done. Your app settings (font, date style and layout) are stored there too. Your search and filter choices stay on your device only.

What we don’t store: We don’t collect any personal information beyond your email address.

Who can see it: Your notes sit in a locked space that only your account can open. Other users can never see them. Your notes aren’t end-to-end encrypted, so they’re not invisible to the database itself. Access is kept very tightly controlled, and I don’t read your notes. That’s also why I ask you not to use Sticky Notes for sensitive information like passport numbers, card numbers or passwords.

How I keep it safe: Your notes are encrypted while they travel between your device and the database, and while they’re stored in the database. A copy is also kept on each device you use so the app works offline, protected by that device’s own security. Every request is checked against your account before anything is shown or changed.

Third parties: Sticky Notes uses Supabase for login and to store your notes. The app’s typefaces load from Adobe Fonts and Google Fonts, which means your browser shares its IP address with them when it fetches the fonts.

Deleting your data: You can permanently delete all your notes at any time from the bottom of the app settings. This removes them from our database and from every device you’re signed in on. Signing out also clears your notes from that device. To delete your account completely, including your email address, email amanda@unmuddled.co and I’ll remove it.

What this actually means: In short: your email only ever logs you in, and your notes sit in a locked box only your account can open. You can wipe them whenever you like. However, despite the precautions outlined above, please do not use Sticky Notes to store sensitive information, including but not limited to passport numbers, card details and passwords.

Third-Party Providers

To operate our website, digital products, and digital tools, we work with a number of trusted third-party providers. These services may process personal information on our behalf in order to deliver purchases, process payments, host content, analyse website performance, provide application functionality, or communicate with customers.

We aim to use as few third-party services as reasonably possible and only work with providers that are necessary to operate our business and serve our customers.

Provider Purpose Privacy Policy
WordPress Website software and content management https://wordpress.org/about/privacy/
WooCommerce Store, checkout, and order management https://woocommerce.com/document/marketplace-privacy/
Stripe Payment processing https://stripe.com/privacy
PayPal (where used) Payment processing https://www.paypal.com/privacy
Vimeo Video hosting and delivery https://vimeo.com/privacy
MailerLite Email marketing and newsletters

https://www.mailerlite.com/legal/privacy-policy

 
Mailersend Email marketing and newsletter deliverability 

 
Google Analytics Website analytics and performance monitoring https://policies.google.com/privacy
Supabase Optional cloud sync functionality for Time Buckets and used for Unmuddled apps https://supabase.com/privacy
123 Reg Website hosting, email hosting, backups, security, and infrastructure https://www.123-reg.co.uk/terms/privacy.shtml

We only share information with these providers where necessary for them to perform their services. Each provider is responsible for handling personal information in accordance with its own privacy policy.

Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide products, services, and digital tools
  • Keep purchase and transaction records
  • Comply with legal, tax, and accounting obligations
  • Resolve disputes
  • Enforce agreements
  • Provide customer support
  • Maintain security and prevent misuse

Purchase records, transaction history, and customer communications may be retained where required for legal, accounting, fraud prevention, or business record-keeping purposes.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Opt out of marketing emails at any time

  • Restrict or object to certain processing activities
  • Withdraw consent where consent has been given

To exercise any of these rights, please contact:

amanda@unmuddled.co

Security

We take reasonable technical and organisational measures to protect your personal information and maintain the security of our website, products, and digital tools.

However, no website, platform, or online service can guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the content, privacy practices, or security of those websites. We encourage you to review their privacy policies before providing any personal information.

My ICO registration

To do all this properly, I am registered with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator. My reference number is ZC260854, and you can find my registration online on the ICO website. 

Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page, and the updated version will take effect immediately upon publication.

Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Amanda Appiagyei

amanda@unmuddled.co