Privacy Policy

Effective Date: August 21, 2026 · Last Updated: August 21, 2026

Align'd Wellness ("we," "us," or "our"), operated by Scalar Labs, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Align'd Wellness mobile application and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

• Name (first name or display name you provide during onboarding)
• Year of birth
• Email address (when you sign in with Google or Apple)

Health and Wellness Data

• Menstrual cycle dates and period tracking data
• Flow intensity and cycle phase information
• Symptoms (cramps, fatigue, bloating, headaches, and others)
• Mood, energy levels, stress levels, and sleep quality
• Health conditions (e.g., PCOS, endometriosis, thyroid conditions)
• Birth control method
• Daily check-in entries and wellness scores
• Diet, skin, and lifestyle impact responses

Device Health Data

With your explicit permission, we may access health metrics from Apple HealthKit or Google Health Connect, including step count, heart rate, and sleep data. This data is read from your device and is never sold or used for advertising.

Device and Usage Information

• Device type, operating system, and app version
• App usage patterns (screens viewed, features used)
• Crash logs and performance data

Location Data

Certain features may request access to your device's location. Location data is processed locally on your device and is not transmitted to our servers unless you explicitly enable cloud synchronisation.

2. How We Use Your Information

We use the information we collect to:

• Provide, personalise, and improve the Service
• Generate cycle predictions and wellness insights tailored to you
• Calculate your Align'd Wellness Score
• Send you reminders and notifications (period predictions, ovulation, daily check-ins) when enabled
• Synchronise your data across devices when you opt in to cloud sync
• Diagnose technical issues and improve app performance
• Comply with legal obligations

We do not use your health data for advertising, marketing to third parties, or any purpose other than providing and improving the Service.

3. Data Storage and Security

Local-First Architecture

Align'd Wellness is designed with a local-first approach. Your data is stored on your device using encrypted local storage (Hive). The app works fully offline, and your data remains on your device unless you choose to enable cloud synchronisation.

Cloud Synchronisation

When you sign in with Google or Apple, your data may be synchronised to our secure cloud infrastructure powered by Supabase. Cloud data is:

• Encrypted in transit using TLS 1.2+
• Stored in secure, access-controlled databases with Row Level Security (RLS)
• Accessible only to you through your authenticated account

Security Measures

We implement industry-standard security measures including encryption, access controls, and regular security reviews. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services to operate the app:

• Google Sign-In — for authentication. Subject to Google's Privacy Policy.
• Apple Sign-In — for authentication on Apple devices. Subject to Apple's Privacy Policy.
• Supabase — for cloud database and authentication services. Subject to Supabase's Privacy Policy.
• Firebase Hosting — for web hosting. Subject to Firebase's Privacy Policy.

We do not sell, rent, or share your personal or health data with any third party for their own marketing or commercial purposes.

5. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service.

• Local data: Stored on your device until you delete the app or clear app data.
• Cloud data: Retained until you request deletion or delete your account.

You can delete all of your data at any time through the app's Settings screen. Upon account deletion, all associated cloud data is permanently removed within 30 days.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Export: Request a portable copy of your data.
• Restrict Processing: Request that we limit how we use your data.
• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, contact us at contact@scalaralabs.com.

7. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland:

• We process your data based on your explicit consent, which you provide during onboarding.
• Health data is classified as special category data under Article 9 of the GDPR. We process this data only with your explicit consent.
• You have the right to lodge a complaint with your local data protection authority.
• We do not transfer your data outside the EEA without appropriate safeguards.

8. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your privacy rights.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at contact@scalaralabs.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Scalar Labs
Email: contact@scalaralabs.com