Overleashed
Privacy Policy
Last updated 26 September 2026 · Ungovernable Corp
This policy covers Overleashed, the mobile application published by Ungovernable Corp (“we”, “us”) on the Apple App Store and Google Play. Our website is covered separately, by the Ungovernable Corp privacy policy.
Overleashed has no accounts. There is nothing to sign up for, we never ask for your name or email address, and we hold no record that identifies you. What you make in the app stays on your device.
What does leave your device: a report when the app crashes, and — if analytics is on — a record of which features you opened. None of it is tied to your identity, because we do not have one. It travels over the internet, so the services that receive it also see the IP address it arrives on, and an approximate location — your city or region — worked out from that address. Section 3 lists everything.
1. Who we are
Ungovernable Corp is the operator of Overleashed and this website, and is the party responsible for the data described here. For anything in this policy — questions, requests, complaints — write to hello@ungovernablecorp.com. We aim to reply within 30 days.
2. Scope
Everything below describes Overleashed only. Our website, ungovernablecorp.com, collects nothing at all and is covered by the Ungovernable Corp privacy policy. Apps we publish other than Overleashed each carry their own policy; this one does not speak for them.
3. What Overleashed collects
This table is the complete list, and it is kept consistent with our Google Play Data safety disclosures and our Apple App Privacy labels. We hold nothing that connects any of it to your identity, because we never learn your identity.
On Google Play it is declared as Crash logs, Diagnostics, App interactions, Device or other IDs, and Approximate location — all collected, none shared, since the providers in section 6 handle it on our behalf. On Apple it is Crash Data, Other Diagnostic Data, Product Interaction, Device ID, and Coarse Location, every one marked Data Not Linked to You.
| Data | Collected | Why | Who receives it |
|---|---|---|---|
| Crash reports and diagnostics | Yes | To find and fix the defect that crashed the app. Contains the stack trace, your device model, OS version, app version, and a random install identifier | Sentry |
| Product analytics | Depends where you are. In the EU/EEA, the UK, Switzerland, Canada, Brazil, South Korea and China: only if you say Yes when asked. Everywhere else: yes, unless you turn it off. See section 8 | To see which features are used and where people get stuck. Records which screens and features were opened, against a random install identifier — never what you typed or created | Mixpanel |
| A random install identifier | Yes | To group several events from one installation, so a crash can be read in sequence. Generated on the device, tied to nothing else, and replaced with a new one if you reinstall | Sentry, Mixpanel |
| Your name, email address, or any account | No — Overleashed has no accounts | — | — |
| Content you create in Overleashed | No — it stays on your device | — | — |
| Approximate location — city or region | Yes | Not something Overleashed asks for or reads from your device. The services in section 6 work it out from the IP address your data arrives on; Mixpanel records the city, region, and country against your events | Sentry, Mixpanel |
| Precise location | No — Overleashed never reads GPS or device location services, and asks for no location permission | — | — |
| IP address | Yes | Unavoidable — it is how the network routes data to its destination. Sentry may store it alongside a crash report, and Mixpanel uses it to derive the approximate location above | Sentry, Mixpanel |
| Contacts, calendar, photos, microphone, camera | No | — | — |
| Health, fitness, or biometric data | No | — | — |
| Advertising identifiers (IDFA, AAID) | No | — | — |
| Payment details | No — handled entirely by Apple or Google | — | — |
Those last rows deserve plain language. Overleashed never reads your device’s location: there is no GPS involved and no location permission is requested. But anything sent over the internet arrives carrying an IP address, and we run Sentry and Mixpanel on default settings. Sentry may store that address alongside a crash report. Mixpanel uses it to derive the city, region, and country an event came from, and records those against your events. We have not switched this off, and we have not verified what becomes of the address afterwards — so we declare it as collected rather than claim otherwise.
4. What we never do
We do not sell or rent personal data. We do not use it for advertising, we build no advertising profiles, and we do not track you across other companies’ apps or websites — which is why Overleashed never asks for tracking permission. We do not use anything collected here to train machine learning models. We have never done any of this, and if it ever changes we will say so here and ask for your consent first.
The approximate location in section 3 is a by-product of how internet traffic reaches its destination, not something we use to target anything at you. We do not build audiences from it and we do not sell it.
5. How we use what we do collect
- To diagnose crashes and fix the defects behind them.
- To understand which parts of Overleashed are used, so we know what to improve. This is the analytics described in section 8, which you can refuse or turn off.
- To answer you when you write to us.
- To comply with a law, a court order, or a lawful request from a public authority, where we are obliged to.
Legal basis for analytics
In the regions listed in section 8 where the app asks first, we rely on your consent: nothing is sent to Mixpanel until you say Yes, and you can withdraw it at any time. Everywhere else we rely on our legitimate interest in understanding which parts of the app are used so we can improve it — an interest we judge does not override yours, because the data identifies no one — and on your right to opt out, which you can use at any time.
6. Who else sees it
Only the providers below, only to the extent they need it to do their job for us, and only under contracts that forbid them from using it for their own purposes.
| Provider | Role | Receives |
|---|---|---|
| Sentry — privacy policy | Crash and error reporting | Stack traces, device model, OS and app version, random install identifier, your IP address, and the approximate location derived from it |
| Mixpanel — privacy policy | Product analytics | Which screens and features were opened, random install identifier, and your IP address — from which Mixpanel derives city, region, and country |
| Apple · Google | App distribution and any in-app purchases | Purchase records, under their own privacy policies. We never see your payment details |
| Google Workspace | Email, if you write to us | Whatever you put in that email |
We may also disclose data if we are legally compelled to, or where it is necessary to protect the rights or safety of a person. If the business is ever sold or merged, this data may transfer with it; we would say so here before it became subject to a different policy.
7. How long it is kept
There is no account record to keep, so retention applies only to the three things below.
- Crash reports — 90 days in Sentry, then deleted automatically.
- Analytics events — 12 months in Mixpanel, then deleted automatically.
- Support email — 24 months, so we can follow a thread of correspondence.
8. Your choices
Turning collection off
Whether analytics starts on or off depends on where you are.
- In the EU/EEA, the UK, Switzerland, Canada, Brazil, South Korea and China, Overleashed asks on first launch whether you are happy to share analytics. Nothing is sent to Mixpanel before you answer Yes, and nothing at all if you answer No.
- Everywhere else, analytics is on by default, and you can turn it off.
Wherever you are, you can change your answer at any time in Settings → Privacy inside Overleashed. Turn it off and nothing further is sent; the app works exactly the same.
How the app decides where you are
To choose between asking first and starting on, Overleashed looks at your device’s language setting and time zone, on the device. If those do not settle it, the app asks rather than guessing. It does not use GPS, location services, or your IP address to decide, and it does not store or send the guess — the only thing kept is your actual answer, if you give one.
Crash reporting stays on, because an app that cannot report its own crashes cannot be fixed. A report carries the stack trace, your device model, OS and app version, the install identifier, and — because it travels over the network — your IP address and the approximate location derived from it. Nothing describing who you are.
Having data deleted
There is no account to delete — Overleashed never created one. The crash and analytics records are held against the random install identifier, which Settings → Privacy displays. Send it to hello@ungovernablecorp.com and we will delete everything associated with it within 30 days. The data deletion page sets out the steps, what is removed, and what is kept.
Deleting the app also works, in a rougher way: reinstalling generates a new identifier, so nothing already collected can be connected to your new installation.
9. Security
Everything leaving the app travels over TLS. Access to the provider consoles listed in section 6 is limited to the people who need it and is protected by multi-factor authentication. No system is perfect; if a breach ever affects data described here, we will notify you and the relevant authorities as the law requires.
10. Children
Overleashed is not directed to children, and we do not knowingly collect personal data from anyone under 13 — or under the higher age of digital consent where you live. Since the app collects nothing that identifies anyone, we have no way to know a user’s age. If you believe a child’s data has reached us, write to hello@ungovernablecorp.com and we will delete it.
11. International transfers
Our providers operate data centres in several countries, so this data may be processed outside the country you live in. Where it moves out of a jurisdiction that restricts such transfers, we rely on the safeguards those providers put in place, such as standard contractual clauses.
12. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, receive it in a portable format, or withdraw a consent you previously gave. We apply these to everyone, wherever they are.
In practice most of them have little to act on here, because without an account we cannot look you up. The handle a request should quote is the install identifier described in section 8; the data deletion page walks through it. We cannot trace your records from an IP address and would not attempt to. Send the identifier to hello@ungovernablecorp.com and we will act on any of the above. We will not charge you, and we will not treat you differently for asking. If you think we have handled your data badly, you may also complain to your local data protection authority.
13. Changes to this policy
If we change this policy, we will update the date at the top. For a change that materially affects what is collected or how it is used, we will give notice in the app before it takes effect, and ask for your consent where consent is what the change requires.
14. Contact
Ungovernable Corp — hello@ungovernablecorp.com