Privacy policy

What stays on your device

Your health data. Doses you log, weight entries, side effects, and the compounds and schedules you set up are stored locally on your phone. They are never stored on our servers, and we cannot read them.

iCloud backup. On iOS, Aloft can keep a backup of your data in your own iCloud storage so you can restore it on a new phone. That backup lives in your private iCloud account, under your Apple ID. It never touches our infrastructure.

Apple Health and Health Connect. If you choose to connect them, Aloft reads and writes weight entries in the health store on your device. Nothing from Apple Health or Health Connect is sent to us.

What we collect

Account data. Aloft works without an account. If you create one to protect your data, we store your email address, or the identifier Apple provides if you use Sign in with Apple.

Onboarding answers. A small set of your setup answers, such as goals, age, biological sex, goal weight, and reminder preference. These personalise the app and let you restore your setup on a new device. They never include your compounds, doses, or schedule.

Purchase data. Your subscription status and plan, so the app knows what you've paid for. Payments themselves are processed by Apple or Google; we never see your card.

Technical data. Device type, OS version, app version, and crash reports. The minimum needed to keep the app working on your phone.

Usage analytics. Which screens and features are used, so we know what to improve. Analytics events never contain health values: no dose amounts, no weights, no symptoms, and never the names of custom compounds you add.

Ad attribution. If you allow tracking when iOS asks, we use standard attribution tools (such as Apple's SKAdNetwork and AdServices) to learn which ad brought you to Aloft. If you decline, we don't.

What we don't collect

We don't collect location, contacts, or photos. We don't run ads in the app, we don't sell data, and we don't use SDKs that profile you across other apps. Your health entries are not visible to us at all.

How we use what we collect

• Keep your account working and restore your setup on a new device.
• Deliver reminders you asked for. Reminders are scheduled locally on your phone, not pushed from a server.
• Fix crashes and improve the features people actually use.
• Understand, in aggregate, which marketing works.

Who we share it with

Only the processors we need to run the service: Google Firebase for sign-in, our database, analytics, and crash reporting; RevenueCat for subscription management; Apple and Google for billing; and our attribution provider for ad measurement. Each is contractually bound to use your data only for these purposes.

Your rights

You can export everything from the app at any time: Settings → Export gives you your full history as JSON or CSV. You can delete your account and server data directly in the app, or through our account deletion page. We honour requests within seven days.

Retention

We keep account data for as long as your account is active. If you delete your account, we remove personal data within seven days. Aggregate, non-identifying usage data may be kept longer to improve the service.

Age

Aloft is for adults. You must be at least 18 to use it.

Changes to this policy

If we make a material change, we'll note it here and in the app before it takes effect.

Contact

Privacy questions? Write to privacy@tryaloft.com.