Privacy Policy

Effective date: July 19, 2026

Alune ("the App") is a personal productivity and wellness companion built by Ahmed Diab. Your privacy is fundamentally important to us.

On-Device Data

Everything you create in Alune is stored on your device using Apple's SwiftData framework and is not uploaded to any server. This includes:

• Habits and habit logs
• Goals and milestones
• Journal entries (text, mood, energy, tags)
• Notes
• Medicine and supplement schedules and dose logs
• Reading log items and categories
• Saved memories the Assistant can reference
• App settings and preferences

Calendar events and reminders are managed by iOS itself through Apple's EventKit framework. Alune reads from and writes to the calendars and reminder lists you grant access to. The data lives in your iOS Calendar and Reminders, not on Alune's servers.

Data Sent to Servers

Certain features require network communication. When you use these features, limited data leaves your device as described below. You are asked to confirm AI usage in-app before any Assistant chat or voice transcription request is sent.

• AI Assistant (text): When you send a message to the AI assistant, the text of your conversation is transmitted over HTTPS to Alune's secure server-side proxy hosted on Supabase. The Supabase proxy forwards the request to OpenRouter, which routes it to Google Gemini 3.5 Flash through a Zero Data Retention Google Vertex route for processing. When the Assistant uses tools to answer your question, items it explicitly fetches (such as the title and time of a calendar event, the text of a journal entry, a note, a habit, a goal, a medicine schedule, or a reminder you ask about) are included in the request. No personally identifiable information beyond the text you type and the item content the Assistant pulls is attached, and nothing else from your device is sent automatically. Assistant requests are routed exclusively to providers with Zero Data Retention agreements. Neither Alune, our Supabase proxy, OpenRouter, nor the routed AI provider stores your prompts or completions after processing. Alune may store anonymous quota counters and security records such as App Attest sessions, and may log privacy-safe operational telemetry such as model name, provider, status, latency, token counts, and estimated cost. These logs do not include prompts, completions, tool arguments, calendar or reminder contents, note contents, journal contents, or user identifiers.
• Memory privacy: If the Assistant pulls memories you have saved (the small "remember this" notes shown in Settings), every personal name, place, organization, and email address in them is replaced on your device with anonymous placeholder tokens (for example, "Sara" becomes "[P1]") before the request leaves the device. The model never sees the original values.
• Voice transcription: When you use the voice input feature, your audio recording is transmitted over HTTPS to the same Supabase proxy, which forwards it to ElevenLabs (Scribe v2) for speech-to-text conversion. Audio is processed under our Zero Retention Mode agreement with ElevenLabs. Audio input and the resulting text are deleted immediately after the request completes and are not used for model training. Alune does not retain audio or transcripts on its servers either.
• Subscription management: Alune uses RevenueCat to manage in-app purchases and subscriptions. RevenueCat receives your anonymous App Store purchase receipts and a randomly generated anonymous user identifier to verify subscription status. No personal data such as your name or email is shared with RevenueCat. See RevenueCat's Privacy Policy.
• Apple Ads attribution: If you install Alune after interacting with an Apple Ads campaign, Apple's AdServices framework may provide privacy-preserving attribution data such as campaign, ad group, keyword, country, and conversion type. Alune sends the attribution token to RevenueCat so we can understand whether Apple Ads lead to purchases. This is not used to display ads in Alune, fingerprint your device, or track you across apps or websites owned by other companies.
• Advertising measurement (Meta): Alune includes the Meta (Facebook) SDK to measure the performance of our advertising campaigns on Facebook and Instagram. With your permission, requested through Apple's App Tracking Transparency prompt, Alune shares a device advertising identifier and an anonymous Meta identifier, together with conversion events such as starting a free trial or subscribing, with Meta (delivered through RevenueCat). This helps us understand which ads lead to installs and subscriptions and allows Meta to measure and optimize our campaigns, which may include linking these events to your Meta account. We never share the content you create in Alune (notes, journal, habits, medicine and health data, messages, or saved memories) with Meta. If you decline the tracking prompt, no advertising identifier is shared; limited aggregated conversion measurement may still occur through Apple's privacy-preserving SKAdNetwork. See Meta's Privacy Policy.
• Anonymous usage counters: To understand where new users drop off (for example, how many people reach the subscription screen), Alune increments anonymous, aggregate counters such as "onboarding completed" on our server. These counters contain only an event name, a date, and app version/build. They include no user identifier, device identifier, or content, and cannot be linked to you.
• Product analytics and session replay (PostHog): To understand how the app is used and where people get stuck, Alune sends anonymous usage events (screens viewed, features used, app version, and a random per-install identifier) to PostHog, hosted in the United States. Some sessions are recorded as visual replays of app screens so we can find usability problems. Replays are aggressively masked: all text you type and all images are hidden, and screens that show your content (AI chat, journal, notes, and saved memories) are excluded entirely, so your content never appears in a replay. These analytics also include static labels for the screen or control involved, feature outcome and failure-stage tokens, bounded operation counts, and timing measurements. They never include text you enter, transcripts, AI responses, titles, tool arguments, calendar or reminder contents, native item identifiers, or free-form error messages. These analytics are associated only with a random per-install identifier, not your name, email, account, advertising identifier, or content. They are never used for advertising and are never sold.

Third-party AI providers

The third-party services that process content on Alune's behalf are listed below. Alune does not sell or share your data with anyone for advertising or training. Alune uses these providers only where their processing commitments provide protection equivalent to this policy for the data they receive, including encrypted transport, no advertising use, no model training on your AI request content, and the zero-retention or no-retention commitments described above:

• OpenRouter, AI request routing for the Assistant. OpenRouter receives Assistant text and model-visible tool results routed through the Supabase proxy.
• Google, runs Gemini 3.5 Flash through a Zero Data Retention Google Vertex route for Assistant replies. Google receives the Assistant request routed through OpenRouter.
• ElevenLabs, runs the Scribe v2 model for voice-to-text. ElevenLabs receives microphone audio only when you use voice input.
• Supabase, hosts the request-routing edge functions for AI chat and voice transcription and stores only anonymous request counters used to enforce daily limits.

Device Permissions

Alune may request the following permissions, each used solely for the stated purpose:

• Calendar & Reminders, to display your schedule and create events or reminders on your behalf.
• Microphone, to enable voice dictation so you can speak instead of type.
• Notifications, to send local habit reminders at times you choose. No push notifications are sent from any server.

You can revoke any permission at any time in iOS Settings.

AI Assistant Limits

• Free trial: If you do not have an active subscription or AI add-on, you may send a limited number of Assistant messages (shown in the app) as a one-time trial. After that, Assistant requires a qualifying purchase.
• Pro subscribers: Assistant is included with up to 150 chat messages and 300 voice transcriptions per day (or the limits shown in the app).
• We may adjust daily limits for security, stability, or fair use. Current limits are always described in the app.

Third-Party Services

Alune does not display ads inside the app and does not use cookies. To measure the performance of our advertising campaigns, Alune includes the Meta (Facebook) SDK, which, with your App Tracking Transparency consent, shares device advertising identifiers and subscription conversion events with Meta as described under "Advertising measurement (Meta)" above. Aside from that advertising measurement, the only other third-party services are those described above (AI processing via OpenRouter and Google, voice via ElevenLabs, subscription management via RevenueCat, anonymous product analytics and masked session replay via PostHog, and Apple Ads attribution through Apple's AdServices framework and RevenueCat).

Data Retention & Deletion

All personal data (habits, goals, journal entries, notes, medicine logs, and reading lists) is stored exclusively on your device. Alune does not maintain any server-side copy of this data.

• Delete all data: To delete all your data, simply delete the Alune app from your device. All locally stored data will be removed immediately.
• AI conversations: Message text sent to the AI assistant is routed only through providers with Zero Data Retention agreements and is not retained after processing. Alune keeps only anonymous quota, security, and privacy-safe operational records as described above. Conversation history stored on your device is deleted when you delete the app.
• Voice recordings: Audio sent to ElevenLabs for transcription is processed under our Zero Retention Mode agreement and deleted immediately after each request. Alune does not store audio on its servers.
• Subscription data: Anonymous purchase receipts held by RevenueCat are subject to RevenueCat's data retention policy. You may contact RevenueCat directly to request deletion of your anonymous receipt data.

To request deletion of any data associated with your use of Alune, contact us at [email protected].

Children's Privacy

Alune is not directed at children under 13. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. Any changes will be reflected in the app with an updated effective date.

Contact

If you have questions about this policy, please contact us at [email protected].

© 2026 Ahmed Diab. All rights reserved.