Privacy Policy

Effective date: October 14, 2026

Alune ("the App") is a personal productivity and wellness companion built by Ahmed Diab. Your privacy is fundamentally important to us.

On-Device Data

Your planner content is stored on your device. If you sign in, it is also stored on Alune's servers so it can sync between your devices (see "Sync" below). Content you choose to use with the AI Assistant may be transmitted as described in this policy. This content includes:

• Habits and habit logs
• Goals and milestones
• Journal entries (text, mood, energy, tags)
• Notes
• Medicine and supplement schedules and dose logs
• Reading log items and categories
• Saved memories the Assistant can reference
• App settings and preferences

Calendar events and reminders are managed by iOS itself through Apple's EventKit framework. Alune reads from and writes to the calendars and reminder lists you grant access to. The data lives in your iOS Calendar and Reminders. If you sign in, the calendars and reminder lists you choose to show in Alune are also synced as described in "Sync" below.

Optional Accounts and Google Sign-In

An account is optional. It is available in the Alune web app and in Alune for iPhone and iPad version 1.1.8 and later. You can sign in with Apple, Google, or email and password. Signing in turns on sync for your planner content, as described in "Sync" below. Alune works fully without an account.

When you choose Continue with Google, Google provides your account identifier, email address, verification status, and basic profile (such as your name and photo, if available) to Supabase Auth. We request only openid, email, profile to identify and authenticate your account. We do not request Gmail, Drive, Calendar, or contacts access, and never receive your Google password.

Supabase Auth stores your account, linked provider identities, email, profile information, and authentication records. We use these to authenticate you and display your account email. Apple may provide a private relay email. Email sign-up sends your email and password to Supabase Auth, which also handles confirmation and recovery emails. Authentication tokens maintain your signed-in session on the device. In the web app, email sign-up, password sign-in, and password reset may be protected by Cloudflare Turnstile, which receives technical browser and device signals to check that the request comes from a person.

We share account information with your chosen sign-in provider and Supabase for authentication. We do not sell Google user data, use it for advertising or AI training, or send account identity or profile data to our AI, advertising, analytics, or subscription processors. Content you independently send to the Assistant follows the separate AI disclosures.

Alune’s use and transfer of Google API information adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Sync

When you sign in, Alune stores a copy of your planner content in your account so it stays the same on your iPhone, iPad, and the Alune web app. This includes tasks and lists, habits and habit logs, goals, notes, journal entries, medications and dose logs, reading and media lists, and your display name. If you allow calendar and reminders access, one iPhone (your "calendar host") also publishes the calendars and reminder lists you have chosen to show in Alune, including event titles, times, locations, and notes, so you can see and edit them in the web app. Changes made on the web are applied to your calendar by that iPhone. Only calendars and reminder lists you show in Alune are uploaded, including events from shared calendars and invitations from other people when their calendar is shown. Alune never uploads event attendees, organizers, link (URL) fields, reminder subtasks, location alerts, attachments, or Apple’s internal calendar identifiers. Event notes can contain meeting links or passcodes, so they are uploaded as written. To stop calendar and reminders upload, hide the calendars or lists in Alune, turn off “Show my calendar and reminders on the web” in your account settings, or sign out. Chat history and AI memory are not synced.

Synced content is stored by Supabase in the United States, encrypted in transit and at rest, and access controls keep each account's data separate. It is not end-to-end encrypted. We use it only to provide sync, never for advertising, AI training, or sale, and we do not share it with third parties except our hosting provider.

Medication and dose information is health data. We use it only to sync your planner and never for advertising, marketing, or data mining.

If you are outside the United States, your synced data is transferred to and stored in the United States. Our provider is bound by the EU Standard Contractual Clauses.

Items you delete are removed from your synced data right away and permanently erased from our servers within 90 days, and from backups on our provider's backup schedule. Deleting your account erases all synced content.

When you sign out, you choose whether to keep the data on that device or remove it. In the web app, signing out always removes the data from that browser.

Data Sent to Servers

Some features send limited data over the network as described in this policy, including optional account authentication and, if you sign in, sync of your planner content. Alune asks you to confirm AI usage before sending Assistant or voice-transcription requests.

• AI Assistant (text): When you send a message to the AI assistant, the text of your conversation is transmitted over HTTPS to Alune's secure server-side proxy hosted on Supabase. The proxy forwards the request to trusted third-party AI providers. When the Assistant uses tools to answer your question, items it explicitly fetches (such as the title and time of a calendar event, the text of a journal entry, a note, a habit, a goal, a medicine schedule, or a reminder you ask about) are included in the request. No personally identifiable information beyond the text you type and the item content the Assistant pulls is attached, and nothing else from your device is sent automatically. Alune and its Supabase proxy do not store your prompts or completions after processing. These providers process these requests under zero data retention agreements: they do not store your content after responding and do not use it for training. They are contractually bound to protect your data at least as strongly as this policy. Alune may store anonymous quota counters and security records such as App Attest sessions, and may log privacy-safe operational telemetry such as model name, provider, status, latency, token counts, and estimated cost. These logs do not include prompts, completions, tool arguments, calendar or reminder contents, note contents, journal contents, or user identifiers.
• Memory privacy: If the Assistant pulls memories you have saved (the small "remember this" notes shown in Settings), every personal name, place, organization, and email address in them is replaced on your device with anonymous placeholder tokens (for example, "Sara" becomes "[P1]") before the request leaves the device. The model never sees the original values.
• Voice transcription: When you use the voice input feature, your audio recording is transmitted over HTTPS to the same Supabase proxy, which sends it to a third-party speech-to-text provider for transcription. That provider processes it under a zero data retention agreement: it does not store your audio after transcribing it, does not use it for training, and is contractually bound to protect your data at least as strongly as this policy. Alune does not retain audio or transcripts on its servers and does not use them for advertising.
• Subscription management: Alune uses RevenueCat to manage in-app purchases and subscriptions. RevenueCat receives your anonymous App Store purchase receipts and a randomly generated anonymous user identifier to verify subscription status. No personal data such as your name or email is shared with RevenueCat. See RevenueCat's Privacy Policy.
• Apple Ads attribution: If you install Alune after interacting with an Apple Ads campaign, Apple's AdServices framework may provide privacy-preserving attribution data such as campaign, ad group, keyword, country, and conversion type. Alune sends the attribution token to RevenueCat so we can understand whether Apple Ads lead to purchases. This is not used to display ads in Alune, fingerprint your device, or track you across apps or websites owned by other companies.
• Advertising measurement (Meta): Alune includes the Meta (Facebook) SDK to measure the performance of our advertising campaigns on Facebook and Instagram. With your permission, requested through Apple's App Tracking Transparency prompt, Alune shares a device advertising identifier and an anonymous Meta identifier, together with conversion events such as beginning a purchase or subscribing, with Meta (delivered through RevenueCat). This helps us understand which ads lead to installs and subscriptions and allows Meta to measure and optimize our campaigns, which may include linking these events to your Meta account. We never share the content you create in Alune (notes, journal, habits, medicine and health data, messages, or saved memories) with Meta. If you decline the tracking prompt, no advertising identifier is shared; limited aggregated conversion measurement may still occur through Apple's privacy-preserving SKAdNetwork. See Meta's Privacy Policy.
• Anonymous usage counters: To understand where new users drop off (for example, how many people reach the subscription screen), Alune increments anonymous, aggregate counters such as "onboarding completed" on our server. These counters contain only an event name, a date, and app version/build. They include no user identifier, device identifier, or content, and cannot be linked to you.
• Reliability diagnostics (Sentry): Alune sends crash, performance, and technical failure data to Sentry to diagnose bugs and improve reliability. This includes app version, operating system, static feature names, error categories, timings, and random request identifiers that let us correlate a failure with our backend diagnostics. These identifiers are not advertising IDs; correlation may associate a diagnostic with a backend operation. We exclude chat messages, AI responses, transcripts, planner contents, medication details, tool arguments, screenshots, and session replay. We do not use these diagnostics for advertising. Where applicable, we process them for our legitimate interests in maintaining a reliable app. Contact us using the details below to exercise applicable privacy rights.
• Product analytics (PostHog): Alune enables privacy-safe product analytics by default and sends usage events (such as static screen names, feature outcomes, app version, and a random per-install identifier) to PostHog, hosted in the United States. Alune does not send screenshots, session replays, touch coordinates, view hierarchies, or typed text to PostHog. These events can include static screen and action tokens, feature outcomes, failure-stage categories, bounded operation counts, and timing measurements. They never include text you enter, transcripts, AI responses, titles, tool arguments, calendar or reminder contents, native item identifiers, or free-form error messages. These analytics use a pseudonymous random per-install identifier, not your name, email, account, advertising identifier, or content. They are never used for advertising and are never sold. Where applicable, Alune processes these events for its legitimate interests in understanding feature adoption, diagnosing reliability and performance, and improving the App. You may object at any time by tapping Turn Off Usage Analytics at the bottom of the in-app Privacy Policy. This does not remove or limit any App feature.

Your AI choice

Before Alune sends any Assistant text, relevant planner item, or voice recording to the processors described above, the App identifies the data and providers and asks for your explicit permission. You may decline or turn off the Assistant later in Settings without losing Alune's non-AI features. Product analytics is separate from this AI permission and does not include your Assistant or planner content.

Third-party AI providers

The third-party services that process content on Alune's behalf are listed below. Alune never sells your data, and never shares the content you create (notes, journal, habits, medicine and health data, messages, or saved memories) for advertising or model training. (Separately, with your App Tracking Transparency consent, Alune shares advertising identifiers and subscription conversion events with Meta for advertising measurement, as described under "Advertising measurement (Meta)" above.) All of these services use encrypted transport, and none of them uses your content for advertising. The third-party AI and speech-to-text providers process requests under zero data retention agreements: they do not store your content after responding and do not use it for training. They are contractually bound to protect your data at least as strongly as this policy. Alune uses these providers only where their processing commitments provide protection equivalent to this policy for the data they receive, including encrypted transport, no advertising use, no model training on your AI request content, and the zero data retention commitments described above:

• Third-party AI providers run the AI models that answer the Assistant. They receive Assistant text and model-visible tool results routed through the Supabase proxy.
• A third-party speech-to-text provider transcribes voice input. It receives microphone audio only when you use voice input.
• Supabase, hosts AI and voice request-routing functions, anonymous usage counters, and, if you sign in, your synced planner content. Separately, Supabase Auth processes optional account information as described above.

Alune for Android (not yet released)

Alune for Android is not available yet. When it is released, it will follow this policy, with these differences:

• Calendar events come from your phone's calendar provider. Alune reads and changes only the calendars you choose to show, and calendar events are not synced to your Alune account from Android.
• Subscriptions are billed by Google Play and managed through RevenueCat. Cancel in Google Play > Payments & subscriptions; deleting your account does not cancel a subscription.
• Optional AI and voice requests are verified with Google Play Integrity instead of Apple App Attest. Google receives integrity information about the app and device for that check.
• The Android app does not include Sentry, PostHog, Apple Ads attribution, Meta attribution, or any advertising SDK, and does not use the Android advertising ID.
• Medicine tracking is not available in the Android app.
• You can sign in with Google or email to sync. Delete your account in Settings > Account > Delete account, or follow the steps at aluneapp.com/delete-account.
• You can revoke Android permissions (calendar, microphone, notifications, alarms and reminders) at any time in Android Settings > Apps > Alune.

Device Permissions

Alune may request the following permissions, each used solely for the stated purpose:

• Calendar & Reminders, to display your schedule and create events or reminders on your behalf.
• Microphone, to enable voice dictation so you can speak instead of type.
• Notifications, to send local habit reminders at times you choose. No push notifications are sent from any server.

You can revoke any permission at any time in iOS Settings.

AI Assistant Limits

• Free access: Free users receive a limited allowance for Quick Add, voice transcription, and Alune AI. Current limits are shown in the app. Failed, cancelled, clarification-only, and duplicate operations do not consume a successful use.
• Pro subscribers: Assistant is included with up to 150 chat messages and 300 voice transcriptions per day (or the limits shown in the app).
• We may adjust daily limits for security, stability, or fair use. Current limits are always described in the app.

Third-Party Services

Alune does not display ads inside the app and does not use cookies. To measure the performance of our advertising campaigns, Alune includes the Meta (Facebook) SDK, which, with your App Tracking Transparency consent, shares device advertising identifiers and subscription conversion events with Meta as described under "Advertising measurement (Meta)" above. Aside from that advertising measurement, the only other third-party services are those described above (optional account authentication via Supabase Auth and the sign-in provider you choose, AI processing and voice transcription via third-party providers, subscription management via RevenueCat, reliability diagnostics via Sentry, privacy-safe product analytics via PostHog, and Apple Ads attribution through Apple's AdServices framework and RevenueCat).

Supabase Auth and your chosen sign-in provider also process optional account information as described above. If you sign in, Supabase also stores your synced planner content as described in "Sync" above.

Data Retention & Deletion

Planner content (habits, goals, journal entries, notes, medicine logs, and reading lists) is stored on your device. If you sign in, a copy is also stored in your account for sync until you delete it or delete your account.

• On-device data: Deleting Alune removes its locally stored planner data. It does not by itself delete your server-side account, synced content, or records held by other providers.
• Account deletion: Account data is retained while your account exists. Use Settings > Account > Delete Account in the app (or Account > Delete Account in the web app) to permanently delete your Supabase Auth account, linked identities, and sign-in sessions. Alune clears its stored authentication session; planner content on your device stays unchanged. Deleting your account also permanently deletes all synced planner content from our servers. Signing out does not delete your account. You can also follow the steps at aluneapp.com/delete-account, including requesting deletion by email if you no longer have the app. Deletion does not automatically revoke Apple or Google permission; Alune provides Apple access instructions and Google Account connections for revoking access. Deleting your account does not cancel Apple subscriptions; use Apple subscription settings to manage them.
• AI conversations: Alune does not keep message text sent to the AI assistant on its servers after processing. Third-party AI providers process requests under zero data retention agreements and do not store them after responding, as described above. Alune keeps only anonymous quota, security, and privacy-safe operational records as described above. Conversation history stored on your device is deleted when you delete the app.
• Voice recordings: Alune does not store audio on its servers. A third-party speech-to-text provider transcribes audio under a zero data retention agreement and does not store it after transcribing.
• Subscription data: Anonymous purchase receipts held by RevenueCat are subject to RevenueCat's data retention policy. You may contact RevenueCat directly to request deletion of your anonymous receipt data.
• Product analytics: Tapping Turn Off Usage Analytics at the bottom of the in-app Privacy Policy stops future collection and removes Alune's queued local PostHog data and random installation identifier. PostHog is configured to retain delivered event data for 12 months; contact Alune support to request deletion where applicable.

To request deletion of any data associated with your use of Alune, contact us at [email protected].

Children's Privacy

Alune is not directed at children under 13. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. Any changes will be reflected in the app with an updated effective date.

Contact

If you have questions about this policy, please contact us at [email protected].

© 2026 Ahmed Diab. All rights reserved.