Privacy policy

Last updated: 2 November 2026

undrstand is operated by Louwr. This privacy policy describes how undrstand ("we", "our" or "us") collects, uses and protects your personal information when you use our website, our web application, our iPhone and Android apps, our API, our MCP server, and any app that connects to your account.

undrstand exists to hold private things: what happened to you, how you felt and what you did. We treat it that way. Nothing you write is used to train models, sold, or shown to anyone you did not authorise.

1. Information we collect

We collect what you give us and what the service needs to run.

  • Account information: your email address and, if you choose to give them, your name and a display language and timezone.
  • What you share: the text you hand in about your life, in its original language, and its English translation.
  • Derived analysis: the situations, feelings, triggers, behaviours, patterns, correlations, flows and descriptions we derive from what you share. This is personal data too and is treated the same way.
  • Wearable and health data: if you connect a wearable (WHOOP, Oura, or Fitbit and Pixel Watch through Google Health), what it measured per day: sleep duration and efficiency, heart rate variability, resting heart rate, recovery or readiness, strain and steps. We also keep the access tokens the provider gives us, encrypted, and your user id at that provider.
  • Apple Health: if you allow it in the iPhone app, your sleep, resting heart rate and steps per day, read from Apple Health.
  • Health Connect: if you allow it in the Android app, your sleep, heart rate variability, resting heart rate and steps per day, read from Health Connect, including up to 90 days before you turned it on.
  • Apps you connect: which apps you have authorised, which scopes you granted them, and when.
  • Technical data: server logs with IP addresses, request times and error details, kept only as long as needed to run and secure the service.
  • Device data: if you allow notifications in the iPhone or Android app, a token from Apple and Google Firebase to deliver them to your device.

2. How we use it

We use your data for these purposes only:

  • The service itself: to store what you share, analyse it and hand the result back to you and to the apps you authorise.
  • Your account: to sign you in, send magic links and security notices, and let you manage connected apps.
  • Security: to protect the service and its users against abuse.
  • Legal obligations: to comply with the law.

Under the GDPR our legal bases are performance of our agreement with you, our legitimate interest in running a secure service, your consent where we ask for it, and legal obligations.

3. Processing by AI models

The analysis is done by language models from OpenAI, accessed through OpenAI's API. The text you share, and small pieces of the derived analysis, are sent to OpenAI to be translated, split into situations, and read for feelings, triggers and behaviours. The analysis never receives your name or email address.

The other AI features run on language models from OpenAI and from Anthropic, accessed through their APIs: your Observer, the builder, and the AI inside apps you use. When you use one of them, the part of your data it needs is sent to that provider. Your Observer is given your name, so it can address you, and never your email address.

The API terms of both providers state that data sent through the API is not used to train their models. We do not use any other AI provider for your data.

4. Where your data lives

Your account and everything derived from it is stored on servers in the European Union, hosted by Hetzner in Germany. Backups stay in the EU. The only transfer outside the EU is the processing described in section 3, which happens under OpenAI's and Anthropic's data processing terms and standard contractual clauses.

5. Apps and the MCP server

You use undrstand in its own web application, through Claude or ChatGPT over the MCP server, or through an app: one made with the builder and hosted by undrstand, or one a developer hosts and connects over the API.

An app only sees what you grant it. Every app asks for specific scopes, you see them on a consent screen, and you can revoke an app at any time. What an app does with your data after you grant it access is governed by that app's own policy; we publish which scopes each app holds so you can judge it.

When you connect Claude or ChatGPT, the conversation you have there is handled by Anthropic or OpenAI under their own terms. undrstand only sees the tool calls those assistants make on your behalf.

6. Wearables and health data

Connecting a wearable is optional. You connect it on the provider's own page, so we never see your password there, and we ask only for permission to read. We do not write to, change or delete anything in your wearable account.

What a wearable measures is health data. We process it only with your explicit consent, which you give by connecting and withdraw by disconnecting. Disconnecting deletes everything that wearable measured from undrstand, deletes the tokens, and asks the provider to withdraw our access where it offers a way to.

In the iPhone app you can also let undrstand read Apple Health. It reads your sleep, resting heart rate and steps, and never writes to Apple Health. You give permission on Apple's own screen and can withdraw it there at any time; turning Apple Health off in undrstand deletes what it read. Data from Apple Health is used only as this section describes, never for advertising or marketing, and is never sold to or shared with data brokers or advertisers.

In the Android app you can also let undrstand read Health Connect. It reads your sleep, heart rate variability, resting heart rate and steps, also in the background if you allow that, and never writes to Health Connect. You give permission on Health Connect's own screen and can withdraw it there at any time; turning Health Connect off in undrstand deletes what it read. Data from Health Connect is used only as this section describes, never for advertising or marketing, and is never sold to or shared with data brokers or advertisers.

We use this data for one thing: to show it to you, and to the apps and assistants you allow to read it. An app needs a separate permission for health data, shown on its consent screen, and never receives it without. If you ask an AI feature in undrstand, or in an app you use, about your measurements, they are processed by the model as described in section 3. We do not sell this data, do not use it for advertising, and do not use it to train AI models.

undrstand's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Sharing

We do not sell, trade or rent your personal information. We share it only:

  • With processors: Hetzner for hosting, OpenAI and Anthropic for the processing in section 3, Stripe for payments if you pay us on the web, Apple and RevenueCat for subscriptions bought in the iPhone app, Google and RevenueCat for subscriptions bought in the Android app, Google Firebase for notifications, Apple for dictation in the iPhone app, the speech service of your phone for dictation in the Android app, and our transactional email provider for magic links and notices.
  • With apps you authorise: within the scopes you granted.
  • When the law requires it: or to protect our rights and the safety of our users.

8. Retention and deletion

Your data is kept while your account exists. When you delete your account, or delete something you shared, the data and everything derived from it is deleted, and copies in backups are removed as those backups are replaced in the normal course of operations, within thirty days. We keep only what the law requires us to keep, such as invoice records for seven years under Dutch tax law if you ever pay us.

9. Your rights

You can, at any time:

  • Read everything we hold about you through the API, or ask us for an export
  • Correct your account information
  • Delete something you shared, an app connection, or your whole account
  • Disconnect a wearable, which deletes what it measured
  • Object to or restrict processing, and withdraw consent where processing rests on it
  • Lodge a complaint with a supervisory authority, in the Netherlands the Autoriteit Persoonsgegevens

We answer requests within thirty days.

10. Cookies

The website uses one cookie to remember your language. The connect flow for MCP clients uses a session cookie to keep you signed in while you authorise. We use no advertising or tracking cookies.

11. Not a clinical service

undrstand is a self-awareness tool, not medical care, therapy or diagnosis. Nothing it produces is a diagnosis, and it does not replace a professional. If you are in crisis, please contact local emergency services or a crisis line.

12. Children

The service is not intended for people under 16, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

13. Changes

When this policy changes we update the date at the top and, for material changes, notify you by email or through the service.

14. Contact

Data controller: Louwr, the Netherlands. Contact person: Tristan de Wit. Write to hello@undrstand.com, and we will respond within thirty days.