Privacy Policy

Effective 26 October 2026

1. Who we are

Aliigned (“Aliigned”, “we”, “us”) is a personal goal-tracking and reflection application available at app.aliigned.co, operated by Toni Grunwald. For any questions about this policy or your data, contact us at toni@dayzeros.com.

2. Information we collect

Account information. When you create an account we collect your email address and, if you sign in with Google, your name, email address, and profile picture as provided by your Google Account.

Content you create. Goals, tasks, projects, habits, journal entries, reflections, check-ins, and similar content you enter into Aliigned is stored so the service can function.

Calendar data. If you choose to connect Google Calendar, we access calendar and event data as described in section 3.

Technical data. We process basic technical information (such as IP address and browser type) as part of operating and securing the service. We do not run third-party advertising or cross-site tracking.

Product analytics. We record which features you use — a named event such as “goal created” or “check-in completed” — and how you move through the app, using PostHog, described in section 6. We never receive the content you wrote: text and images are masked in your browser before anything is sent. To recognise you across visits, PostHog stores an identifier in your browser’s local storage and a cookie on this site only. This is first-party and is not used for advertising or to follow you to other sites.

3. Google user data

Google sign-in. If you sign in with Google, we receive your name, email address, and profile picture to create and identify your account. We do not access any other data from your Google Account through sign-in.

Google Calendar. If you connect Google Calendar, Aliigned requests only the following scopes, and uses each solely for the stated purpose:

• Calendar list (read-only) — calendar.calendarlist.readonly: read the list of calendars in your account, once at connection time, so you can choose which calendar Aliigned syncs with. We never modify your calendar list.
• Events — calendar.events: read events on the calendar you chose so Aliigned can show your day alongside your goals and tasks, and create, update, or delete events when you schedule or reschedule items from within Aliigned. Aliigned does not have access to your calendar settings, sharing rules, or access-control lists, and cannot create or delete calendars.
• Email address — userinfo.email: label the connected account in the interface so you can tell which Google account is linked.

Calendar data is used only to provide these features to you. It is not used for advertising, not sold, and not used to train AI models. It is not shared with third parties except (a) the service providers that host Aliigned’s infrastructure (section 6) and (b) our AI provider, only when you ask the Aliigned coach to plan your day and only in the limited form described in section 5. You can disconnect Google Calendar at any time in Aliigned’s settings or by revoking access in your Google Account permissions. Disconnecting deletes the stored access and refresh tokens.

Aliigned’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

We use your information solely to:

• provide, maintain, and improve the Aliigned service;
• authenticate you and keep your account secure;
• send service-related notifications you have enabled;
• respond to your support requests.

We do not sell personal data and we do not use it for third-party advertising.

5. AI features

Aliigned includes optional AI features (such as the coach and reflection analysis). When you use them, the relevant content (for example a journal entry or check-in you ask to be analysed) is sent to our AI provider, Anthropic, to generate the response. Anthropic processes this content on our behalf, only to provide the feature, under its commercial terms and data processing addendum, which do not allow it to train its models on it.

Google Calendar and AI. The coach never receives the titles, descriptions, attendees, locations or any other details of your Google Calendar events. When you ask it to plan your day, it learns only which times are free: the times your calendar is busy are simply left out. Those free times are used only to write the reply. No other Google user data is sent to AI models, and none is used to train them.

6. Storage, security and service providers

Your data is stored with Supabase (database, authentication, and file storage) and the application is hosted on Vercel. Data is encrypted in transit (TLS) and at rest by these providers. Transactional email is delivered via Resend. These providers process data only on our behalf to operate the service.

We use PostHog (EU region) for product analytics, to understand which features are used and where people get stuck. PostHog receives a small set of named events — for example that a goal was created or an onboarding step was completed — together with your user ID, email address and name so we can tell accounts apart. Analytics is disabled entirely in demo mode.

We also record how the app is used — the pages you visit, where you click and scroll, and how long steps take — so we can see where people get stuck. These recordings are masked in your browser before anything is sent: all text is replaced with masking characters and all images with placeholders, so your journal entries, reflections, goals and check-ins can never be read by us. Input fields are masked the same way. Recordings are deleted after one month.

7. Retention and deletion

We keep your data for as long as your account exists. If you delete your account, or ask us to delete it by emailing toni@dayzeros.com, your personal data and content are deleted from our production systems within 30 days, except where retention is required by law. Disconnecting Google Calendar deletes the stored access and refresh tokens.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data. You can exercise these rights by contacting toni@dayzeros.com.

9. Children

Aliigned is not directed at children under 16, and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email, and the effective date above will be updated.