01 Who we are
Ally (“Ally,” “we,” “our”) is a mobile application developed and operated by Stellar Ally AB, a company incorporated in Sweden. The App is available on iOS and Android at allyguide.app. If you have any questions about this policy, please contact us via chat.
02 Information we collect
Information you provide directly
- Account information — your name and email address, provided through Google Sign-In or Apple Sign-In during registration.
- Birth information — your date of birth, birth time (optional), and birth city. This is used solely to compute your personal blueprint and generate your daily messages.
Information generated by using the service
- Feedback — ratings (thumbs up / thumbs down) and optional reasons you submit on daily messages.
- Consent records — timestamps and version numbers of the privacy policy and terms of service you agreed to.
- Push notification token — a device token used to deliver your daily message notification. We do not include any personal information in the notification payload itself.
Information we do not collect
- We do not collect or store your IP address for identification.
- We do not collect precise GPS location or device sensor data.
- We do not collect browsing history, device fingerprints, or advertising identifiers.
- We do not collect any data for targeted advertising. Ally contains no advertising.
03 How we use your information
- To provide the service — your birth information is used to compute your personal energetic blueprint via a third-party calculation service. Your name and blueprint data are used to generate your daily personalised messages.
- To send notifications — your device token is used to deliver your daily message alert. You can disable notifications at any time in your device settings.
- To manage your subscription — subscription status is managed by your app store. We receive anonymised subscription events to gate access to premium features.
- To improve the service — aggregated, anonymised feedback helps us understand which messages resonate.
- To comply with legal obligations — we retain consent records as required by applicable law.
We do not use your personal information to train AI models. Your birth data is used as input to compute your blueprint; it is never sent to AI models directly. AI models receive only blueprint-derived data (energy type, profile, key traits) — never your name, email, birth date, or birth city.
05 Data retention
- Active accounts — data is retained for the duration of your use of the service.
- Deleted accounts — when you delete your account, your data enters a 30-day grace period during which you can reactivate by signing in again. After 30 days, all data — including your chart, messages, and feedback — is permanently and irreversibly deleted within 90 days. Backups containing your data are also purged within that window.
- Inactive accounts — accounts inactive for more than 12 months may receive a re-engagement notification before being scheduled for deletion.
- Audit logs — system logs are retained for 1 year and contain no personally identifiable information.
06 Your rights
Depending on where you live, you may have the following rights regarding your personal data. You can exercise all of them directly within the app or by contacting us via chat:
- Access — request a copy of all personal data we hold about you.
- Portability — export your data in machine-readable format (Settings → Export Data).
- Rectification — correct or update your birth data at any time (Settings → Edit Birth Details).
- Erasure (“right to be forgotten”) — permanently delete your account and all associated data (Settings → Delete Account).
- Restriction — request that we restrict processing of your data while a dispute is being resolved.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — you may withdraw consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
California residents (CCPA/CPRA)
You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.
EU/UK residents (GDPR/UK GDPR)
Our lawful basis for processing is consent (Article 6(1)(a)). You have the right to lodge a complaint with your local supervisory authority.
We will respond to all requests within 30 days.
07 International data transfers
Ally is operated on Google Cloud infrastructure in the European Union (europe-west3, Frankfurt, Germany). AI and model processing of your blueprint-derived data is performed within the European Union (EU multi-region endpoint) and does not leave the EU. Some data is also processed in the United States by our service providers (see Section 4). Google Cloud, Firebase, and RevenueCat process data under Standard Contractual Clauses approved by the European Commission where required.
08 Children's privacy
Ally is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us via chat and we will delete the account promptly.
09 Security
We use industry-standard safeguards: TLS 1.3 for all data in transit, encryption at rest on our servers, access controls, and regular security audits. Authentication tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore) — never in unprotected storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take every reasonable precaution.
10 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you within the app. Your continued use of Ally after any change constitutes acceptance of the updated policy.
11 Contact us
For privacy questions, data requests, or general support, use the chat widget on this site or in the app. We respond within one business day.