Aligned: the journal that remembers

1. About This Policy

Rosa Van Kuyk trading as Aligned App (“Aligned”, “we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights in relation to it.

We operate in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also apply GDPR-equivalent standards as a baseline of best practice.

2. What Information We Collect

Personal Information

Full name and date of birth
Email address and account credentials
General location (city or region level)
Device identifiers, IP address, and app usage data

Sensitive Information: Health & Psychological Data

Under Australian law, the following is classified as sensitive information and subject to heightened protections:

Menstrual cycle data: cycle dates, flow, symptoms, and physical observations you choose to log
Journal entries: written reflections, thoughts, and emotional disclosures you record in the app
Emotional state logs: mood ratings, feelings, and psychological observations you enter

We only collect sensitive information with your explicit consent, which we ask for during onboarding, before we collect anything. That consent covers three things together: storing what you write, analysing it over time to show you your patterns, and processing it with AI to generate your reflections. Each of those is named on the consent screen itself.

Agreeing is required to use Aligned. The app cannot function as a journal that remembers without storing what you write, analysing it over time, and using AI to turn it into your reflections. These are not separable add-ons, so they are not offered as separate switches. If you would rather not agree, you can export everything you have written and delete your account at any time in Settings.

Behavioural Data

Mood patterns and trends derived from your logs over time
Habit and routine information you choose to track
Behavioural insights generated from your activity in the app

3. How We Collect Your Information

Directly from you: when you create an account, complete your profile, log cycle data, write journal entries, record your mood, or contact us.

Automatically: when you use the app, we collect technical data such as device type, operating system, session timestamps, and feature usage.

Through AI processing: when you use AI-powered features, your entries may be processed to generate personalised insights. See Section 5 for details on third-party providers.

4. Why We Collect Your Information

We collect and use your information only for the purposes described below, in accordance with APP 3 and APP 6. We do not use your information for direct marketing without your separate, opt-in consent. We do not sell your data to third parties under any circumstances.

5. How We Share Your Information

We share your information only with service providers required to operate Aligned. We do not share your data with advertisers, data brokers, or third parties for commercial purposes.

Third-Party Service Providers

Supabase: database and user authentication, Australia region (AWS ap-southeast-2, Sydney)
Anthropic (Claude Sonnet API): AI-powered insights and pattern analysis, processed in the United States
PostHog: privacy-focused product analytics (how features are used), processed in the United States. We do not send journal, cycle, or health content to PostHog.
Sentry: crash and performance diagnostics to keep the app stable, processed in the United States. Session data is masked so it does not capture your journal content.
Resend: sends transactional and launch-waitlist emails, processed in the United States. Receives only your name and email address, never your journal, cycle, or health content.

Overseas Disclosure (APP 8)

Anthropic is a United States-based company. When you use AI-powered features, relevant data is transmitted to and processed by Anthropic’s systems in the United States. The consent you give during onboarding states this on screen, so agreeing to it is your acknowledgement and consent to that cross-border transfer. Because AI generation is integral to how Aligned works, it cannot be switched off on its own; to withdraw, export your data and delete your account in Settings. Anthropic does not use API-submitted data to train its models under current enterprise terms.

Our analytics and diagnostics providers, PostHog and Sentry, also process data on servers located in the United States. They receive only usage events and technical crash data, never your journal, cycle, or health content. They do not use this data for advertising or cross-app tracking.

Our email provider, Resend, processes data on servers located in the United States. If you join our launch waitlist or receive email from us, your name and email address are transmitted to and stored by Resend in the United States. They receive no journal, cycle, or health content.

6. How Long We Keep Your Information

Account information: duration of active account; deleted immediately when you request account deletion
Cycle, health, and journal data: duration of active account; deleted immediately on account deletion
Usage and technical data: 12 months rolling
Backup copies: purged within 90 days of deletion

7. How We Protect Your Information

We take reasonable steps to protect your information from misuse, interference, unauthorised access, modification, and disclosure (APP 11). Our security measures include encryption of data in transit (TLS) and at rest, access controls, authentication requirements, and regular security reviews.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

Access (APP 12): request a copy of the personal information we hold about you
Correction (APP 13): request correction of inaccurate, incomplete, or misleading information
Deletion: request deletion of your account and all associated data at any time via Settings or by contacting us
Withdrawal of consent: withdraw your consent at any time by exporting your data and deleting your account in Settings, or by contacting us. Because storage, pattern analysis and AI generation are integral to the service, consent cannot be withdrawn for one of them while continuing to use Aligned

To exercise any of these rights, contact us at info@alignedapp.com.au. We will respond within 30 days.

9. Children’s Privacy

Aligned is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us at info@alignedapp.com.au and we will delete the account promptly.

10. Notifiable Data Breaches

In the event of an eligible data breach likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and all affected users as soon as practicable, in compliance with the Notifiable Data Breaches (NDB) Scheme.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you via the app or by email before the changes take effect. Continued use of Aligned after notification constitutes acceptance of the updated Policy.

12. Complaints

If you have a complaint about how we have handled your personal information, please contact us first at info@alignedapp.com.au. We aim to respond within 15 business days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001.