Introduction

This Privacy Policy explains how Unmuddled collects, uses, stores, and protects your personal information when you visit our website, purchase products, use our digital tools, download resources, subscribe to emails, or otherwise interact with us.

This Privacy Policy applies to unmuddled.co and any products, services, downloads, applications, resources, and digital tools operated by Unmuddled, including Time Buckets and Stop the Spiral.

Who we are

Unmuddled is operated by Amanda Appiagyei.

If you have any questions about this Privacy Policy or how your information is handled, please contact:

amanda@unmuddled.co

Information we collect

Depending on how you interact with our website, products, and digital tools, we may collect:

Information you provide

• Name
• Email address
• Billing address
• Account information
• Purchase history
• Messages, enquiries, or support requests

Information collected automatically

• IP address
• Browser type
• Device information
• Pages visited
• Referring websites
• Dates and times of visits
• Login and security information, where applicable

This information helps us operate, improve, and secure our website and services.

Digital product purchases

When you purchase a product through Unmuddled, we collect information required to process your order and provide access to your purchase.

This may include your name, billing address, email address, order history, transaction details, and records of purchased products.

Payment information is processed securely by our payment providers. We do not store full payment card details on our servers.

How We Use Your Information

We may use your information to:

• Provide access to products, services, and digital tools
• Process payments and orders
• Deliver purchased products
• Respond to enquiries and support requests
• Send important service-related communications
• Send newsletters and marketing emails where consent has been given
• Improve website performance and user experience
• Maintain website and application security
• Prevent fraud or misuse
• Comply with legal and regulatory obligations

Email Communications

If you purchase a product, download a resource, subscribe to our newsletter, or otherwise opt in to receive emails, we may send:

• Purchase confirmations
• Product updates
• Customer support communications
• Marketing and newsletter emails

You may unsubscribe from marketing emails at any time using the unsubscribe link included in our emails.

Cookies

Our website uses cookies and similar technologies to:

• Remember preferences
• Maintain secure sessions
• Process purchases and checkout activity
• Improve website performance
• Analyse website usage
• Support the functionality of digital tools, where applicable

You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

Where required by law, non-essential cookies will only be used with your consent.

Login and Security Data

To help protect accounts, digital tools, and website security, we may collect and store technical information including IP addresses, login activity, browser information, device information, and security logs where applicable.

This information is used for security, fraud prevention, troubleshooting, and system administration purposes.

Time Buckets app

Time Buckets is a productivity app available as a progressive web app (PWA).

Creating an account
To use Time Buckets, you’ll need to create an account using your email address. We use this solely to let you log in and recover your account. We don’t use it for anything else, and we don’t send marketing emails to it unless you separately opt in elsewhere.

What we store
Once you’re signed in, your bucket data, including bucket names, tasks, schedules, colours, and settings, is stored securely in our Supabase database, on servers located in the European Union, linked to your account, so it stays available and synced across your devices automatically.

What we don’t store
We don’t collect any personal information beyond your email address. We have no way to identify you beyond that.

Who can see it
Access to your data is kept very tightly controlled. The safeguards I describe below mean other users can never see your tasks or get into your account. As the person who runs Unmuddled on my own, I’m the only one with admin access to the systems your data sits on. I only ever use that access to run, maintain, and secure the service, or to help with a problem you’ve raised, never to read your tasks out of curiosity or for any unrelated purpose. No one else is given access to your personal data, apart from the service providers I’ve named above (Supabase and MailerSend), who only handle it on my instructions and have their own data protection duties to follow.

How I keep it safe
I take looking after your data seriously, and I’ve put proper measures in place to do that. Every account I use to run the service, including the database, email, hosting and domain accounts, is protected by multi-factor authentication (MFA), so no one can get in with just a password. On top of that, your tasks are protected by database-level controls that keep each person’s records walled off from everyone else’s. I deliberately keep the number of people and systems that can reach your data to the absolute minimum: it’s just me, and no one else has access.

Third parties
Time Buckets uses Supabase to provide account login and store your data securely. No data is sold, shared with advertisers, or provided to unrelated third parties.

Deleting your data
You can delete your account and all associated data at any time via the app settings. This permanently removes your data from our database.

What this actually means
In short: your email only ever logs you in, your tasks sit in a locked box only your account can open, I only go near the system to keep it running or help when you ask, everything is protected with multi-factor authentication, nothing is ever sold or shared for advertising, and you can delete it all yourself, permanently, whenever you like.

Stop the Spiral

Using it without an account

You can use Stop the Spiral straight away with no sign up. In this case, an anonymous account is created behind the scenes so the app can save your progress, but it isn’t linked to your email or any personal information, and it stays only on your device.

Creating an account

If you want to keep your progress across devices, you can turn your anonymous account into a full account using your email address. We use this solely to let you log in and recover your account. We don’t use it for anything else, and we don’t send marketing emails to it unless you separately opt in elsewhere.

What we store

Once you’re signed in, your tasks, colour labels, timer preferences, and routine selections are stored securely in our Supabase database, on servers located in the European Union, linked to your account, so it stays available and synced across your devices automatically.

If you never create a full account, your data stays in your browser’s localStorage and is never transmitted to our servers.

What we don’t store

We don’t collect any personal information beyond your email address, and only once you choose to create a full account. We have no way to identify you beyond that.

Who can see it

Access to your data is kept very tightly controlled. The safeguards I describe below mean other users can never see your tasks or get into your account. As the person who runs Unmuddled on my own, I’m the only one with admin access to the systems your data sits on. I only ever use that access to run, maintain, and secure the service, or to help with a problem you’ve raised, never to read your tasks out of curiosity or for any unrelated purpose. No one else is given access to your personal data, apart from the service providers I’ve named above (Supabase and MailerSend), who only handle it on my instructions and have their own data protection duties to follow.

How I keep it safe

I take looking after your data seriously, and I’ve put proper measures in place to do that. Every account I use to run the service, including the database, email, hosting and domain accounts, is protected by multi factor authentication (MFA), so no one can get in with just a password. On top of that, your tasks are protected by database level controls that keep each person’s records walled off from everyone else’s. I deliberately keep the number of people and systems that can reach your data to the absolute minimum: it’s just me, and no one else has access.

Third parties

Stop the Spiral uses Supabase to provide account login and store your data securely. No data is sold, shared with advertisers, or provided to unrelated third parties.

Deleting your data

You can delete your account and all associated data at any time via the app settings. This permanently removes your data from our database. If you never created a full account, clearing your browser or app data removes it from your device.

What this actually means

In short: using the app without signing up keeps everything on your device, your email only ever logs you in if you choose to create an account, your tasks sit in a locked box only your account can open, I only go near the system to keep it running or help when you ask, everything is protected with multi factor authentication, nothing is ever sold or shared for advertising, and you can delete it all yourself, permanently, whenever you like.

Third-Party Providers

To operate our website, digital products, and digital tools, we work with a number of trusted third-party providers. These services may process personal information on our behalf in order to deliver purchases, process payments, host content, analyse website performance, provide application functionality, or communicate with customers.

We aim to use as few third-party services as reasonably possible and only work with providers that are necessary to operate our business and serve our customers.

Provider	Purpose	Privacy Policy
WordPress	Website software and content management	https://wordpress.org/about/privacy/
WooCommerce	Store, checkout, and order management	https://woocommerce.com/document/marketplace-privacy/
Stripe	Payment processing	https://stripe.com/privacy
PayPal (where used)	Payment processing	https://www.paypal.com/privacy
Vimeo	Video hosting and delivery	https://vimeo.com/privacy
MailerLite	Email marketing and newsletters	https://www.mailerlite.com/legal/privacy-policy
Google Analytics	Website analytics and performance monitoring	https://policies.google.com/privacy
Supabase	Optional cloud sync functionality for Time Buckets	https://supabase.com/privacy
123 Reg	Website hosting, email hosting, backups, security, and infrastructure	https://www.123-reg.co.uk/terms/privacy.shtml

We only share information with these providers where necessary for them to perform their services. Each provider is responsible for handling personal information in accordance with its own privacy policy.

Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide products, services, and digital tools
• Keep purchase and transaction records
• Comply with legal, tax, and accounting obligations
• Resolve disputes
• Enforce agreements
• Provide customer support
• Maintain security and prevent misuse

Purchase records, transaction history, and customer communications may be retained where required for legal, accounting, fraud prevention, or business record-keeping purposes.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Restrict or object to certain processing activities
• Withdraw consent where consent has been given

To exercise any of these rights, please contact:

amanda@unmuddled.co

Security

We take reasonable technical and organisational measures to protect your personal information and maintain the security of our website, products, and digital tools.

However, no website, platform, or online service can guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the content, privacy practices, or security of those websites. We encourage you to review their privacy policies before providing any personal information.

My ICO registration

To do all this properly, I will be registered with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, as soon as my application has been approved I will update this policy with my number. You will then be able to find me on the ICO’s public register at ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page, and the updated version will take effect immediately upon publication.

Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact:

Amanda Appiagyei

amanda@unmuddled.co