Privacy Policy

Aly is operated by Djasha Tech FZE(“Aly”, “we”, “us”), which is the data controller for the personal data described here. This policy explains what Aly collects, why, who can see it, and how to make us forget it. It applies to the Aly mobile apps for iOS and Android, and to this website. If anything here is unclear, email [email protected] and a human will answer.

1. What we collect

Account information

Aly uses email-based authentication. When you create an account we store your email address, your display name, and basic account records (such as when the account was created).

Household data — the things you tell Aly

• Food preferences, dislikes, allergies, and dietary restrictions;
• profiles you create for household members, including children and pets;
• meals you logged, swipes, matches, ratings, and notes;
• messages you send to Aly in chat.

Usage and diagnostics

We collect analytics events (for example: which screens are used, whether a swipe session ended in a match). These are used to improve the product. We do not sell this data, and we do not run advertising.

2. The shared household memory — read this one

Aly is built around a memory shared between partners. When you pair with a partner, information you add to the household — preferences, family member profiles, meal history, and facts you tell Aly in chat that concern the household — becomes visible to your partner, and information they add becomes visible to you. This is the product working as designed, not a leak; but it means you should not tell Aly anything about the household that you would not want your partner to see. Messages framed as private notes to Aly are still stored within your household’s account.

3. AI processing (Google Gemini)

Aly’s intelligence runs server-side. To generate answers, your chat messages and relevant household context (such as food preferences, allergies, and recent meals) are sent to our servers and processed with Google’s Gemini API. This means the content you share with Aly is processed by Google as our service provider, under our API agreement with them. We do not use your data to train our own models. Please don’t include information in chat that you wouldn’t want processed this way.

4. Where your data lives

Your data is stored in our cloud database (currently hosted on Supabase infrastructure) and is encrypted in transit. Access is limited to your household through authentication, and to us only for operating and debugging the service.

5. Purchases and subscriptions

Aly’s paid plans (Aly Plus and Aly Family) are billed by the store you bought them from — the Apple App Store or Google Play. We never see or store your card number or payment credentials; the stores handle payment entirely. To know which plan your household is on, we use RevenueCat as our subscription-management processor: RevenueCat receives your purchase history and subscription status from the store, linked to your account identifier, and shares that status with us. That is the only financial information we hold — what plan you have, not how you paid for it.

6. Retention and deletion

We keep your data for as long as your account exists. You can delete individual memories, meal entries, and household members at any time inside the app — deletion is honored, not soft-hidden in the product.

You can delete your entire account from inside the app (Us → Settings → Delete account). Account deletion removes your personal data from our production systems within 30 days; residual copies in encrypted backups expire on their own schedule shortly after. If you were paired, facts you contributed to the shared household memory are removed as part of deletion.

If you no longer have the app installed, you can request account deletion by email: write to [email protected] from the email address on the account. The same 30-day erasure window applies.

7. Your rights

You can access and correct your data directly in the app. For a copy of your data, or for any request you can’t complete in the app, email [email protected]. Depending on where you live (for example the EU/EEA, UK, or California) you may have specific legal rights to access, portability, correction, and erasure; we honor these requests regardless of geography.

8. Children

Aly accounts are for adults and teens 13 and up. Parents and guardians may add profiles about their children (like “Jake — allergic to peanuts”); by doing so you confirm you’re authorized to share that information. Children do not have their own accounts.

9. Recipe submissions and the newsletter

If you submit a recipe through the website, we store the dish, your name, and the email address you provide. Your name is publishedalongside the recipe if it’s approved. Your email is never published — we keep it privately, only to contact you about that submission. If a submission isn’t approved, we delete the email address tied to it. We also store the submission’s sending IP address, kept only for abuse control.

If you sign up for the recipe newsletter, we store the email you gave us and where you gave it (for example, the recipe library page). We don’t share this list outside Aly, and we don’t use it for anything beyond occasional emails about new recipes. To unsubscribe or have your email deleted from either list, write to [email protected].

10. Not medical advice

Aly remembers allergies and health notes to make better dinner suggestions. It is not a medical device and its suggestions are not medical advice. Always verify ingredients yourself where allergies are involved.

11. Changes

If this policy changes in a way that matters, we’ll tell you in the app before the change takes effect — not bury it in a changelog.

12. Contact

Aly is operated by Djasha Tech FZE · [email protected]