| Data type | Stored? | Where |
|---|---|---|
| Message text you decode or import | ✓ Yes | Firebase — your private vault (decode history + imported-conversation excerpts + derived summaries), so future analyses remember the relationship; visible only to you; deletable anytime |
| Analysis result (EQ score, flags, headline) | ✓ Yes | Firebase — user's private vault, ~2 KB/entry |
| Relationship context (relationship goal, contact name) | ✓ Yes | Firebase — private to that user's UID |
| Chat context scan (aggregated patterns from export) | ✓ Yes | Firebase — private to that user's UID |
| Shared professional profile | ✓ If created | Firebase — read-only token, user-revocable |
| Email / name | ✓ If provided | Firebase Auth — optional, account recovery only |
| Wearable health data (HRV, sleep, cycle) | ✓ If connected | Firebase — private to that user's UID, encrypted |
| Usage analytics | ✓ Anonymous | PostHog EU cloud — no PII, no message content |
ALYGN is designed around a core privacy principle: only the user's own patterns ever feed their EQ profile, their stats, or anything they share — never the other person's. When a message exchange is analysed, the derived EQ signals describe the behaviour of the person using the app. If a user imports a conversation, its text (both sides) is stored as private memory in their own vault so future analyses have context — it is never shared, never surfaced to anyone else, and never mixed into another user's data.
This means a clinician viewing a shared profile sees their client's communication tendencies — not raw conversations or named third parties.
ALYGN uses Firebase Anonymous Authentication by default — no email or login required. Each device receives a random UID (e.g. uid_7f3a...) which is used as the partition key for all stored data. Users can optionally link an email or Google account to persist their data across devices.
Firebase security rules ensure that each user can only read and write to their own data path (/userVaults/{uid}/*). Server-side rules are enforced at the database level, not just at the client — a compromised client cannot access another user's vault.
When a user chooses to share a profile with a clinician or coach, they:
/shareTokens/{token}Share tokens expire automatically after 90 days. The token contains only the aggregated profile snapshot — no raw messages, no third-party names, no full conversation history.
Message analysis is performed via the Google Gemini API (paid tier). The message text is transmitted to Google's servers solely to generate the analysis; under the Gemini API paid-tier terms Google does not use it to train or improve its models, and may retain it only briefly for abuse monitoring under those terms. ALYGN's AI layer keeps nothing beyond producing the response. Conversations the user imports (a chat export, a pasted email exchange, or an email they forward to their personal ALYGN import address) are processed the same way and only at the user's request. The result and the analysed text are then stored in the user's own private Firebase vault — the decoded text becomes their history, and imported-conversation excerpts become private memory so future analyses remember the relationship. This data lives only in the user's space, is visible only to them, and is deletable at any time (see §7).
ALYGN does not use your data to train any AI models, and will not do so without explicit opt-in consent.
User data is retained as long as the account is active. Users can delete their account and all associated data from Settings → Delete account. Deletion is permanent and propagates to Firebase within 24 hours. Shared profile tokens are also deleted on account deletion.
Anonymous accounts (no linked email) that have been inactive for 12 months may be purged automatically.
ALYGN is designed to be compatible with GDPR requirements for EU users. We act as data controller for user vault data and data processor for any data shared in professional contexts. Data Processing Agreements (DPAs) for enterprise and clinical deployments are available on request at legal@alygn.me.
ALYGN is a self-reflection and communication tool, not a medical device (not classified as SaMD under EU MDR / FDA). It does not generate clinical diagnoses and should not be used as the sole basis for clinical decision-making.
In the event of a data breach affecting personal data, we will notify affected users and relevant supervisory authorities within 72 hours as required by GDPR Article 33. Security issues can be reported to security@alygn.me.
For organisations deploying ALYGN across teams or clinical practices, we offer:
Contact enterprise@alygn.me to discuss your requirements.