Privacy Policy

1. Introduction

Welcome to Alana AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application ("App"). The App provides personalized spiritual guidance by combining personality type, Human Design, Numerology, and Life Path insights.

By using Alana AI, you agree to the collection and use of information in accordance with this policy.

2. Our Privacy-First Commitment

We believe your spiritual journey should remain private. Unlike many apps, we do NOT track your behavior for advertising purposes. All advertisements in the free tier are generic and non-personalized.

3. Information We Collect

3.1 Personal Information You Provide

• Birth Data: Date, time, and location of birth for astrological and Human Design calculations
• MBTI Assessment Responses: Your answers to personality type questions
• Spiritual Guidance Requests: Questions and prompts you submit to our AI companion
• Account Information: Email address and profile preferences

3.2 Calendar Data (Optional)

When you connect your Google Calendar, we access:

• Event titles, times, descriptions, and locations
• Calendar metadata

Important: We only read your calendar data (read-only access). We never modify, create, or delete calendar events.

3.3 Automatically Collected Information

• Device Information: Device model, operating system version (for compatibility)
• Usage Data: App features used, session duration (for improving user experience)
• IP Address: For security and fraud prevention only
• Crash Logs: Technical diagnostics via Firebase Crashlytics (for bug fixes)

Important: We do NOT collect advertising identifiers (IDFA/AAID) or track your activity across other apps and websites.

4. How We Use Your Information

We use your information to:

• Generate personalized spiritual guidance based on your unique profile
• Calculate astrological transits, Human Design charts, and numerology readings
• Provide AI-powered scheduling recommendations when calendar is connected
• Process and manage your subscription
• Send push notifications for daily guidance (with your permission)
• Improve app functionality and user experience
• Provide customer support
• Display advertisements (free tier) or remove ads (premium subscription)

5. Third-Party Services

Alana AI integrates with the following third-party services. Each has its own privacy policy:

5.1 Google AdMob (Free Tier Only - Non-Personalized Ads)

Purpose: Display generic, non-personalized advertisements in the free version

Our Privacy Approach: We use NON-PERSONALIZED ads only. This means:

• Ads are NOT tailored to your interests or browsing history
• We do NOT track your activity across other apps or websites
• We do NOT collect or share advertising identifiers (IDFA/AAID)
• Ads are generic and based only on contextual factors (time of day, general location)

Data Shared with AdMob: Only basic device information (model, OS version) and app context - NO personal tracking data

Privacy Policy: https://policies.google.com/privacy

Ad-Free Option: Upgrade to premium for an ad-free experience

5.2 RevenueCat

Purpose: Manage in-app subscriptions

Data Shared: Purchase history, subscription status, user ID

Privacy Policy: https://www.revenuecat.com/privacy

Note: RevenueCat processes payments; we never see your credit card information

5.3 Google Calendar API

Purpose: Read calendar events for scheduling guidance (optional feature)

Data Shared: Calendar event data (read-only)

OAuth Scope: https://www.googleapis.com/auth/calendar.events.readonly (read-only access to calendar events; we never modify, create, or delete events)

Privacy Policy: https://policies.google.com/privacy

Access Control: You can disconnect your calendar at any time in Settings

5.4 AI Guidance API

Purpose: Generate AI-powered spiritual guidance for all users

Data Shared: Your questions and your profile — including your name and the personality, Human Design, and numerology results calculated from your birth data — are sent to our AI guidance API

Data Usage: Our AI provider (Google Gemini 2.5 Flash via the Gemini API, paid tier) does not use API data to train their models

Privacy Policy: https://policies.google.com/privacy

API Terms: https://policies.google.com/terms

Safety: All AI output passes server-side safety filtering. Messages indicating self-harm intent receive a static crisis-resource response with local helpline information instead of a generated reply.

5.5 Firebase Cloud Messaging (FCM)

Purpose: Send push notifications for daily guidance

Data Shared: Device push notification token

Privacy Policy: https://firebase.google.com/support/privacy

5.6 Supabase

Purpose: Backend database and authentication

Data Shared: All data stored in the app (encrypted birth data, user profile, preferences)

Privacy Policy: https://supabase.com/privacy

6. Birth Data Encryption

Your birth data is highly sensitive. We protect it using:

• AES-256-GCM Encryption: Your birth data is encrypted on your device before being stored or transmitted
• Key Storage: Your encryption key is stored in an access-restricted record that only your signed-in account can read, so your encrypted data stays usable when you reinstall the app or switch devices
• Encrypted at Rest: Our servers store your birth data only in encrypted form and never decrypt it; decryption happens on your device

Access to both the encrypted data and its key is restricted to your authenticated account by row-level security.

7. Calendar Data Handling

When you connect your Google Calendar:

• Calendar events are accessed in real-time only when you view the Cosmic Calendar feature
• Your raw calendar events — titles, descriptions, attendees and locations — are never stored on our servers. They are held only on your device.
• To serve your daily insights without re-generating them on every visit, we cache anonymized event metadata (a category such as "work" or "personal", a time window, and a duration) alongside the guidance text. This cache contains no titles or descriptions and is deleted with your account.
• Event details are anonymized (only categories, not titles) before being sent to AI providers for scheduling suggestions
• You can disconnect your calendar at any time in app Settings
• Disconnecting immediately revokes our access to your calendar

7.1 Google API Limited Use Disclosure

The use of raw or derived user data received from Google APIs (including the Google Calendar API) adheres to the Google API Services User Data Policy, including the Limited Use requirements. See the Google API Services User Data Policy.

• Google user data is never used to develop, improve, or train generalized AI and/or machine-learning models.
• AI features are powered by the Google Gemini API on its paid tier. Under the Gemini API paid-tier terms, Google does not use API inputs or outputs to improve its products or models.
• Only anonymized event metadata (category, time window, duration — never titles or descriptions) is shared with the AI service.
• We request a single Google Calendar scope, calendar.events.readonly, which is read-only. We never create, modify, or delete your events.

8. Data Retention

• Account Data: Retained while your account is active
• Birth Data: Deleted within 30 days of account deletion
• Calendar Access: Revoked immediately upon disconnection or account deletion
• AI Conversation History: Stored on our servers so your conversations stay available across sessions; deleted when your account is deleted
• Subscription Data: Retained per legal requirements (typically 7 years for financial records)

9. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Data Portability: Export your data in a machine-readable format
• Withdraw Consent: Disconnect calendar, disable notifications, or delete your account

To exercise these rights, contact us at support.alana@alwintru.com. We will respond within 30 days.

10. Age Requirement

Alana AI is intended for users 15 years and older. By using this app, you confirm that you are at least 15 years old. We do not knowingly collect information from minors under 15.

If you are between 15 and 18 years old, you must have permission from a parent or legal guardian to use this app. By using Alana AI, you confirm that you have obtained such permission if required in your jurisdiction.

11. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using Alana AI, you consent to the transfer of your information to these countries.

12. Security

We implement industry-standard security measures including:

• AES-256-GCM encryption for birth data
• HTTPS/TLS for all data transmission
• Row-Level Security (RLS) policies in our database
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date." Continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: support.alana@alwintru.com
• Website: https://alanaai.web.id

Last Updated: August 5, 2026