What leaves ALJA

• Supabase

  Always

  Stores your whole ALJA record and your sign-in, including a log of sign-ins that records your email and IP address. If you sign in with Apple or Google, it also keeps its own copy of what they sent (for Google, your name and a photo link) with that sign-in method, until you remove the method or delete your account. The database is in Canada; sign-in may be handled in the US.

• Vercel

  Each visit

  Runs the app on servers in Montréal, Canada, so it receives each request, including what you log. Its standard server logs record the address of each page you open, which can name a guide or program, but never what you log or write. Requests pass through its worldwide network, which can include the US, and its logs may be kept in the US.

• Anthropic

  Only if you turn on Bestie

  Your first name unless you turn that off, approximate age, set-up and cycle answers, what Bestie remembers, about 14 days of check-ins, the symptoms you picked when you joined (or ranked later) and the ones you logged most often lately, recent food, sleep and movement (with what you call each workout), your plan, what you marked on it and whether it helped, your routines and how many days you ticked each, what you decided at your weekly review, your patterns, and the chat itself. Your notes, including your notes on your plan, only if you allow it. Never a message our self-harm safety rule picked up, and if your name is off, it is replaced with a placeholder in earlier messages too (a name that is also an everyday word, like May or Rose, only where it starts with a capital). Never your email or account ID. Once a day, and when you ask for an update, the last two days of chats, to update what Bestie remembers. In the US. Not used to train its models by default, though it may keep data for a time.

• Resend

  When you join the waitlist, and when we email you

  Your email address, your first name if you gave one, and the emails themselves: address confirmations, password resets, security notices about your sign-in, account and waitlist emails, and The Peri Brief. For the waitlist emails and The Peri Brief it also keeps a list of who gets which. When you delete your account, ALJA asks it to remove you, and tries again if it can't be reached. In the US.

• Stripe

  Only for payments

  Your email, a reference to your ALJA account and your payment details. Your card number goes straight to Stripe; ALJA never sees it. Deleting your account deletes your customer record there, apart from the payment records the law makes it keep. In the US.

• Oura

  Only if you connect it

  ALJA asks Oura only for the categories you chose, over the dates it needs, and Oura sends those readings back. Nothing you log in ALJA is sent to Oura. When you disconnect it or delete your account, ALJA asks Oura to end its access.

• Push services

  Only if you turn on notifications

  The company behind your browser or phone (Apple, Google, Mozilla or Microsoft) delivers each notification, so it learns that ALJA sent your device a message, and when. Browser notifications are encrypted, so it cannot read them. On the ALJA iPhone app, only Apple carries them, never Google: it gets the words on your lock screen and which kind of notification it is, never a symptom or a lesson.

• Apple and Google

  Only if you sign in with them, where ALJA offers it

  They tell ALJA your email and an account ID, and Google also sends your name and a photo link. ALJA removes those from your account as you arrive; our sign-in provider (Supabase) keeps its own copy with that sign-in method until you remove it or delete your account. They learn that you sign in to ALJA, and when. Nothing you log is sent to them. If you delete your account in the iPhone app and use Sign in with Apple, ALJA asks Apple to end it.

• Cloudflare and Shopify

  Only if you visit the old perimenopausebestie.com address

  They see that visit, including your IP address, while sending you on to alja.app. Shopify ran the old store, which is closed. Your use of ALJA itself doesn't pass through either.

• Analytics

  Stays in ALJA

  No outside analytics, session recording or ad trackers. ALJA counts which features are used, in its own database. It never records what you log, but it does note which guide or program you opened, which can hint at a health topic. The alja.app website counts page views, button presses and sign-ups in that database too, by day and page, with no cookie, no IP address and nothing that identifies you.

ALJA never sells your data, never shares your health data with advertisers, and runs no ad trackers.

The Privacy Policy covers these in sections 5.5, 8, 9 and 11.