Alet — Privacy Policy

Effective date: October 20, 2026  •  Operated by EC3 LLC  •  Contact: support@getalet.app  •  Terms of Use

What we store, and where

Everything you put in Alet — your tasks, lists, grocery items, stores, daily mood check-ins and journal notes, and the preferences the app learns about how you organize — is stored locally on your device (in the app's local storage on phones; in your browser's storage on the web). It does not leave your device except through your phone's own backup and as described under "Feedback you send us" and "AI features" below, and through the calendar, maps, and sharing handoffs you choose (see "The services that run the app").

Your phone's own backup. If you have iCloud Backup (iPhone) or Google Auto Backup (Android) switched on, your phone includes Alet's data in that backup (on iPhone, from version 1.3.1 onward — update the app first if you're not sure which you have), the same as it does for your other apps. That copy is held by Apple or Google under their terms, not ours. We never see it, and we can't read, delete or restore it for you. It is what lets your things come back when you set up a new phone from that backup. You control it in your phone's own settings, not in this app: turn the backup off there and no copy goes to Apple or Google. (On Android, a backup can also bring Alet's data back when you reinstall the app on the same phone.)

The app does not require an email address or access your contacts or advertising identifier. If you email support, we receive your email address and the information you send. There are no third-party advertising or tracking SDKs in the app. Alet doesn't track what you do across other companies' apps or websites, and no advertising or tracking company collects that through Alet; because there is no such tracking, Alet doesn't change anything when a browser sends a "Do Not Track" signal. The only location information involved is your country, which RevenueCat notes on the Android and iPhone apps that sell subscriptions (see "Subscriptions and purchases"), and the approximate city and country our host works out from your internet address in its own records (see "The services that run the app"). The only counts we keep about how the app is used are the ones behind the AI and feedback limits (below); the daily visit count, only if it's switched on; and, on the Android and iPhone apps that sell subscriptions, RevenueCat's note of when the app first and last checked, and our subscription totals (see "Subscriptions and purchases"). (The feedback form has an optional name box — if you choose to type a name there, it comes to us with that note and nothing else.)

The app does keep a short local record of errors it has hit — up to the last ten, each holding the error message, the technical trace of where it happened, and which build you were on. This is stored on your device like everything else, and is only ever sent if you choose to send it with feedback (see below).

The app also keeps a short list of your last 20 brain dumps from the past week — what you said and where each thing went — so you can check on something later. It is stored on your device like everything else. If the app is read-only because you have no trial or plan, older brain dumps stay on your phone instead of being cleared (see "Your controls").

AI features

Smart sorting (AI) stays off until you agree. The first time Alet would send your text for AI sorting, it explains what would be sent and to whom, and asks; no text is sent for AI sorting unless you choose Turn on AI sorting. While it's on and you're online, the text you're organizing is sent over an encrypted connection to our backend, which forwards it to OpenAI to sort it: what you add in the top box (typed or spoken) when the app doesn't sort it on your phone, a brain dump you sort with "Sort it out", and words you speak into a list, so they can be split into separate items. Each request also carries your phone's local date and time, so "tomorrow" means your tomorrow. Requests from the top box and from brain dumps also carry your list names and the names of people and places the app has noted, so things land on the right list. We don't attach an account, name or email address. Each request does carry this phone's device tag — a random code the app makes up, not your name or phone number — so we can apply a daily limit per phone. Our server keeps a count of AI requests per tag for up to about a month, and never keeps the text.

• OpenAI processes this text to return a result. OpenAI does not use the API data we send to train its models. It may retain prompts and responses in abuse-monitoring logs for up to 30 days by default, with longer retention in circumstances described in its data-controls documentation. To answer similar requests faster, OpenAI may also keep an encrypted, processed form of a request for a short time, as its prompt-caching documentation describes.
• You can turn AI sorting off in Settings (Smart sorting (AI)). With it off, your text is not sent for AI sorting. Local organizing features work offline, subject to the subscription access described below.
• We do not keep a copy of this text on our servers — our backend simply passes it through.

Feedback you send us (and error details)

If you send us feedback from the app (Settings → Send feedback), what you write or say is sent to our backend so we can read it, along with the optional name you may type in the form, a randomly generated device identifier (also shown as your Support code), your platform and the build you're on. Nothing is sent unless you tap Send.

• If the app has hit an error since you last told us about one, the note can also carry the technical details of that error — the message, the trace of where in the code it happened, and the build. This exists so a bug you hit can actually be found and fixed.
• You are told before it happens: a line above the Send button says how many errors will be included, you can tap Show details to read exactly what would be sent, and Don't include them deletes them instead.
• The app may offer to collect feedback after it has hit an error ("Something glitched earlier — want to tell us what happened?"). It asks once, and declining is final for those errors.
• These details are about the app, not about you: they are not designed to carry your tasks, lists or notes, and we don't want them to. Because an error message is written by the code that failed, we can't promise a fragment of text you were working on could never appear in one — which is the other reason you can look before you send.
• Feedback is kept in our feedback store, and a copy is emailed to our support inbox (see "Data retention" for how long, and how to have yours deleted). We use feedback to provide support and improve Alet, with the service providers described below. We do not sell it or use it for advertising.

A daily visit count (only if it's switched on)

If Count my visits is on (Settings → Your stuff & your data), then once a day — the first time you open the app that day — your phone tells our server two things: which week it started counting, and how many days it has been since then. Our server adds one to a running total for that week and day, and one to a running total for today. That is all it keeps: totals, like "12 phones opened the app today" or "8 of the phones that started the week of September 28 came back the next day."

• It does not send your device tag, your tasks, or anything you've written, and it doesn't send the time of day. The stored visit totals do not identify individual devices. Requests also pass through our hosting provider, whose logging is described below.
• If your phone is offline, that day simply isn't counted.
• Turn it off and your phone stops sending it straight away. Counts already added stay in the totals, because there's no way to pick yours out.
• It starts switched on for new installs, and you can switch it off any time. If the app was already on your phone before September 28, 2026, it stays off unless you switch it on. Reinstalling the app, or clearing its data, counts as a new install, so it starts switched on (unless your phone restores Alet's data from its own backup, which brings back the setting you had).
• We use these totals only to see whether people keep using the app. They're never sold or used for advertising.

Subscriptions and purchases (RevenueCat)

On the Android and iPhone apps that sell subscriptions, the app uses RevenueCat to know whether you have a free trial or a plan. RevenueCat keeps the subscription records for us. Its privacy policy is at revenuecat.com/privacy, and it says it uses this information only to provide its service to us. What goes to RevenueCat:

• A random id RevenueCat makes up for the app on this phone. It is not your name, your phone number or your device tag.
• Your Support code (the same code as your device tag — see "The services that run the app" below), so we can find your record if you ask us for help or we give you free access.
• Your purchase history from Google Play or the App Store: the store's record of each purchase, which plan, when it started and when it renews, whether it is a free trial, cancellations, refunds, payment problems, and what you paid.
• Your phone's type, operating system, language and currency, the app's version, your country (from the store's record, or worked out from your internet address, under RevenueCat's own retention rules), and when the app first and last checked.

It is sent when the app starts or you come back to it, when you open Settings or the screen where you subscribe, and when you start a trial, subscribe, or tap Restore purchases. This happens even if you never subscribe: your record then shows no purchase.

• It does not include your tasks, lists, notes, name, email, contacts or precise location. Google or Apple takes the payment; we never see your card or other payment details.
• We can see your record in RevenueCat, and totals like how many people subscribe. Because your Support code is on it, a Support code you send us can be matched to your purchase history.
• The app keeps RevenueCat's random id and a copy of your subscription status on your phone, so a plan you have keeps working when you are offline.
• To delete it, write to the address below with your Support code (Settings → Help & feedback → Support code; note it down before you uninstall: it is kept only in the app's storage on your phone, so uninstalling removes it, and it comes back only if your phone restores Alet's data from its own backup) and we will delete your RevenueCat record. While the app is installed, RevenueCat starts a new record the next time the app checks, and a subscription that is still running can start one too. To have none, cancel the subscription and uninstall the app (after Download my data) first. Google or Apple keep their own record of your purchase under their terms.
• Access codes (Android only). If you type an access code we gave you (Settings → Subscription → Have an access code?), the app sends that code and RevenueCat's random id to our server, which asks RevenueCat to give that phone free access for 30 days. We do not log the code you type or include it in the email. The id is kept for two days in a temporary redemption counter (in Upstash) that counts how many phones the code unlocks. We receive an email, sent through Resend, with the id and the end date; it is kept like our other support email (see "Data retention"). The free access is also recorded on your RevenueCat record, which we delete on request as described above.
• Versions of the app that don't sell subscriptions — the web version, the iPhone app until subscriptions come to it, and test versions that don't sell them — never contact RevenueCat.

Permissions we request

• Microphone — only when you tap the mic to speak a task. Your phone's own speech service (Google's on Android, Apple's on iPhone) turns your speech into text, and it may do that on that company's servers under its own terms. We never receive or store audio — only the text comes back to the app.
• Calendar — only if you choose to add a task to your device calendar.
• Notifications — to send the gentle reminders you opt into. These are scheduled on your device.

The services that run the app

Everything the app sends to our backend travels over an encrypted (HTTPS) connection.

• Vercel hosts our backend. Like any web host, it records the internet (IP) address and time of each request. Those logs are kept for a short time under Vercel's log-retention policy, then deleted. Vercel also keeps its own records of this traffic (the internet address and the approximate city and country it points to) under its own privacy policy. Vercel's option to use our data to train AI models is switched off for our account.
• Upstash stores the counts behind the AI and feedback limits, the visit totals, feedback notes, and the two-day access-code counter.
• Resend emails us feedback notes so we see them quickly. Resend retains email and log data for 30 days. Its backups have a seven-day retention period (Resend's data retention; privacy policy).
• Expo delivers app updates. To check for one, the app sends Expo your phone's operating system, the app's version, and a random install code Expo uses to tell which phones have the latest update. If the app crashed while starting the last time, or an update failed to load, that check also sends Expo the error message and when it happened. Like any web request, each check also reaches Expo with your internet address. Expo's terms with us let it use this information only to provide, develop and improve its services, and it handles these checks under its own privacy policy.
• RevenueCat runs our subscriptions, on Android and on iPhone — see "Subscriptions and purchases" above.
• Your device tag is also the Support code in Settings. If you send it to us, we can match it to feedback you've sent, to the counts behind your AI and feedback limits, and — on the Android and iPhone apps that sell subscriptions, which also send it to RevenueCat — to your subscription record. Nothing else is stored against it.
• Opening a place in a maps app, adding a task to your phone's calendar, sharing something through your phone's share sheet, or opening a link hands that item to the other app, which follows its own privacy terms.

Vercel, Upstash, Resend, OpenAI and RevenueCat are each bound by their terms with us to use your information only to provide their service to us and not to sell it, which gives it the same or equal protection this policy describes; where a provider keeps records for its own operations, this policy says so under that provider's name. Expo's use is limited by its terms as described in its entry above.

Our backend runs in the United States. The other companies named above may also process information in other countries where they or their providers operate, under their own policies. If you use Alet from outside the US, your information is processed in the United States and may be processed elsewhere.

Sensitive information

Your tasks and notes are free text and may include personal details (medications, children's names, schedules, moods). Because this data stays on your device, you control it. If you choose to use the AI features, the text you're organizing is sent to OpenAI as described above — so avoid putting information there that you don't want processed by an AI service.

Your controls

• Tasks: complete, edit, or move to Trash (then restore or permanently empty it).
• Lists, stores, learned preferences, and mood/journal check-ins are each viewable and deletable in Settings.
• Download my data exports everything as a file you control; Import restores it.
• Recent brain dumps can be read and cleared in Settings (Clear this list).
• Recorded error details can be read on the Send feedback screen (Show details) and deleted there (Don't include them). They are also dropped automatically once they've been sent, and only the last ten are ever kept.
• Your subscription (on the Android and iPhone apps that sell subscriptions): Settings → Subscription shows your plan. Manage subscription opens Google Play or the App Store to change or cancel it; Restore purchases finds a subscription you bought on another phone. Your RevenueCat record is deleted on request (above).
• Without a trial or plan (on the Android and iPhone apps that sell subscriptions), the app is read-only. You can still read everything, use Download my data, switch Count my visits on or off, delete error details, send us feedback, and tap Restore purchases. You can't edit, delete, clear or import anything in the app until a plan is active again. While it's read-only, brain dumps older than a week aren't cleared: they leave the list but stay on your phone, and Download my data includes them. Uninstalling still removes the app's data from your device (next point).
• To remove everything, uninstall the app (on the web, clear the site's data). That deletes all of Alet's data on your device, on Android and iPhone alike. A copy in your phone's own backup stays with Apple or Google (see "Your phone's own backup"), a file you saved with Download my data stays where you saved it, and tasks on your phone's calendar (ones you added, or ones Put timed things on my phone calendar put there) stay where they are. To have your RevenueCat record and any feedback you sent removed too, note your Support code before you uninstall (Settings → Help & feedback → Support code), then write to the address below with it (see "Subscriptions and purchases").

Data retention

Your tasks and notes are stored locally: we do not keep them on our servers, and they stay on your device until you delete them, clear the app's storage, or uninstall. Text you send for AI sorting is not stored by us either — it is passed straight through and the result comes back to your phone. If that result comes back unreadable, our error log records a scrambled fingerprint of the AI's answer and its length; if it runs too long, the length of what you sent — never the words themselves, on either path. We do keep a few things. Feedback you chose to send us (with any error details attached to it) is held so we can act on it, in two places: our feedback store, which keeps the most recent 1,000 notes from everyone (older notes drop off as new ones arrive), and the email copy in our support inbox, which is kept while we're working on the issue it raised, then deleted, or sooner on request. Separately, Resend, which sends that email to us, keeps its own copy for 30 days (and in its backups for 7 days more), then deletes it. Write to the address below with your Support code if you'd like yours removed, and we will delete it from our feedback store and our support inbox; Resend's copy is deleted on that schedule. Visit totals contain no content and no device tag, and are kept for about 13 months. The counts per device tag behind the AI and feedback limits expire within about a month. An access code's redemption counter is kept for two days. Your subscription record at RevenueCat is kept while we use RevenueCat to run subscriptions, unless you ask us to delete it.

Children

Alet is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has provided personal information to us, contact support@getalet.app.

Changes

If this policy changes, we'll update it here and revise the effective date above.

• 2026-10-20 — said what the companies that run the app are bound to by their terms with us, and how Expo's terms limit it; described Vercel's own traffic records, the internet address that reaches Expo with each update check, Resend's 30-day retention and how long our support inbox keeps an email; and added what an access code sends (Android only).
• 2026-10-18 — added subscriptions: on the Android app from Google Play (version 1.4.0 and later), and on iPhone once Alet sells subscriptions there, the app checks your subscription with RevenueCat. Described what goes to RevenueCat (a random id, your Support code, your purchase history, your phone's type and system, the app's version, your country), what you control in Settings → Subscription, what still works without a trial or plan, how to remove everything, and how to have your record deleted. The Expo item now says an update check can also send the error message from a failed start. The AI section now says the app asks before the first AI sort, which captures it sends and what goes with them, and how long OpenAI may keep requests; feedback is described as kept in our feedback store and our support inbox, with deletion from both; the device identifier, what happens on reinstall, Do Not Track and how to tell us about a child's information are described. Where the services that run the app process information is now described (our backend runs in the United States), and what the app sends to our backend as encrypted (HTTPS); how long our host and Resend keep their logs, and what RevenueCat keeps of your internet address, now follow each one's own policy; and the calendar, maps and sharing handoffs you choose, and the internet addresses in our host's logs, are now named where this policy says what leaves your device and what location is kept. This policy moved to getalet.app/privacy, and the contact address is now support@getalet.app.
• 2026-10-02 — added Recent brain dumps: a short list, kept on your device, of your last 20 brain dumps from the past week. Nothing new leaves your device.
• 2026-09-28 — added the optional daily visit count; described the device tag sent with AI requests, how your phone's speech service works, your phone's own backup, and the services that run the app (hosting logs, update checks, email and storage).
• 2026-09-05 — the retired "Plan my day" feature and the facts it learned are no longer described (that data is no longer sent or kept); Terms of Use published and linked; feedback is sent from Settings → Send feedback (wording only — what is sent is unchanged). Data retention now states exactly what the error log keeps when the AI's answer comes back unreadable or too long — a scrambled fingerprint and a length, never the words (the app stopped writing that text to the log the same day).
• 2026-09-04 — operator identified as EC3 LLC; contact address updated.

Contact

Questions about privacy: support@getalet.app.