Privacy Policy
At Uuna, we believe that technology should support people without unnecessarily collecting information about them. Protecting your privacy is part of how we approach building our product.
This Privacy Policy explains what personal information we collect through uuna.app, why we collect it, how we protect it, and what choices and rights you have.
Uuna is currently in development. This policy covers our public website and early-access waitlist. Before launching features that process additional personal information, we will update this policy to explain those practices.
1. Who we are
Uuna is a capacity-aware planning application being developed in Helsinki, Finland.
For the purposes of the EU General Data Protection Regulation (GDPR), the data controller responsible for personal information collected through this website is:
Data controller: Anna Pulkka
Location: Helsinki, Finland
Contact email: anna.pulkka@helsinki.fi
Website: https://uuna.app
For questions about privacy or requests concerning your personal information, you can contact us using the email address above.
2. Information we collect
We aim to collect only the information necessary to operate our website, manage our early-access waitlist, and communicate with people who have asked to hear from us.
Information you provide
When you join the Uuna waitlist, we collect:
- Email address: to contact you when early access becomes available.
- Registration information: the date of your registration, whether you have confirmed your email address, and information needed to record and manage your communication preferences.
If you contact us directly, we may also collect the information you include in your message, such as your name, email address, and the content of your enquiry.
You are not required to provide an ADHD diagnosis, health information, menstrual-cycle information, or other sensitive personal data to join the waitlist.
Information collected automatically
When you visit our website, our hosting infrastructure may process technical information necessary to deliver and secure the website, including:
- IP address
- Browser and device information
- Date and time of requests
- Pages or resources requested
- Technical information relating to website performance, security, and errors
This information is processed primarily to operate the website, maintain its security, and diagnose technical problems.
3. How and why we use your information
We process personal data only where we have an appropriate legal basis under the GDPR.
Early-access waitlist
We use your email address to register your interest in Uuna and contact you about the early access you requested. After you sign up, we send one email asking you to confirm your address; you are only added to the waitlist once you confirm.
Legal basis: Consent (Article 6(1)(a) GDPR).
Responding to enquiries
When you contact us, we process the information you provide so that we can respond and manage our correspondence.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR), specifically communicating with people who contact us and managing enquiries.
Website operation and security
We process necessary technical information to maintain the availability, reliability, and security of our website, prevent misuse, and resolve technical problems.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR), specifically operating and protecting our website and its infrastructure.
Legal compliance
Where necessary, we may process information to comply with applicable legal obligations or respond to lawful requests.
Legal basis: Legal obligation (Article 6(1)(c) GDPR).
4. Waitlist emails and communications
When you join the Uuna waitlist, you are requesting information about early access to the product.
We will use your email address to contact you about your place on the waitlist, early-access invitations, and information directly relevant to the access you requested.
Joining the waitlist does not automatically subscribe you to an unrelated newsletter or general promotional mailing list. If we introduce a broader newsletter or marketing communications, we will provide an appropriate opportunity to opt in separately.
You can ask to leave the waitlist or withdraw your consent at any time by contacting us at anna.pulkka@helsinki.fi. Where applicable, our emails will also provide an unsubscribe option.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.
- Waitlist information: we retain your email address until you withdraw your consent, the waitlist is closed, or 18 months have passed since your registration, whichever occurs first.
- Enquiries and correspondence: we retain correspondence for as long as needed to respond and resolve the relevant matter, normally no longer than 12 months, unless a longer period is required for a legitimate or legal reason.
- Technical information: website technical and security records are retained only for the period necessary for operating, securing, and maintaining the service, subject to our hosting provider's retention settings.
When personal information is no longer needed, we delete it or anonymise it, unless applicable law requires continued retention.
6. Service providers and data sharing
We use selected third-party services to operate our website and manage communications:
- Netlify, Inc.: website hosting, content delivery and related technical infrastructure.
- Kit (ConvertKit LLC): receiving and storing waitlist registrations, sending the confirmation email, and sending early-access emails, including unsubscribe handling.
- Our email service provider: sending and receiving our direct correspondence with you.
We share personal information with these providers only as necessary for the relevant services. Where providers process personal information on our behalf, we take appropriate steps to ensure they are subject to suitable data protection and confidentiality obligations.
We do not sell personal information or share waitlist email addresses with third parties for their independent advertising purposes.
We may disclose information where legally required or necessary to establish, exercise, or defend legal claims.
7. International data transfers
Uuna is based in Finland, within the European Economic Area (EEA).
Some of our technology service providers, including Netlify and Kit, may process or store personal information outside the EEA, including in the United States.
Where personal data is transferred to a country outside the EEA, we ensure that an appropriate transfer mechanism applies, where required by law. Depending on the provider and transfer, this may include an applicable European Commission adequacy decision (such as the EU–US Data Privacy Framework, for certified providers) or appropriate contractual safeguards, such as the European Commission's Standard Contractual Clauses.
You may contact us for more information about the safeguards applicable to transfers of your personal information.
8. Cookies and similar technologies
Our website does not use cookies, analytics, advertising pixels, or other tracking technologies, and it does not store information in your browser.
We host our fonts and images ourselves, so visiting uuna.app does not load content from third-party services such as font, video, or social-media providers. Our waitlist form sends your email address directly to Kit only when you submit it; no Kit scripts or tracking are loaded on our pages.
Because we do not use non-essential cookies or similar technologies, we do not show a cookie consent banner. Our hosting provider processes the technical information described in Section 2 to deliver and secure the website.
If we introduce analytics, advertising, embedded third-party content, or other non-essential technologies in the future, we will update this section first and ask for your consent beforehand where required.
You can also manage browser storage and cookie settings through your browser.
9. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, and misuse. These measures include, as appropriate:
- Encrypted connections using HTTPS
- Restricted access to personal information
- Reputable hosting and service providers
- Access controls and account security measures
- Limiting personal data collection and retention
No internet-based service can guarantee absolute security. We review our approach as Uuna develops and the nature of the information we process changes.
10. Your data protection rights
Under the GDPR, you have rights concerning your personal information. Depending on the circumstances and applicable law, these include:
- Access: request confirmation of whether we process your personal data and obtain a copy.
- Rectification: request correction of inaccurate or incomplete information.
- Erasure: request deletion of your personal information.
- Restriction: request that we limit certain processing activities.
- Data portability: receive eligible information in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interests, and object at any time to direct marketing.
- Withdrawal of consent: withdraw consent at any time where processing is based on consent.
These rights may be subject to legal conditions and exceptions.
To exercise your rights, contact us at anna.pulkka@helsinki.fi. We will respond within the time limits required by applicable data protection law.
You also have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is the Office of the Data Protection Ombudsman (tietosuoja.fi). You may also contact the competent data protection authority in another EU or EEA country, where applicable.
11. Automated decision-making
The Uuna website and early-access waitlist do not use automated decision-making that produces legal effects or similarly significant effects concerning visitors.
Our future application may include personalised planning features. We will explain any relevant additional processing, including the use of automated recommendations, before introducing those features to users.
12. Future product features and sensitive information
Uuna is developing optional features relating to daily capacity, planning, wellbeing, and menstrual-cycle patterns. Some information processed by these future features may qualify as sensitive personal data under the GDPR.
The current website waitlist does not request this information.
Before making features that collect or process such information available, we will provide updated privacy information addressing the categories of data involved, the purposes and legal grounds for processing, relevant safeguards, retention, and users' choices.
We intend to design these features around data minimisation, transparency, and user control.
13. Changes to this policy
We may update this Privacy Policy as Uuna develops, our services change, or legal requirements evolve. When we make changes, we will publish the revised policy on this page and update the date at the top.
If a change materially affects how we use personal information, we will provide additional notice where required by law.
14. Contact
If you have questions about this Privacy Policy, how we handle personal information, or your rights, please contact: