01

Who we are

ALYND is operated by Builder of All Things LLC ("ALYND," "we," "us"), a Hawaiʻi limited liability company. PO Box 700639, Kapolei, HI 96709, USA. Privacy questions: allthingsnewhi@gmail.com.

02

What we collect

• Account information: name, email address, sign-in credentials (or your Apple/Google sign-in token), profile photo, relationship details you choose to add (e.g., anniversary).

• Pairing information: the connection between your account and your partner's account, created when you both choose to pair.

• Content you create: heartbeats (your selected energy, feeling, need, optional context and notes), messages, photos, videos, voice notes, journal recordings, journey responses, story posts, and places you choose to save.

• Subscription information: your subscription status. Payments are processed by Apple (in-app) or Stripe (web gifts) — we never receive or store your card number.

• Device & usage information: device type, OS version, app version, crash reports, and basic feature-usage events used to keep ALYND working and improve it.

03

What we deliberately do NOT do

• No ads. ALYND contains no advertising and no ad-tracking SDKs.

• No selling or renting your personal data. Ever.

• No location tracking. ALYND never tracks or records your location in the background. The only location feature is places you manually choose to save to your shared map; the app requests location permission only if and when you use that feature, and you can decline it and still use ALYND fully.

• No content in notifications. Push notifications are designed to be content-free (e.g., "A heartbeat arrived") — your words and feelings do not appear on lock screens.

04

Who sees your content

ALYND is built for two. Content you send or share (heartbeats, messages, photos, story posts, shared places) is visible to your paired partner — that's the product. Two things are even more private:

• Your journal is visible only to you. Journal recordings are sealed to your account; your partner cannot view them unless you both explicitly choose to exchange them through the in-app Day 21 exchange feature.

• Private notes and drafts marked private stay private to you.

Our team does not read your messages or watch your journals in the ordinary course of business. Limited, logged access by authorized personnel may occur only where necessary to comply with law, enforce our Terms, or debug a specific problem you report to us.

05

Service providers (our processors)

We use a small set of infrastructure providers to run ALYND. They process data on our behalf under contract and may not use it for their own purposes:

• Supabase / Amazon Web Services — database, authentication, and encrypted storage (data encrypted in transit and at rest).

• Stream — real-time messaging infrastructure for chat.

• Apple & RevenueCat — in-app subscription processing and entitlement management.

• Stripe — web gift purchases.

• Sentry — crash and error reporting.

• Mapbox — rendering the map for places you choose to save.

06

How long we keep data

Your content is kept while your account is active so your shared history works as intended. Some data is retained for shorter periods by design (for example, certain media is subject to automatic retention limits). When you delete specific content, it is removed from the product and purged from active systems; residual copies in encrypted backups expire on a rolling schedule (up to 35 days).

07

Your controls

• Export: use "Export my data" in Settings to receive a copy of your data.

• Delete: "Delete account" in Settings permanently deletes your account, content, and stored media. This also removes your side of shared content from your partner's view where applicable.

• Unpair / pause: you can pause or disconnect a partnership at any time in Settings.

• Permissions: camera, microphone, photos, notifications, Face ID, and location are each optional and requested only in context; you can change them anytime in iOS Settings.

08

Legal bases & your rights

We process your data to provide the service you request (contract), to keep it secure and working (legitimate interests), and with your consent where required (e.g., optional permissions). Depending on where you live (including the EEA/UK under GDPR and California under CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. We honor these requests through the in-app tools above or at privacy@alynd.app. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

09

Security

Data is encrypted in transit (TLS) and at rest. Access is restricted by row-level security so accounts can only reach their own couple's data. Media lives in private storage accessed through short-lived signed links. We engage independent security testing, and we maintain a vulnerability disclosure process at security@alynd.app. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you as required by law.

10

Children

ALYND is for adults. You must be at least 18 years old to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

11

Not a medical or crisis service

ALYND is a relationship and communication tool. It is not therapy, counseling, or a medical or mental-health service, and it is not monitored for crisis situations. If you or someone you know is in crisis, contact local emergency services, or in the U.S. call or text 988.

12

Changes & contact

If we make material changes to this policy, we'll notify you in the app before they take effect. Questions: allthingsnewhi@gmail.com.