Privacy policy

Account and family information. Name, email address, authentication identifiers, optional phone number and profile image, account status, plan, preferences, family relationships and invitations, and age information you provide. Sign-in service providers supply the identifiers and profile information needed for the sign-in method you choose.

Content. Prompts, responses, conversation history, notes and edits, research questions and plans, reports and summaries, saved memories, custom instructions, project information, attachments, images, documents, recordings or transcripts you submit, and feedback or support correspondence. Shared content also includes membership and collaboration information needed to provide those features.

Sensitive information. Faith or religious preferences and information you put in your content may reveal religious beliefs, health, finances or other sensitive matters. We process these to provide the features you request and as otherwise described here. Avoid submitting passwords, payment-card details, government identifiers, or another person's sensitive information without authority. The Services are not offered under a HIPAA business associate agreement unless we expressly sign one.

Technical and usage information. IP address, device/browser and operating-system information, timestamps, request and account identifiers, feature use, diagnostics, performance and error information. Approximate location may be inferred from network information. When you enable Use current location and grant device permission, the mobile app can send precise latitude and longitude with your request, for example for weather or local search. Location included in a request may also inform external search queries as described below. Logs and support reports can contain submitted content or contextual information needed to investigate a failure; do not assume they are anonymous.

Billing information. Subscription status, billing identifiers, transaction and invoice information, and payment confirmations. Payment service providers process web payments. We do not store full payment-card numbers. If a purchase is offered through an app store, the store processes that payment and provides relevant purchase information under its own policy.

We use information to authenticate you; provide and synchronize chat, notes, projects and reports; retrieve relevant context; apply your settings; process subscriptions; deliver requested communications; investigate errors and abuse; secure accounts; respond to requests; and comply with legal obligations.

Generating a response can require your current input, relevant conversation history, selected note or project content, attachments, saved memories and instructions, and applicable family or content settings. Those features are not separate data silos: when you ask an assistant to work with a note or project, relevant content may be supplied as context.

We also use feedback, diagnostics and service-use information to evaluate and improve reliability, usability and safety, subject to the model-training restrictions below. We may review relevant content to resolve support requests, investigate abuse or security incidents, or comply with law. This is not continuous human monitoring and is not an emergency response service.

Server processing. Our current core chat inference uses models hosted on Aligned-operated inference infrastructure, including models licensed from other developers. A model's developer is not necessarily the recipient of your prompts. "Local" or "self-hosted" inference refers to our deployment unless a feature expressly says processing occurs on your device; it does not mean every part of the Services is offline or free of service providers. Account storage, hosting, payments and other functions still use providers described below.

Search, Deep Research and document retrieval. Aligned uses Firecrawl for web search, research, image-related searches and some document processing. Firecrawl receives queries generated from your question and relevant context, which may include prior messages, notes, project or document text, image descriptions, and location when included. Queries may contain personal information. It also receives page and document URLs; when it retrieves a document, it can access and process that document's contents. This processing finds sources, retrieves information and extracts text for your answer. It is separate from the models operated on Aligned's own infrastructure. Following a source link contacts that website under its own practices. Do not include confidential information in research instructions unless you are authorized to have it processed this way.

Mobile external-processing choice. In app versions with the External search and documents control, the app asks you to Allow or choose Not now before sending a search-enabled chat or external document-processing request. Permission is specific to the signed-in account and disclosure version on that installation. You can withdraw it under Settings > Manage Data > External search and documents to block future governed requests from that app. Requests already sent may continue processing; withdrawal does not recall transferred information or delete existing records. Use the deletion process in Section 8 for those records. Saved content, Aligned-only Notes AI, transcription and read-aloud remain available without this permission; voice chat answers use the search-enabled chat pipeline and require it. Account and content storage through Google Firebase is separate from this choice, as are device permissions and any model-training preference. Update older app versions if this control is not available.

Model training. Generating an answer, maintaining memory and saving history are distinct from training a model. We do not permit non-public conversation content to be used for foundation-model training without a separate, informed adult opt-in. A general acceptance of these Terms or this policy is not that opt-in. Audio and video training require the applicable separate choices where offered. We do not use content associated with profiles designated as minors, or Temporary Chats, for model training. Commercial content is governed by the no-training commitment in the applicable commercial agreement. Any use must also respect the notice and commitments in effect when the content was collected; this revision does not expand permission for previously collected content.

An improvement setting records a preference; it is not a representation that a particular training program is operating. Where a training program is offered, its notice must explain the data included and consequences of withdrawal before enrollment. You may change an available preference in Settings or contact privacy@joinaligned.ai. Withdrawal stops future inclusion under that permission; any limitations on removing data already used must be disclosed in the program notice. We do not promise that removing names makes free-text content impossible to identify.

Safety review and debugging do not create a separate permission to train on minors' content or bypass an opt-in requirement. We do not authorize outside AI providers to use your non-public content for their independent model training. Material changes in who processes your content or why require the applicable notice and, where required, consent.

If you choose dictation, voice conversation, recording, transcription or attachment features, the audio, transcript, image or file needed for that feature is processed. Depending on the feature, processing can take place on your device or on our servers. Uploaded audio may be transcribed on our inference infrastructure. A transcript or content you save or send becomes subject to the same storage and sharing rules as other content.

The app requests device permissions when needed, such as microphone or photo access. You may revoke them in device settings; affected features may then stop working. You are responsible for obtaining any consent required before recording or uploading someone else's voice, image or information.

Where device notifications are enabled, device or notification-routing identifiers and notification content may be handled by the platform's notification service. Email and SMS features use the relevant delivery provider. A device lock screen, shared inbox or shared phone may expose notification content to others. Delivery can be delayed or fail; notifications are not emergency monitoring. Notification permissions and communication preferences are separate from deleting your account.

Your choices. Participants and collaborators can access information shared with them through group chats, projects, invitations, reports or other sharing features. Recipients can keep copies, screenshots or exports. Deleting your copy or leaving a group does not necessarily delete a recipient's independent copy. Check recipients and sharing settings before sending. Sharing a report also shares the personal information and sources it contains.

Family accounts. A parent or guardian managing a minor's profile may access activity, settings or safety information made available by the family features. These tools have limits and are not a guarantee that all activity will be visible or every concern detected. An adult family member's data is not automatically subject to unrestricted parental access. Rights depend on account roles, permissions and applicable law.

Organizations. If you join an organization-managed workspace, its administrators may have the access disclosed for that workspace and its agreement. Using an organization email address alone is not consent to silently transfer your personal account or its content to that organization.

Exports. Downloaded reports, copied answers, shared files and device backups can remain outside Aligned's control. Protect those copies and use the receiving service's controls to manage them.

We disclose information needed for the following functions, depending on the features you use:

• Firecrawl: web search, retrieval and some document extraction. It receives derived queries that can contain personal information from your question and relevant context, page and document URLs, and the contents it accesses when retrieving documents. Section 3 explains these transfers and the mobile consent controls. See Firecrawl's privacy policy.
• Google Firebase: account authentication, databases and file storage. These services process account identifiers and authentication information, saved conversations and notes, and uploaded files needed for those features. This storage is separate from permission for external search and document processing.
• Vercel: website/application hosting and request handling. It processes requests routed through its hosting infrastructure, which can include submitted content, account/request identifiers, network information and operational diagnostics. Aligned-operated model inference does not mean the hosting path receives no user data.
• Stripe: web checkout, billing and subscription management. It processes the payment details you provide to checkout, billing identifiers and transaction information. Aligned does not store full payment-card numbers.
• Apple: Apple sign-in and in-app purchases where used. Apple processes sign-in or purchase information for those features and provides relevant account identifiers or transaction information to Aligned. Apple in-app purchases are distinct from Stripe web checkout.
• Twilio: phone verification and SMS where used. It receives the phone number and verification or message content needed to deliver those features.
• SendGrid: transactional and account email. It receives the destination email address and the message content needed for delivery.
• Other device-platform services handle applicable device functions and any enabled store or notification features as described in Section 4.

Providers acting on our behalf receive information for their service functions, subject to applicable arrangements and law. A provider may also act independently for its own payment, account, fraud-prevention or legal obligations; review its policy when you use that provider directly. Contact privacy@joinaligned.ai for information about the providers applicable to your use.

We may disclose information to professional advisers; to comply with valid legal process or reporting obligations; to investigate fraud or misuse; or where legally permitted and reasonably necessary to protect people, rights or security. We may transfer information in a merger, financing, reorganization or sale, subject to applicable notice, law and existing privacy commitments.

We do not sell personal information or share it for cross-context behavioral advertising. We do not provide conversations to advertisers or data brokers. This does not prevent the service-related disclosures explained in this policy.

Memory and history are separate features. Disabling memory does not itself delete past conversations or saved memories. Use available controls to review or delete saved information, or submit a privacy request. Saved preferences, cached content and session information may also be stored on your device.

Temporary Chat is designed to keep that conversation out of normal saved history and memory. It still requires processing to deliver the response. Necessary operational records, security information, feedback you submit, independently saved or shared material, and information retained under a legal obligation may remain. Temporary Chat is not anonymity, end-to-end encryption, an offline mode or a guarantee that nothing is retained. Deleting the app or clearing browser storage does not delete information held in your account or by recipients.

We retain information for the purpose for which it was collected, taking account of whether you keep an active account, choose to save content, request deletion, need support, or have an outstanding billing, safety, fraud or legal matter. Account records support account administration; saved chats, notes, projects and reports support your chosen history and content features; diagnostics support investigation and security; billing records support transactions, accounting and legal requirements. Retention must be limited to what is reasonably necessary for those purposes.

You can initiate account deletion through the available Settings > Account > Delete Account control, or request help at privacy@joinaligned.ai. You can also request access, correction or deletion of particular information. We may need to verify identity or authority. Disabling account access, signing out, or removing an item from view is not confirmation that every copy has been erased. We will handle a verified request within applicable legal deadlines and explain any lawful exception or extension.

Some information may need to remain for legal obligations, tax/accounting, disputes, security or fraud prevention, or to respect other users' rights. Backup copies may require a separate deletion cycle and must remain protected and limited in use pending deletion. Copies retained independently by collaborators, export recipients or third-party services are subject to their own controls. Contact us for the status and scope of a deletion request, including remaining categories and reasons for retention.

Earlier commitments remain applicable. This revision does not extend retention of information covered by an earlier deletion commitment, withdraw an outstanding deletion request, or excuse a missed legal or contractual deadline. Deleting an account also does not, by itself, confirm that a subscription has been canceled; check the applicable billing provider as described in the Terms.

We use cookies, browser/local storage and similar device storage to maintain sessions, secure accounts and remember preferences. Operational diagnostics may record website or app usage. Any optional analytics must follow the choices and notice offered for that use and applicable consent requirements; blocking cookies in a browser is not a substitute for consent where consent is required.

Use the website's cookie controls where offered and your browser/device settings to manage storage. Blocking essential storage can prevent sign-in or saved preferences. We do not use conversations for advertising. Where an applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, that signal must be respected for covered uses. A browser's older Do Not Track signal is not a uniform consent mechanism and does not replace your privacy rights. For help with an opt-out or a cookie choice, contact privacy@joinaligned.ai.

Adults must be at least 18 to create a primary account. Minor family members must be at least 13 and have the permission of a parent or legal guardian; any higher minimum age required by local law applies. We do not currently offer the Services to children under 13. A family subscription is not authorization to create an under-13 profile.

If you believe an under-13 child has provided personal information, contact privacy@joinaligned.ai so we can investigate and take appropriate steps, including deletion where required. We do not sell minors' personal information or use it for targeted advertising or model training. Parents' and teens' access, consent and deletion rights depend on applicable law; this policy does not remove a minor's independent legal rights.

Parental controls, content filters and safety alerts are supplemental tools. They may miss a concern or produce a false alert, and delivery can fail. They do not replace parental supervision, professional care or emergency services. Any future under-13 offering requires its own compliant notices and consent process before collection begins; no future feature or certification is promised here.

We use safeguards designed to protect personal information, including encrypted network connections and account-access controls. No service, device, transmission or storage system is completely secure. Keep your credentials and devices secure and report suspected unauthorized access promptly to support@joinaligned.ai.

This policy does not represent that messages are end-to-end encrypted, that all records are anonymous, or that a particular audit, certification or security control has been completed. We will provide incident notifications when required by applicable law. Nothing here waives our legal security or privacy obligations.

Depending on your location and applicable law, you may have rights to know or access the personal information we hold, obtain a portable copy, correct it, delete it, withdraw consent, object to or restrict processing, limit certain uses of sensitive information, and opt out of sale, targeted advertising or certain significant automated decisions. We do not sell personal information or share it for cross-context behavioral advertising. Faith preferences and other sensitive information are used to provide requested features and for permitted purposes described here.

Use available account controls or email privacy@joinaligned.ai. We may verify your identity and, for an agent or guardian, their authority, without requesting more information than necessary. Where available, an authorized agent may act for you. We do not unlawfully discriminate or retaliate for exercising rights. If we deny a request, we will explain how to appeal where that right applies. You may also complain to the appropriate regulator.

California residents may have rights under the CCPA/CPRA where applicable, including access, correction, deletion, portability, limits on sensitive-information use, and sale/sharing opt-out rights. Sections 1, 2 and 6 explain the categories, sources, purposes and recipients of information; Section 8 explains retention criteria. Other state laws can provide additional rights. Response deadlines, lawful exceptions and extensions depend on the request and jurisdiction; we will provide any required notice of an extension.

Essential account, billing and security notices may continue when you opt out of promotional messages. Use the unsubscribe link for marketing emails where offered. Device notification permissions, memory settings and training preferences are separate controls.

Aligned is based in the United States. Information can be processed in the United States and in locations where our service providers operate. The fact that inference is self-hosted does not establish a particular residency commitment for every data category. A data residency or regulated-processing requirement must be addressed in an express agreement before you submit that information.

If European, UK or other data-protection law applies, the relevant basis for processing depends on the purpose: performing the service contract, legal obligations, legitimate interests such as security and service administration where permitted, or consent where required. Consent to optional processing can be withdrawn without affecting prior lawful processing. Special-category information requires an applicable additional legal condition. Transfers subject to legal restrictions require an appropriate lawful mechanism; this policy alone is not a transfer consent or a representation that a particular contractual safeguard has been executed. Contact privacy@joinaligned.ai about applicable safeguards or to exercise rights.

We may update this policy to describe changes in the Services or our practices. We will identify the effective date and provide notice of material changes, including email notice consistent with our prior commitments. Where law or an existing commitment requires consent, we will obtain it before a materially different use; continued use alone is not consent for model training or another processing purpose requiring express consent. This revision does not authorize retroactive use inconsistent with the notice under which information was collected.

Privacy: privacy@joinaligned.ai

Privacy contact: dpo@joinaligned.ai

Support: support@joinaligned.ai

Mail: GetAligned AI, LLC, Attn: Privacy Contact, 5 Sunwood, Sandy, UT 84092, United States.

You may request a prior policy version through the privacy contact. See also our Terms of Service.