Privacy Policy

The short version

• We store your account email and the goals, habits, logs and reflections you write. Nothing else.
• Only you can read your record. The database refuses to return one person’s rows to another.
• No advertising, no data brokers, no third-party analytics, no model training on your content.
• You can export everything, and you can delete everything.

What we collect

Account information

Your email address, an encrypted password, the display name you chose at sign-up, and the timestamps of your account’s creation and last sign-in. This is handled by our authentication provider — we never see or store your password in a readable form.

The record you create

Your goals and their milestones and intentions, your habits and their cadences, every habit you log, your reflections, and the achievements your record has unlocked. This is the substance of the product, and it is stored so we can give it back to you on your next visit.

What we do not collect

No advertising identifiers, no cross-site tracking, no third-party analytics scripts, no location data, and no contacts. There is no behavioural profile of you anywhere in this system.

Cookies

Alite Growth sets cookies for one purpose: keeping you signed in. They hold your session so that each page you open knows it is you. There are no advertising or analytics cookies, so there is no consent banner to dismiss — these are strictly necessary for a service you asked to use. Clearing them signs you out.

Your browser also keeps a local copy of your record so the app works instantly and keeps working if your connection drops. That copy is scoped to your account and stays on your device. Signing out on a shared computer and clearing site data removes it.

Where your data lives

Your record is stored with Supabase, our database and authentication provider, and the site is served by Vercel. Both act as processors on our behalf and are bound by contract to handle your data only as we instruct.

Isolation between accounts is enforced by the database itself, through row-level security policies tied to your user id — not by application code that could forget to check. A signed-in person cannot request another person’s record, however the request is formed.

Why we are allowed to hold it

• To perform our contract with you. Storing your record and signing you in is the service you asked for.
• Our legitimate interests. Keeping the service secure and working, and preventing abuse.
• Legal obligation. Where we are required to retain something, for as long as we are required to.

How long we keep it

For as long as your account exists. Delete your record from Settings and it goes immediately. Close your account and everything attached to it is removed, with backups ageing out within 30 days.

Your rights

You can access, correct, export, delete and restrict the processing of your data, and object to it. Most of this is a button in the product: Settings exports your entire record as JSON and erases it on request. For anything else, email cs.alitecompany@gmail.com and we will act within 30 days.

Depending on where you live, you may also have the right to complain to your local data protection authority. We would appreciate the chance to put things right first.

Children

Alite Growth is not directed at children under 16. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

When this policy changes materially we will update the date at the top and let account holders know by email. Past versions are available on request.

Contact

Privacy questions go to cs.alitecompany@gmail.com. Our Terms & Conditions cover the rest of the agreement.