Privacy policy

What we collect

We collect the email address you sign in with and, if you sign in with Apple or Google, the account id it gives us (with Apple, also the token that lets us end that sign-in when you delete your account). Sign-in links and sessions are stored only as hashes, so a database leak never signs anyone in.

We keep the bots you make (their names, characters, instructions and routines), the text of your chats and messages, the photos and files you attach, and the images your chats make with the prompts that made them. Photos, files and images are stored with the chat, readable only by you and the people in it. Invite links that you share let a guest read one thread by name, without an account, and we keep the name the guest gives.

The handle and avatar color you pick, and the profile you set (a display name, an About up to 140 characters and a profile picture), are the parts of your account a friend ever sees; anyone you add can find you by your handle, and never sees your email. The profile picture's bytes are stored on the server until you replace or remove them, or delete your account. We keep your time zone, so reminders and routines run at your times.

Your agents share one computer of yours at Cloudflare, with each chat's files kept apart from your other chats' and a backup while it sleeps; only you can open them. Its browser keeps the sign-ins of the sites you or your agent sign in to on it. Another bot reads its code only when you allow it (or, between your own bots, while you let them): it reads the project you allowed, never writes, and stops the moment you revoke it. The computer's screenshots are stored with the chat, like the images a chat makes.

The apps you have are stored with your account: which ones, the chat each made, until when each one runs, and a record of each purchase with its Stripe session. For a Stripe purchase we also keep the fingerprint Stripe gives the card, which is not the card number and is used only so a share link can't earn credit on its own card. We record what each answer cost, to count your allowance. We keep a record of each call (who called whom, voice or video, and when) and of each report you make (its reason, your note and the reported message's text). When a page hits an error, we log the error, the screen it was on and the start of your account's id, to fix it.

Your IP address is used to limit how often codes, invites and sign-in links can be asked for. Our database keeps it only as a hash: for about an hour while you verify a phone number, and with a free trial's claim (see Deleting chats and your account).

How it is used

We use it to keep your account and your chats, to answer your questions and to do what you ask your agents to do. Nothing you do is used for ads, sold, or tracked across other companies' apps and sites.

What you write in a group chat, and the answers its bots give there, are seen by the group's members. A message you send where other people read it (a group with another person in it, a chat between two people, or a thread with guests) is first checked by Llama Guard on Cloudflare's Workers AI, to hold back what breaks the Terms. A message to a bot alone is never checked.

Who processes it

Align Cloud runs on our own server, hosted by OVH, which stores your account, chats, photos and files. The website at aligneast.com reaches it through Cloudflare, which passes on your requests and your IP address.

Your prompt, the chat's recent messages, the instructions of the bot you are chatting with, any photo or file you attach and what the bot's tools found for it (your Apple Health numbers, your location or your apps' records, when it reads them) are sent to the provider of the model that answers (Anthropic, Cloudflare's Workers AI, OpenAI, Google, xAI, Moonshot or Perplexity). Cloudflare's Workers AI also reads your recent messages to decide whether a question needs a deeper answer, which of a group's bots answers, and which search results fit, and it checks what your agent's computer reports back. An answer that cites sources is checked against them by OpenAI, or by xAI when OpenAI can't. A prompt made as an image, and any photo you give it to change, is sent to OpenAI, which draws it.

For web answers, the search the model writes is sent from our server to search engines (Bing, Brave, Yahoo, Wikipedia, Mojeek, Presearch and DuckDuckGo), never with your address or your account, and the pages it cites are opened from our server as sources. Searches and the pages they found are kept for a while to answer the next search faster, with nothing that ties them to you. A flight search sends its route, dates and number of travelers to airlines' sites, from our server.

Cloudflare runs your agents' computer and keeps its backup. Its browser reaches websites through Webshare, a proxy service, except Stripe's payment pages, which it opens directly, and each site it opens gets what it types there.

Voice and video calls go through Cloudflare Realtime, which carries the call's audio and video and your device's network addresses; calls are never recorded. In the iPhone app, a call shows in the Phone app's Recents.

Amazon SES sends our emails, so it gets your email address and each email's text. Twilio checks your phone number, if you add one. Stripe handles payments, on our website. Apple's push service carries each notification to your device. A Brand Architect page draws its typefaces from Google Fonts, and only when such a page is shown; no other page asks Google for them.

Your location

Only if you allow it. Align Cloud asks when one of your agents needs it for something you asked, or when you tap Connect in Profile, and your device then asks you too. We keep one position for your account: the latitude and longitude your device gives, how accurate it is and when it was taken. While Location is connected, each time you open Align Cloud it reads your position again and replaces the stored one, so no history is kept. Your agents read it to answer you, and then it goes, like your messages, to the model that answers. Disconnect in Profile deletes it, and so does deleting your account.

Apple Health

Only if you allow it. Align Cloud never asks at sign-up or when the app opens: it asks when one of your agents needs it for a goal of yours, or when you tap Connect in Profile, and iOS then shows you exactly what it may read. It reads, never writes: your daily steps, active energy, sleep by stage, workouts, weight and resting heart rate, as one number a day (and each workout's kind, length and energy), sent from the iPhone app to your account. It's used only to answer you and to draw your agents' pages, it's readable only by you and your own agents (never a group's other members), it's never used for ads or sold, and it's never sent to anyone else except, as with your messages, to the model that answers you. Disconnect in Profile deletes everything synced from Apple Health at once, and so does deleting your account. Nothing in the Health app itself is ever changed.

Phone number

Only if you add it. Your phone number is collected to verify it and to let friends find you by typing it. We send it to Twilio Verify, which texts you a code and checks the code you type; we never see or keep the code. While you verify, we keep a hash of the number you typed and of your IP address, to limit how many codes are sent, and delete them the next time anyone asks for a code after an hour. Your number is never shown to anyone, not even a friend, and Who can find me by my number in Profile can turn finding you by it off. Removing it in Profile deletes it, and so does deleting your account.

Notifications

Only if you allow it, and only ever on your own device. Align Cloud never asks at sign-up: the app asks the first time you send a message, and iOS then shows you exactly what it may do. A new message in one of your chats or groups while you aren't in it raises a notification with its text and the chat's name, so the notice means something; a chat or group you mute sends none. A call rings your iPhone with the caller's handle. What we keep is the tokens Apple gives the app for your device, one for notifications and one for calls, with the app's version, under your account, which is how a message reaches you; signing out or deleting your account removes them. Nothing about your messages is used for ads or sold, and a notification never goes anywhere but your own device.

Cards

Purchases are made on our website, where Stripe takes the payment, and the card's details go to Stripe, never to us. When you give your agent a card so it can pay on a site for you, the card's details pass through our server to your agent's computer, which types them into that site's payment fields: we never write them to our database or logs, and the computer's screenshots hide them. A card number typed into a chat message is stored and sent to the model like any other message, so give a card only where Align Cloud asks for one.

What we do not collect

We don't collect your contacts or your device's advertising identifier, and the app has no analytics or advertising code in it. Dictation runs on your iPhone where iOS can do it there, and otherwise through Apple's own speech recognition.

Sharing

Your account has a share link, opened from the account menu. When someone signs up through it and their first purchase is confirmed, a credit of extra usage is recorded with your account and one with theirs, which notes who invited them, once per person who signs up through your link. Extra usage is spent only after your included allowance is used up, and a refunded payment takes back any of your credit that is still unspent.

Email

Besides sign-in links, we send two emails: a welcome a few minutes after you sign up, and a note the first time in a week that your free messages run out (at most once a week, and four times in all). Each one has an unsubscribe link that stops both in one click, without signing in; sign-in links still come.

Deleting chats and your account

Clear chat, Delete chat and Delete for me hide messages from you; they don't remove them from our server, so a bot's pages and the other person in a chat keep theirs. Deleting your account removes them.

Deleting your account removes your bots and their projects, your chats and messages, your profile picture, the photos, files and images in them, your agents' computer and its backup, what the app synced from Apple Health, your location, your phone number, your purchases and usage, your devices' tokens, and the connections people had to you. What stays: messages you wrote in a group stay for its other members, shown as from Deleted account (their photos go); the records of calls and of reports; and copies of our database taken before each update of the service, which hold what was there when they were made.

The free trial is one per person, so when a trial starts we keep keyed one-way hashes of your email, your Apple and Google account ids and your phone number, with when it was claimed, and a keyed one-way hash of the IP address it was claimed from, which lets one connection start three trials in 30 days. These stay after your account is deleted, so a new account of the same person cannot earn a second one; none of them holds the email, number or address itself. The services above keep what they were sent under their own policies.

Contact

Questions about your data? Email support@aligneast.com.