AIlignLegal

Privacy Policy

Updated October 27, 2026

What AIlign collects, how it is used, who processes it, and the choices you have.

Who is responsible

AIlign is operated by N8tive Flow LLC, a Texas limited liability company. Contact us at n8tiveflowai@gmail.com about privacy, data access, correction, deletion, or consent. This policy covers the AIlign app and ailign.us. Our separate Consumer Health Data Privacy Policy explains health-data categories, sharing, and rights.

Account and information you provide

Firebase Authentication handles account credentials, including email/password or Apple sign-in. We store your account identifier and profile information. You may provide your name, age, interests, goals, preferences, daily routines, tasks, projects, calendar information, conversations, reflections, and memories used to personalize AIlign. Information you type may include sensitive health or other personal information. Avoid sharing passwords, payment-card numbers, government IDs, or information about others without permission.

Health, nutrition, and fitness records

We process information you choose to enter or connect: age, height, weight, nutrition goals, foods and meals, meal photos, calorie and nutrient estimates, exercise preferences, gym names or locations you tell us, available equipment, workout plans, preferred training days, booked classes, session notes, effort ratings, sets, repetitions, loads, duration, distance, and completion records. If you tell AIlign about an injury, condition, pregnancy, or other limitation, that information can be stored in your conversation and personalization context. You do not need a watch to enter workouts manually.

We also generate estimates and inferences, such as BMI, calorie targets, movement or sleep-duration scores, trends, workout summaries, and an interpretation of an evening reflection as a mood value from 1 to 5. These are software estimates, not diagnoses or independently measured facts.

Apple Health: what we read and write

Apple Health is optional. With the permissions you grant in iOS, AIlign can read steps, active and resting energy, exercise minutes, walking/running distance, flights climbed, heart rate, resting heart rate, sleep records, body weight, and workouts. It uses these readings to display health information and trends and support the features you request. With write permission, AIlign can save weight and workout entries back to Apple Health.

Not every reading displayed on your phone is copied to our servers. The current cloud summary includes the day, steps, active energy, exercise minutes, sleep duration, weight, and a calculated activity score. This summary, along with saved nutrition and fitness records, can be included in AI requests as described below. You can control read/write categories in Apple Health or iOS Settings. Turning permission off stops future access to the denied categories; it does not automatically delete information already saved in AIlign or already sent to a provider.

AI processing and the information sent

AIlign uses Anthropic's Claude API for chat, routine conversations, food/photo analysis, and AI planning. Requests can include your message or selected image, relevant conversation history, onboarding answers and preferences, saved memories, tasks, projects, schedule information, reflections, food records, the cloud health summary described above, your fitness profile and plan, booked classes, and recent tracked sessions. These requests are processed by Anthropic outside your device to provide the requested response or action.

The app presents an AI-sharing disclosure and agreement step. Apple Health permission is separate from permission to send information to an AI provider. This policy is a disclosure, not a substitute for an affirmative consent where one is required. Do not use AI features if you do not want relevant saved information included. Contact us to request withdrawal of AI-sharing consent and deletion of saved context; while that request is pending, stop using AI features. There is currently no separate in-app switch that excludes only health context from AI requests.

Anthropic states that inputs and outputs from its commercial API are not used to train its models by default. Its retention, security monitoring, legal exceptions, and any service-specific terms still apply; processing is not a promise of immediate deletion or zero retention. See Anthropic's commercial training policy and API retention information.

Photos and camera access

You can choose an image or use the camera for chat or food analysis. The selected image is sent to Anthropic for analysis. Chat photos are sent with the current request and are not uploaded as a persistent AIlign photo archive; descriptions and resulting conversation text may remain in your history. When you save a scanned meal, its photo may be uploaded to Firebase Storage and linked to the saved meal. Those meal photos are retained separately from the text food log. Contact us to request deletion of uploaded meal photos, including after deleting your account. AIlign does not need unrestricted access to your entire photo library.

Calendar and notifications

With permission, AIlign reads calendars you select to understand available and busy time. Calendar names, event times, and titles you separately choose to share can be saved to your account and included in AI context. AIlign can write its supported events and planned day blocks to Apple Calendar and sync supported edits. Current tasks and habits are not exported to Apple Reminders; older builds may still have requested Reminders access.

AIlign schedules notifications and routine reminders based on your settings. Evening reminders may use iOS Time Sensitive delivery, subject to your device settings. Notification text and Live Activities may appear on your lock screen. You can control these permissions in iOS Settings. Denying a permission limits the related feature.

Usage information and service logs

We record account-linked product activity: app opens and whether they came from a notification, link, or app icon; screen/feature use; milestones such as onboarding, chat, routine completion, a completed task, or a logged meal; notification permission and sent/opened counts; and app version/build. Delivery counts may be estimated. We use these records to understand app performance, subscriptions and retention, improve features, and evaluate reminders. A server-generated estimate of next-day return likelihood is also stored with account activity.

These product-usage records are stored in Firebase and viewed through our internal tools; they are not sent to an advertising network or separate third-party product-analytics SDK. Counts showing use of a health feature can themselves reveal health-related activity. Hosting and infrastructure providers may also process IP addresses, request timestamps, device/browser details, and technical logs to deliver and secure the service. AIlign does not collect GPS routes or use location permission for fitness tracking.

Subscriptions and referral links

Apple handles App Store payments; we do not receive your full card details. RevenueCat processes your AIlign account identifier, purchase and renewal events, and subscription/entitlement status so we can unlock paid features and support purchases. Purchase and referral records may also be retained in backend records outside your main account record.

When configured, Detour by Software Mansion supports invite links and install attribution. It can process referral identifiers, link clicks, device/network and installation signals to connect an invite to an install and attribute a reward. Clipboard-assisted matching is enabled in the current configuration; iOS may request paste permission or display a paste notice. Refusing paste access may reduce matching accuracy. We do not send your conversations, meals, Apple Health readings, or workout records to Detour or RevenueCat for these features. See Detour's SDK privacy documentation and RevenueCat's privacy policy.

How we use and share information

We use information to operate your account, personalize requested plans and conversations, record and display your activity, sync selected integrations, deliver reminders, manage subscriptions and referrals, provide support, diagnose problems, and protect the service. Authorized personnel may access information when necessary for support, service operation, or security.

Service providers include Google Firebase for authentication, databases, cloud functions and stored meal photos; Anthropic for AI requests; Apple for device integrations, sign-in and purchases; RevenueCat for subscriptions; and Detour for referral attribution. They receive the information needed for their functions, as described above. Health and fitness content is processed by Firebase and, when used as AI context, Anthropic, and written to Apple Health when you direct and permit it. We do not supply that content to payment or referral providers.

We do not sell personal or consumer health data, share it for cross-context behavioral advertising, or use Apple Health information for advertising or marketing. We may disclose information when legally required, to protect legal rights or safety where permitted by law, or in a merger, financing, reorganization or sale subject to applicable protections. A business transfer does not authorize a new health-data purpose or override a required consent. We have no affiliates receiving consumer health data.

The website and external links

Our website hosting provider receives the technical information needed to serve pages and maintain server logs. The legal pages load fonts from Google Fonts, which means your browser makes a request to Google with technical information such as your IP address. External links, including the App Store, social profiles and AI-cited sources, have their own privacy practices. Web-search queries generated through Anthropic may include details from your request. Avoid putting sensitive information into a lookup request; we cannot guarantee that a generated search query will omit every personal detail.

Storage, retention, and security

Account records and saved content are stored using Google Firebase, with access controls intended to restrict access to the appropriate account and authorized service operations. Some settings and cached information are also stored on your device. Service providers may process information in the United States and other locations where they operate. No storage or transmission method is completely secure.

We generally keep saved account content while your account remains active or until it is deleted. Uploaded meal photos are stored separately and currently require an email deletion request. We may retain limited purchase, referral, security, support, or legal records where needed to meet legal obligations, resolve disputes, prevent fraud, or establish rights. Providers may retain their own transaction records, logs or backup copies under their applicable terms and legal obligations. We do not promise that deleting an account instantly erases every provider copy.

Your controls and privacy requests

You can edit supported profile fields and records in the app, control Apple Health/calendar/camera/photo/notification permissions in iOS, and delete your AIlign account from Settings. Account deletion removes your Firebase sign-in account and the Firestore account record and its subcollections, including saved conversations and fitness sessions. It currently does not automatically remove separately uploaded meal photos or every purchase/referral record; email n8tiveflowai@gmail.com to request deletion of those records as well. We may verify your identity before acting.

Deleting an AIlign record does not necessarily delete a copy already written to Apple Health or Apple Calendar, and deleting the app or account does not cancel an App Store subscription. Manage those copies and subscriptions through Apple. Revoking a device permission does not erase previously synced cloud information; request deletion from us if that is what you want.

Depending on applicable law, you may have rights to confirm processing, access or obtain a copy, correct information, request deletion, withdraw consent, and appeal a denied request. Email the address above, describe the request, and identify the account without sending unnecessary sensitive information. For an appeal, use the subject “Privacy appeal.” We will respond as required by applicable law and will not unlawfully discriminate against you for exercising a protected privacy right. Health-specific rights and complaint information appear in the Consumer Health Data Privacy Policy.

Children and teenagers

AIlign is not intended for children under 13 or anyone below the applicable minimum age where they live. Users under 18 require parent or guardian permission and supervision. We do not knowingly collect information from children under the minimum age. If you believe this has happened, contact n8tiveflowai@gmail.com so we can investigate and remove the information as required. The 13+ general policy is not a statement that every health or nutrition feature is appropriate for a teenager.

Changes and contact

We will update the date when this policy changes. For material changes, we will provide notice as required by law. A revised policy does not by itself authorize a materially different use of previously collected health data or replace a required consent. Contact N8tive Flow LLC, Texas, at n8tiveflowai@gmail.com.