Privacy Policy

Last updated: April 28, 2026

1. Introduction

Align (“we”, “our”, or “us”) provides a values-based journaling application available on the web and mobile. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Align you agree to this policy.

2. Information We Collect

Account information

When you create an account we collect your name and email address. If you subscribe to a paid plan, payment is processed by Stripe — we never store your full card number.

Journal entries, values, and goals

The content you write — journal entries, personal values, and goals — is stored in our database. Journal entries are encrypted at rest so that only you can read the full text.

Usage data

We collect anonymised product analytics (page views, feature usage) via PostHog to understand how people use Align and where we can improve. This data does not include the content of your entries.

Device and log data

Standard server logs may include your IP address, browser type, and timestamps. This information is used for security monitoring and is not sold or shared with advertisers.

3. How We Use Your Information

  • To provide and improve the Align service, including generating your weekly AI review.
  • To send transactional emails (account confirmations, password resets, billing receipts).
  • To send product updates and early-access announcements — you can unsubscribe at any time.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations.

4. AI Processing

Align uses Claude (by Anthropic) to generate weekly alignment reviews. Your journal entries, values, and goals are sent to the Anthropic API solely to produce your personalised review. Anthropic processes this data under their own privacy policy and does not use your content to train future models under our enterprise agreement. Entries are not shared with any other AI provider.

5. Data Sharing

We do not sell your personal data. We share data only with the trusted third-party services necessary to operate Align:

  • Supabase — database and authentication hosting.
  • Anthropic — AI analysis of journal content for weekly reviews.
  • Stripe — payment processing for paid subscriptions.
  • Resend — transactional and marketing email delivery.
  • Vercel — web application hosting and edge functions.
  • PostHog — anonymised product analytics.

We may also disclose information if required by law, court order, or to protect the safety of our users or the public.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required by law to retain it longer.

7. Your Rights

Depending on where you live you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at align.journal.2026@gmail.com. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your data, including encryption of journal entries at rest, HTTPS for all data in transit, and access controls limiting who can view production data. No system is perfectly secure — please use a strong, unique password and enable any available two-factor authentication.

9. Children

Align is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes we will notify you by email or via an in-app notice. Continued use of Align after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us at align.journal.2026@gmail.com.