Privacy Policy

Last updated: April 29, 2026

This Privacy Policy explains how Ally (“Ally”, “we”, “us”, or “our”) collects, uses, stores, and discloses your information when you use the Ally mobile application and related services.

1. Information We Collect

We may collect the following categories of information:

• Account information, such as your name and email address, as well as authentication identifiers.
• Body and wellness data that you voluntarily log inside the app, including weight measurements, menstrual cycle data, activity (steps, workouts), and food-related episodes (cravings, breakdowns, eating patterns).
• In-app responses and questionnaire answers that you voluntarily provide in order to receive personalized app content and interpretations.
• Nutrition data, only if you explicitly connect a third-party tracker (e.g., FatSecret) — in which case we receive aggregated daily nutrition entries (calories, protein, carbs, fat, fiber).
• Technical information, such as device-related data, app diagnostics, usage logs, and basic metadata required for security and service performance.
• Subscription and transaction-related information, where applicable, such as entitlement status or purchase validation data received through platform services.

The body, cycle, activity, and food-episode information you provide inside the app constitutes health-related personal data. We process such information only to provide the app’s core functionality requested by you, and only for the purposes described in this Privacy Policy.

2. How We Use Your Information

We use your information to:

• create and manage your account;
• authenticate you and keep the app secure;
• process your in-app answers and generate personalized responses;
• provide, maintain, improve, and troubleshoot the app;
• manage subscriptions, access rights, and related support requests;
• comply with legal obligations and enforce our terms.

3. Legal Bases for Processing

Depending on your location, we may process your information on the following legal bases:

• Performance of a contract — to provide the app and its requested features to you.
• Consent — where you voluntarily provide certain information, including health-related responses, for personalized app output.
• Legitimate interests — for security, fraud prevention, diagnostics, and service improvement, where permitted by law.
• Legal obligations — where processing is required to comply with applicable law.

4. Third-Party Service Providers

We use third-party providers that process information on our behalf, including:

• Supabase — for database, authentication, and backend infrastructure.
• Anthropic (Claude Haiku model) — your in-app responses, body and wellness data are sent to Anthropic for the sole purpose of generating personalized insights and content shown back to you inside the app.
• FatSecret — only if you explicitly connect this nutrition tracker. In that case, your nutrition diary entries are received from FatSecret and used to enrich your weekly insight; we do not share any of your other data with FatSecret beyond the OAuth identifiers required to read your diary.
• Apple and Google — where applicable, for sign-in, purchases, platform services, and app distribution.

Purpose of transfer to Anthropic / FatSecret: generation of personalized insights about your body, cycle, activity and eating patterns. The data sent to Anthropic is the minimum necessary to produce the requested insight.

Your data is not used to train AI models. Per our agreements with Anthropic, your inputs and outputs are processed only to generate responses to you and are not used to train, retrain, or fine-tune any AI model. Likewise, we do not sell your personal information to any third party.

5. Data Storage and International Transfers

Your information may be processed and stored on servers operated by our service providers in countries other than your own. By using the app, you understand that your information may be transferred internationally, subject to reasonable safeguards and contractual protections where applicable.

6. Data Retention

We retain your information for as long as your account remains active, so that the app can keep delivering personalized insights based on your history. If you stop using the app but do not delete your account, your data continues to be stored until you initiate deletion.

If you delete your account, we will delete your personal information within a reasonable period, except where we must retain certain data for legal, security, fraud prevention, billing, backup, or compliance purposes.

7. Account Deletion

You can delete your account — and all associated body, cycle, activity, food-episode and nutrition data — directly from the app: open the Profile screen and tap “Delete account”. Deletion is performed by our backend service and removes your records from all relevant tables.

You may also request deletion by contacting us at support@allybody.app.

Please note that limited information may be retained where necessary for legal compliance, security, fraud prevention, technical backup cycles, or legitimate business recordkeeping.

8. Your Rights

Depending on your location, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing in some circumstances;
• lodge a complaint with a relevant data protection authority.

9. Children’s Privacy

Ally is not intended for children under the age of 13, or under a higher minimum age where required by local law. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided us with personal information, please contact us so we can review and delete it where appropriate.

10. Security

We use reasonable administrative, technical, and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Medical Disclaimer

Ally is an informational and wellness-support tool only. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for consultation with a qualified healthcare professional. If you believe you may be experiencing a medical emergency, seek professional medical care immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last updated” date above. Your continued use of the app after changes become effective means you acknowledge the updated Privacy Policy.

13. Contact

If you have questions about this Privacy Policy or your data, contact us at: support@allybody.app