UNEY’S PRIVACY POLICY

Effective as of December 11th, 2025


Uney’s Privacy Policy describes how Uney collects, uses, and deletes your data. In addition to this Privacy Policy, we provide data and privacy information specific to our products that use your personal data. This product-specific information can be found in the following privacy policies:



By using the uney.com website, making use of an Uney Account (the “Account”), where applicable, and all its related features, including ShieldNet 360, SkyTrack, KChat (the “Services”), you understand that your data in relation with your use of our Services is processed according to the following Privacy Policy and its product-specific privacy policies (together, the "Privacy Policy"). The Privacy Policy states (i) what data we collect through your access and uses of the Services; (ii) the use we make of such data; and (iii) the safeguards put in place to protect your data. The Privacy Policy is to be read and understood as being a complement to our Services Terms & Conditions (collectively, “T&Cs”).


    1. Legal framework


The Services are operated by Uney GmbH (the “Company”, “we”, “our”, and/or “us”), domiciled at Grafenaustrasse 13, 6300 Zug, Switzerland. It is therefore governed by the laws and regulations of Switzerland.


We are also GDPR compliant. The designated representative of the Company in the European Union (notably for the purpose of art. 27 GDPR) is Roger Daniel Wehril.


    1. Data we collect from you, and how we use it


Our overriding policy is to collect as little user information (personal data included) as possible to ensure a private user experience when using the Services. We do not have the technical means to access the content of your encrypted emails, files, calendar events, passwords, or notes.


In general, our data collection is fundamentally limited to the following. For more details on the specific scope of data to be collected for each Service, please refer to the Services’ Privacy Policy set out in the preamble of this Policy above.


  1. Account creation: Depending on the Services you want to use, you can either create the Account with an email address. 


Creating the Account will give you access to our Services, where applicable following the specific Terms and Conditions of such Services. Depending on the Services, you may need to provide personal information in order to create an Account (e.g., mobile phone number, email address, etc.). 


With respect to your provided email address, it may be used for notification or password recovery purposes. Should you choose to provide it, we associate this email address with your Account (for password recovery or notification purposes). Such data will only be used to contact you with important notifications about the Services, to send you information related to security, to verify your account or to send you password recovery links if you enable the option. We may also inform you about our products in which you might have an interest. The legal basis for processing is consent and you are free to modify this in your Account settings panel at any time. 


In order to pursue our legitimate interest of preventing the creation of accounts by spam bots or human spammers, we use a variety of human verification methods. Verification may also be requested for some sensitive operations besides account creation in order to protect against brute-force attacks. You may be asked to verify using either, for instance, captcha, email, or SMS. IP addresses, email addresses, and phone numbers provided are saved temporarily in order to send you a verification code and for anti-spam purposes. The period of temporary data retention is determined by our legitimate interests of protecting the relevant Services from spam, and also by any applicable Swiss legal requirements we must comply with. If this data is saved permanently, it is always saved as a cryptographic hash, which ensures that the raw values cannot be deciphered by us.

 

  1. Account activity: The processing activities carried out by us for the operation of our different Services may vary depending on the Services. These activities are described in the specific Services' Privacy Policies. We may use the data mentioned above and below to detect abusive and fraudulent use of our Services, and take appropriate measures. The legal basis of this processing is our legitimate interest to protect our service against non-compliant or fraudulent activities.


  1. IP logging: By default, we do not keep permanent IP logs in relation to your Account. However, IP logs may be kept temporarily to combat abuse and fraud, and your IP address may be retained permanently if you are engaged in activities that breach our T&Cs applicable to the Services (e.g. spamming, DDoS attacks against our infrastructure, brute force attacks). The legal basis of this processing is our legitimate interest to protect our service against non-compliant or fraudulent activities. If you enable authentication logging for your Account, the record of your login IP addresses is kept for as long as the feature is enabled. This feature is off by default, and all the records are deleted upon deactivation of the feature. The legal basis of this processing is consent, and you are free to opt in or opt out of that processing at any time in the security panel of your Account. The authentication logs feature records login attempts to your Account and does not track product-specific activity, such as VPN activity.


  1. Communicating with us: Your communications with us when using our Services, such as support requests, bug reports, or feature requests may be saved by our staff. The legal basis for processing is our legitimate interest to troubleshoot more efficiently and improve the quality of our Services. The information you provide when you contact our support team is processed for analytics purposes (such as to obtain aggregate statistics), but we do not do any targeted advertising or any profiling.


  1. Communicating with our Sales team: if you are a corporate customer or a business prospect and are contacting our Sales team via the dedicated forms to inform us of your interest in our Services, the data you provide is used solely for the purpose of processing your request and contacting you for that specific purpose. The legal basis for this processing activity is your consent, which can be withdrawn at any times.


  1. Communications from us: We mainly use your email address for account-related questions, communication, and recovery. By signing up to our Services, where applicable, you agree to receive communications from us, which may include promotional emails. You can stop receiving emails from us by following the unsubscribe instructions included in every email we send or adjust the settings under the relevant Account.


  1. Payment information: We rely on external third-party banking and/or intermediary payment services to process payments, where applicable, for the Services and must therefore share payment information with them. Strictly necessary information is shared with such third-party payment service providers for the relevant transactions in order for the payment to be successful and associated with your account. These third-party payment service providers do not have access to your email or your Account information. We do not retain full credit card details, we only save your name and, where applicable, the last 4 digits of the debit/credit card number. We may use your account data for payment-related matters, including but not limited to sending you emails, invoices, receipts, notices of delinquency, and alerts to update payment information. The legal basis of these processing activities is the necessity to the execution of the contract to provide the Services. In order to respect the principle of data minimisation, we reserve our right to remove payment information from our systems that is no longer valid, without notice.


  1. Our mobile applications: When you use our mobile applications, where applicable, of the relevant Services, we may collect certain information. We may use mobile analytics software, app statistics and crash reporting, Play Store app statistics, or App Store app statistics to send crash information to our developers in order to rapidly fix bugs. Some platforms, such as Google's Play Store or Apple's App Store may also collect aggregate, anonymous statistics, which may be governed by their respective privacy policies and Terms of Service. Such statistics can include most commonly used devices and operating systems, total number of installs and uninstalls, and the total number of active users.


Our applications do not access or track any location-based information from your device.


  1. Social Media: We are active on Facebook and Linkedin. Any information, communication, or material you submit to us via social media platforms is done at your own risk without any guarantee of privacy. We cannot control the actions of other users of these platforms or the actions of the platforms themselves. Your interactions with those features and platforms are governed by the privacy policies of the companies that provide them.


  1. Links to other websites and embedded content: Our website may contain links to other websites of interest. However, we are not responsible for the content of any website that we link to, and external sites are governed by their own Terms of Service and privacy policies. We may use third parties to provide embedded content (e.g. pictures) on our website which may collect information about you. The legal basis for this processing is our legitimate interest to operate our website economically.


    1. Data processors


To provide the Services, we rely on different data processor(s), which process different categories of data. Processors never store data outside of the scope of their specific purpose. Processors are as follow:


SMART ARTIFICIAL INTELLIGENCE L.L.C


  • Purpose: Process data in relation with customer support requests, or other direct communications with the company (section 2.6)
  • Data processing location: UAE
  • Guarantees for international transfer: Standard Contractual Clauses.


    1. Data disclosure


We will only disclose the limited user data we possess if we are legally obligated to do so by a binding request coming from the competent Swiss authorities. We may comply with electronically delivered notices only when they are delivered in full compliance with the requirements of Swiss law. Our general policy is to challenge requests whenever possible and where there are doubts as to the validity of the request or if there is a public interest in doing so. In such situations, we will not comply with the request until all legal or other remedies have been exhausted. Under Swiss law, subjects of judicial procedures have to be notified of such procedures, although such notification has to come from the authorities and not from the Company. Under no circumstances can we decrypt end-to-end encrypted content and disclose decrypted copies. Aggregate statistics about data requests from the competent Swiss authorities can be found in the transparency reports listed in our products-specific policies.


    1. Your privacy rights


Through your Account interface, you can directly access, edit, delete, or export personal data processed by the us in your use of the Services.


If you and/or your Account have been suspended for a breach of our T&Cs, and you would like to exercise the rights related to your personal data, you can make a request to our support team.


In case of violation of your rights, you have the right to lodge a complaint to the competent supervisory authority.


    1. Modifications to Privacy Policy


Within the limits of applicable law, we reserve the right to review and change the Privacy Policy at any time. As long as you are using the Services, you are responsible for regularly reviewing the Privacy Policy. Continued use of the Services after such changes are performed shall constitute your consent to it.


In case of discrepancy between the English version of these Terms and any translated version, the English version shall prevail.