Privacy Policy

Effective date: May 12, 2026

Alune ("the App") is a personal productivity and wellness companion built by Ahmed Diab. Your privacy is fundamentally important to us.

On-Device Data

Everything you create in Alune is stored on your device using Apple's SwiftData framework and is not uploaded to any server. This includes:

• Habits and habit logs
• Goals and milestones
• Journal entries (text, mood, energy, tags)
• Notes
• Medicine and supplement schedules and dose logs
• Reading log items and categories
• Saved memories the Assistant can reference
• App settings and preferences

Calendar events and reminders are managed by iOS itself through Apple's EventKit framework. Alune reads from and writes to the calendars and reminder lists you grant access to. The data lives in your iOS Calendar and Reminders, not on Alune's servers.

Data Sent to Servers

Certain features require network communication. When you use these features, limited data leaves your device as described below. You are asked to confirm AI usage in-app before any Assistant chat or voice transcription request is sent.

• AI Assistant (text): When you send a message to the AI assistant, the text of your conversation is transmitted over HTTPS to Alune's secure server-side proxy hosted on Supabase. The Supabase proxy forwards the request to OpenRouter, which routes it to Google's Gemini Flash model for processing. When the Assistant uses tools to answer your question, items it explicitly fetches (such as the title and time of a calendar event, the text of a journal entry, a note, a habit, a goal, a medicine schedule, or a reminder you ask about) are included in the request. No personally identifiable information beyond the text you type and the item content the Assistant pulls is attached, and nothing else from your device is sent automatically. Assistant requests are routed exclusively to providers with Zero Data Retention agreements. Neither Alune, our Supabase proxy, OpenRouter, nor the routed AI provider retains your prompts after processing. The only data stored on Alune's servers is a per-user anonymous request counter used to enforce daily limits.
• Memory privacy: If the Assistant pulls memories you have saved (the small "remember this" notes shown in Settings), every personal name, place, organization, and email address in them is replaced on your device with anonymous placeholder tokens (for example, "Sara" becomes "[P1]") before the request leaves the device. The model never sees the original values.
• Voice transcription: When you use the voice input feature, your audio recording is transmitted over HTTPS to the same Supabase proxy, which forwards it to ElevenLabs (Scribe v2) for speech-to-text conversion. Audio is processed under our Zero Retention Mode agreement with ElevenLabs. Audio input and the resulting text are deleted immediately after the request completes and are not used for model training. Alune does not retain audio or transcripts on its servers either.
• Subscription management: Alune uses RevenueCat to manage in-app purchases and subscriptions. RevenueCat receives your anonymous App Store purchase receipts and a randomly generated anonymous user identifier to verify subscription status. No personal data such as your name or email is shared with RevenueCat. See RevenueCat's Privacy Policy.

Third-party AI providers

The third-party services that process content on Alune's behalf are listed below. Alune does not sell or share your data with anyone for advertising or training. Alune uses these providers only where their processing commitments provide protection equivalent to this policy for the data they receive, including encrypted transport, no advertising use, no model training on your AI request content, and the zero-retention or no-retention commitments described above:

• OpenRouter, AI request routing for the Assistant. OpenRouter receives Assistant text and model-visible tool results routed through the Supabase proxy.
• Google, runs the Gemini Flash model that powers Assistant replies. Google receives the Assistant request routed through OpenRouter.
• ElevenLabs, runs the Scribe v2 model for voice-to-text. ElevenLabs receives microphone audio only when you use voice input.
• Supabase, hosts the request-routing edge functions for AI chat and voice transcription and stores only anonymous request counters used to enforce daily limits.

Device Permissions

Alune may request the following permissions, each used solely for the stated purpose:

• Calendar & Reminders, to display your schedule and create events or reminders on your behalf.
• Microphone, to enable voice dictation so you can speak instead of type.
• Notifications, to send local habit reminders at times you choose. No push notifications are sent from any server.

You can revoke any permission at any time in iOS Settings.

AI Assistant Limits

• Free trial: If you do not have an active subscription or AI add-on, you may send a limited number of Assistant messages (shown in the app) as a one-time trial. After that, Assistant requires a qualifying purchase.
• Pro subscribers: Assistant is included with up to 150 chat messages and 300 voice transcriptions per day (or the limits shown in the app).
• We may adjust daily limits for security, stability, or fair use. Current limits are always described in the app.

Third-Party Services

Alune does not integrate any advertising, analytics, or tracking SDKs. No cookies or fingerprinting technologies are used. The only third-party services are those described above (AI processing via OpenRouter, voice via ElevenLabs, and subscription management via RevenueCat).

Data Retention & Deletion

All personal data (habits, goals, journal entries, notes, medicine logs, and reading lists) is stored exclusively on your device. Alune does not maintain any server-side copy of this data.

• Delete all data: To delete all your data, simply delete the Alune app from your device. All locally stored data will be removed immediately.
• AI conversations: Message text sent to the AI assistant is routed only through providers with Zero Data Retention agreements and is not retained after processing. Conversation history stored on your device is deleted when you delete the app.
• Voice recordings: Audio sent to ElevenLabs for transcription is processed under our Zero Retention Mode agreement and deleted immediately after each request. Alune does not store audio on its servers.
• Subscription data: Anonymous purchase receipts held by RevenueCat are subject to RevenueCat's data retention policy. You may contact RevenueCat directly to request deletion of your anonymous receipt data.

To request deletion of any data associated with your use of Alune, contact us at alunesupport@gmail.com.

Children's Privacy

Alune is not directed at children under 13. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. Any changes will be reflected in the app with an updated effective date.

Contact

If you have questions about this policy, please contact us at alunesupport@gmail.com.

© 2026 Ahmed Diab. All rights reserved.