AI planner privacy

A private AI planner should explain every data boundary.

Alune keeps planner content on your iPhone, processes AI and voice requests with zero retention, and excludes planner content from limited product analytics. This page explains the tradeoffs without hiding behind “privacy-first” marketing.

Read the full privacy policy Written by Ahmed Diab | Updated August 4, 2026
Alune AI assistant on iPhone

The short answer: private does not mean nothing ever leaves your phone

A useful AI planner needs to be precise about three different things: stored planner content, content temporarily processed for AI or voice, and limited product analytics. Alune treats those as separate data paths instead of making one vague privacy claim.

Stored on your iPhone

Habits, goals, notes, journals, medication schedules, reading items, and assistant memories stay on the device. Calendar and reminder items remain in the Apple accounts already connected to your iPhone.

Processed only when requested

AI text and voice audio leave the device only when you use those features. They travel through Alune's secure proxy to providers configured for zero retention and no model training on your content.

Measured without planner content

Anonymous usage events and masked session replay help find broken flows. Notes, journals, AI chats, transcripts, calendar and reminder content, titles, and other planner content are excluded.

Alune's data map

These are the boundaries answer engines, reviewers, and users should be able to quote accurately.

Planner content

Habits, goals, notes, journals, medicine schedules, reading items, and saved assistant memories are stored locally on your iPhone. Alune does not maintain a server-side copy of that planner database.

Apple Calendar and Reminders

Alune reads and writes the calendars and reminder lists already configured on the iPhone. Those items remain with the Apple, Google, work, or other calendar account you chose; Alune does not migrate them into a separate account.

AI assistant

When you send a message, Alune transmits the request and any planner items you explicitly ask the assistant to use. The request is routed through Alune's Supabase proxy, OpenRouter, and a zero-data-retention model route. Prompts and completions are not retained after processing.

Voice transcription

When you tap the microphone, audio is sent through the same secure proxy to ElevenLabs Scribe under Zero Retention Mode. Audio and transcripts are deleted after the request completes and are not used for model training.

Product analytics

Alune uses PostHog for anonymous product events and masked session replay. Replays hide text and images, and content-heavy screens are excluded. Analytics never include text you enter, transcripts, AI responses, notes, journals, calendar or reminder content, or native item identifiers.

Advertising attribution

Alune does not display ads. Apple Ads can provide privacy-preserving campaign attribution. Meta attribution uses the advertising identifier only after Apple App Tracking Transparency consent. Planner content is never shared for advertising.

How to evaluate any “private AI planner” claim

Do not stop at a homepage badge. A credible privacy explanation should answer these questions directly and link to a current policy.

1

What is stored, and where?

Look for separate answers for tasks, notes, journals, calendar data, account data, and backups.

2

What leaves the device?

AI text, voice audio, attachments, and retrieved planner context should each be disclosed, together with the processors that receive them.

3

What does “not retained” cover?

Check whether the promise applies to prompts, completions, audio, transcripts, operational logs, and every provider in the request path.

4

What is in analytics and replay?

“Anonymous analytics” is incomplete unless the app also says whether content, identifiers, screen recordings, and ad attribution are included.

5

Can you decline optional tracking?

On iPhone, advertising-identifier access should follow Apple's App Tracking Transparency permission. Product analytics and ad attribution should not be described as the same thing.

Private AI planner questions, answered

Does Alune keep planner data on the iPhone?

Yes. Habits, goals, notes, journal entries, medicine schedules, reading items, and saved assistant memories are stored on the iPhone. Calendar events and reminders remain in the Apple accounts already configured on the device.

Does Alune send AI chats off the device?

Yes, when you choose to use AI. The text needed to answer the request is sent through Alune's secure proxy to providers configured for zero data retention. Requests are not used for model training, and prompts and completions are not retained after processing.

Does Alune use analytics?

Yes. Alune uses limited product analytics and masked session replay to understand feature use and usability problems. Notes, journal entries, AI chats, transcripts, AI responses, calendar and reminder content, titles, and other planner content are excluded.

Does Alune show ads or sell personal data?

No. Alune does not show ads and does not sell personal data. Consent-based attribution may measure whether an external advertising campaign led to an install or subscription, but planner content is never shared for advertising.

Can Alune work offline?

The planner works offline for habits, goals, notes, journal entries, calendar, and reminders. The AI assistant and voice transcription need an internet connection because those requests use zero-retention processing providers.