This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Align. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
The data controller responsible for your personal data is the operator of the Align app. For all privacy inquiries, contact: support@alignapp.world
For EU users, a Data Protection Officer (DPO) can be reached at the same address.
We do NOT store credit card numbers, bank details, or payment credentials. All payment data is handled by Apple App Store, Google Play, or Stripe under their own privacy policies.
Questionnaire answers you provide during session creation are used only to generate your meditation and are never stored on our servers. They are passed directly to the AI and discarded.
Journal entries are stored only on your device (AsyncStorage). They are never transmitted to or stored on our servers. Only a mood signal (e.g., "calm", "hopeful") is optionally saved server-side for aggregate analytics — no free text is ever stored.
| Purpose | Legal Basis |
|---|---|
| Account creation and authentication | Contract performance (Art. 6(1)(b)) |
| Meditation generation | Contract performance (Art. 6(1)(b)) |
| Payment processing | Contract performance (Art. 6(1)(b)) |
| Customer support | Legitimate interest (Art. 6(1)(f)) |
| Service improvement | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails | Consent (Art. 6(1)(a)) — opt-in only |
| Analytics | Consent (Art. 6(1)(a)) — opt-in only |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Used to generate personalized meditation scripts. Your focus areas and meditation preferences are sent to Anthropic's API. Anthropic does not retain API data for model training. Data is transmitted via HTTPS/TLS. Anthropic Privacy Policy →
Used to convert meditation scripts to audio. Only the text script (no personal identifiers) is sent for synthesis. ElevenLabs Privacy Policy →
Used to manage in-app subscriptions and track purchase status. Subscription status and user ID are shared. RevenueCat Privacy Policy →
Used for app distribution and payment processing. Subject to Apple and Google's respective privacy policies.
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Account data | Until deletion request | Permanent deletion within 30 days |
| Meditation history | Until deletion request | Permanent deletion within 30 days |
| Meditation preferences | Until deletion request | Permanent deletion within 30 days |
| Journal entries | Device-only, never server-stored | Cleared on app uninstall |
| Questionnaire answers | Never stored (pass-through only) | Not applicable |
| Payment records | 7 years (legal requirement) | Anonymized after 7 years |
| Server logs | 30 days rolling | Automatic deletion |
| AI inputs / outputs | 30 days | Automatic deletion |
| Consent records | 7 years (legal compliance) | Retained per legal obligation |
You can delete your account through three methods:
Upon deletion: account is immediately deactivated, data is removed from active systems within 7 days, and completely removed from all backups within 30 days. A confirmation email is sent when deletion is complete.
In the event of a data breach, we will notify affected users and relevant supervisory authorities within 72 hours as required by GDPR, and will provide details of the breach and mitigation measures.
All rights below are accessible directly through the Privacy Center in the App (Settings → Privacy Center).
Export a complete copy of all your personal data as a JSON file from the Privacy Center. Delivered instantly, free of charge.
Update your profile, email, display name, and preferences at any time in App settings. Changes take effect immediately.
Delete your meditation history only, or delete your entire account. Both options available in the Privacy Center. Full erasure within 30 days.
Manage consent preferences and pause non-essential processing through the Privacy Center at any time.
Download all your personal data in structured, machine-readable JSON format from the Privacy Center.
Opt out of marketing emails instantly via any email footer or through the Privacy Center. Opt out of analytics at any time.
Withdraw consent for analytics and marketing communications at any time. Withdrawal does not affect the lawfulness of prior processing.
You may complain to the Dutch supervisory authority: Autoriteit Persoonsgegevens, or your local EU Data Protection Authority.
Opt-in required. Can be revoked at any time in the Privacy Center. Revoking stops non-essential tracking while the app continues to function normally.
Unchecked by default. One-click unsubscribe in every email. Can be revoked in the Privacy Center.
Separate from marketing emails. Focused on your wellness journey. Unchecked by default, can be revoked independently.
The following are essential to provide the service and do not require separate consent: meditation generation, account management, payment processing, customer support, and security monitoring. Legal basis: contract performance (Art. 6(1)(b) GDPR).
Align is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected data from a child under 13 without parental consent, we will immediately delete the account and all associated data within 48 hours.
Users aged 13–16 may use Align with parental or guardian consent. By creating an account, users in this age range confirm they have obtained such consent.
If you are a parent or guardian and believe your child has provided us with personal data, contact us at support@alignapp.world with subject "Underage Account Report". We will respond within 48 hours.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. All international transfers comply with GDPR Chapter V requirements through Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with all third-party processors.
Align uses artificial intelligence to generate personalized meditation content. Here is what AI does and does not do:
Humans design and maintain all AI systems, review outputs for quality, and provide all customer support.
We may update this Privacy Policy from time to time. For material changes, we will notify you via email and in-app notification at least 30 days before the change takes effect. The "Last Updated" date at the top reflects the most recent revision. Continued use of Align after changes constitutes acceptance of the updated Policy.
Email: support@alignapp.world
General inquiries: Response within 48 hours
Data access or deletion requests: Acknowledged within 7 days, completed within 30 days
Availability: Monday–Friday, 9:00–17:00 CET