Privacy Policy

Effective date: May 4, 2026 · Last updated: May 4, 2026

Ally is built on the principle that your personal data belongs to you. We collect only what we need to provide the service, we never sell your information, and we give you full control to access or delete it at any time.

1. Who We Are

Ally ("Ally," "we," "our") is a mobile application available on iOS and Android, operated at allyguide.app. If you have any questions about this policy, please contact us at [email protected].

2. Information We Collect

Information you provide directly

Account information — your name and email address, provided through Google Sign-In or Apple Sign-In during registration.
Birth information — your date of birth, birth time (optional), and birth city. This information is used solely to compute your personal blueprint and generate your daily messages.

Information generated by using the service

Feedback — ratings (thumbs up / thumbs down) and optional reasons you submit on daily messages.
Consent records — timestamps and version numbers of the privacy policy and terms of service you agreed to.
Push notification token — a device token used to deliver your daily message notification. We do not include any personal information in the notification payload itself.

Information we do NOT collect

We do not collect or store your IP address for identification.
We do not collect precise GPS location or device sensor data.
We do not collect browsing history, device fingerprints, or advertising identifiers.
We do not collect any data for targeted advertising. Ally contains no advertising.

3. How We Use Your Information

To provide the service — your birth information is used to compute your Human Design blueprint via a third-party calculation service. Your name and blueprint data are used to generate your daily personalised messages.
To send notifications — your device token is used to deliver your daily message alert. You can disable notifications at any time in your device settings.
To manage your subscription — subscription status is managed by your app store (Apple App Store or Google Play). We receive anonymised subscription events to gate access to premium features.
To improve the service — aggregated, anonymised feedback helps us understand which messages resonate.
To comply with legal obligations — we retain consent records as required by applicable law.

We do not use your personal information to train AI models. Your birth data is used as input to compute your blueprint; it is never sent to AI models directly. AI models receive only blueprint-derived data (energy type, profile, active gates) — never your name, email, birth date, or birth city.

4. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers, and only to the extent necessary to operate the app:

Google LLC (Google Cloud / Vertex AI) — our cloud infrastructure and AI provider. Your birth data is sent to a third-party Human Design calculation API hosted on our backend; AI models receive only anonymised blueprint data. Data Processing Terms.
Astrology API (astrology-api.io) — receives your birth date, birth time, and birth city to compute your Human Design bodygraph. No other personal data is shared.
RevenueCat, Inc. — manages in-app subscriptions and purchases. RevenueCat receives an anonymised user identifier; your name and email are not shared. RevenueCat Privacy Policy.
Google Firebase (Cloud Messaging) — delivers push notifications via device token only. No personal data is included in notification payloads.

We may also disclose information if required by law, court order, or to protect the rights and safety of our users.

5. Data Retention

Active accounts — data is retained for the duration of your use of the service.
Deleted accounts — when you delete your account, your data enters a 30-day grace period during which you can reactivate by signing in again. After 30 days, all data — including your chart, messages, and feedback — is permanently and irreversibly deleted within 90 days. Backups containing your data are also purged within that window.
Inactive accounts — accounts inactive for more than 12 months may receive a re-engagement notification before being scheduled for deletion.
Audit logs — system logs are retained for 1 year and contain no personally identifiable information.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal data. You can exercise all of them directly within the app or by contacting us at [email protected]:

Access — request a copy of all personal data we hold about you.
Portability — export your data in machine-readable format (available in-app via Settings → Export Data).
Rectification — correct or update your birth data at any time (Settings → Edit Birth Details).
Erasure ("right to be forgotten") — permanently delete your account and all associated data (Settings → Delete Account).
Restriction — request that we restrict processing of your data while a dispute is being resolved.
Objection — object to processing based on our legitimate interests.
Withdraw consent — you may withdraw consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.

EU/UK residents (GDPR/UK GDPR): Our lawful basis for processing is consent (Article 6(1)(a)). You have the right to lodge a complaint with your local supervisory authority.

We will respond to all requests within 30 days.

7. International Data Transfers

Ally is operated on Google Cloud infrastructure, primarily in the United States. If you are located outside the US, your information is transferred to and processed in the US. Google Cloud processes data under Standard Contractual Clauses approved by the European Commission where required.

8. Children's Privacy

Ally is intended for users aged 18 and over. In the European Union, the minimum age is 16. We do not knowingly collect personal information from anyone below these ages. If you believe a child has created an account, please contact us at [email protected] and we will delete the account promptly.

9. Security

We use industry-standard safeguards: TLS 1.3 for all data in transit, encryption at rest on our servers, access controls, and regular security audits. Authentication tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore) — never in unprotected storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take every reasonable precaution.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you within the app. Your continued use of Ally after any change constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests:
[email protected]

For general support:
[email protected]