Privacy Policy
Effective 19 August 2026 · Aligned, operated by Creation Theory (ABN 36 846 827 139) · covers alignedapp.tech
The plain-language version first
What you say to Aria is among the most personal data a service could hold. We built Aligned around that fact. We store your sessions to give you a mirror with memory — that is the product — and for no other purpose. We do not sell your data. We do not show you ads. We do not use your sessions to train AI models. We do not record or replay your screen or voice. Nobody reads your sessions except you — with the narrow exceptions listed below, stated plainly.
What we collect
- Account data: your email address and name.
- Session content: the text of your conversations with Aria, your Compass Reports, and Aria's synthesised memory of your journey (Resonance).
- Voice: voice input is transcribed on your device by your browser's built-in speech service (Apple or Google, per your device); we store the resulting text, never audio recordings. Aria's voice is synthesised speech (ElevenLabs); your voice is never cloned or stored.
- Payments: handled entirely by Stripe — card details never touch our servers. We keep records of your credit purchases and use.
- Technical: essential cookies for sign-in only — no advertising or cross-site trackers. Error monitoring (Sentry) is configured to exclude message content and personal identity from error reports.
How we use it
To provide Aligned: running your sessions, generating your reports, carrying your arc forward in Resonance, and sending you the emails the service requires (sign-in links, your Compass being ready). With your explicit choice only: sharing features you initiate — a shared report link, referrals — always opt-in, always yours to trigger.
Who processes it on our behalf
Trusted infrastructure providers, each receiving only what their role requires: Supabase (database hosting, encrypted at rest), Anthropic (the AI model that powers Aria — API terms do not permit training on our data), Vercel (hosting), ElevenLabs (voice synthesis), Stripe (payments), Resend (transactional email), and Sentry (error monitoring, content-stripped). Some of these providers are based overseas, including in the United States.
Who can see your sessions
You. Additionally, the founder-administrator can access session data solely for support and service-integrity purposes (fixing something that broke for you, safety review), under confidentiality. We disclose data if compelled by law, and we would tell you unless legally prevented.
Retention and deletion
Your data is kept while your account is active — the memory is the service. You may request full deletion at any time via hello@alignedapp.tech; we will delete your account, sessions, reports, and synthesis within 30 days, except records we must keep by law (e.g. payment records).
Your rights
You may access, correct, or delete your data, and complain — to us first at hello@alignedapp.tech, and to the OAIC (oaic.gov.au) if we don't resolve it.
Changes
Material changes will be notified in-app or by email before they take effect.