Unwind has no backend, no account, and no telemetry. Your conversations, settings, and API keys stay on your device. There is no server for us to send data to, and we do not collect, sell, or share anything.
What the extension stores (on your device only)
Conversations & messages — in your browser's local database (IndexedDB).
Profile, mood check-ins, remembered themes — in local storage.
API keys — in the browser's local extension storage, encrypted at rest, shown masked, never logged, and excluded from exports.
What leaves your device
With your own API key: only the messages needed to answer you are sent directly from your browser to the provider you chose (OpenAI, Anthropic, or Google), using your key. Those providers process your messages under their own privacy policies.
With Chrome's built-in AI (Gemini Nano): nothing leaves your device.
Voice input: the speech model downloads once from HuggingFace, then runs locally — your audio never leaves the device.
Crisis screening runs entirely on your device and never transmits your message.
Permissions the extension uses
Side panel & storage — to show the app and save your data locally.
Provider network access — requested only for a provider when you add its key, and revoked when you remove it.
Your controls
View, edit, or delete any conversation, message, or remembered item.
Turn memory or voice input off.
Export all data (keys excluded), or delete everything — including keys — in one tap.
Your responsibilities
You supply and control your own API keys and are responsible for usage and costs on the provider you choose. Because data is stored locally, keeping your device and browser profile secure is up to you — local encryption is defense-in-depth, not a hardware secure enclave.