Privacy Policy

• You can use Alisi without an account. If you do, your sessions stay on your device and we never receive them.
• Your answers to the health questions never leave your phone. Not to us, not to analytics, not to a backup.
• We do not sell personal data, and we do not share it with advertisers or data brokers.
• We show no advertising in the app, so nothing here is collected to target ads at you.
• You can delete your account and everything attached to it from inside the app, or from a page on this website.

The rest of this document is the detail behind those five points. We have tried to write it so you can actually read it.

Alisi is operated by [LEGAL ENTITY], [REGISTERED ADDRESS], company number [COMPANY NUMBER], telephone [CONTACT PHONE]. Under the UK and EU GDPR we are the controller of the personal data described here. You can reach us at privacy@tryalisi.com.

Some of this is law and some of it is our own line. Either way, these are commitments, not aspirations:

• We will not sell your personal data, and we will not share it with data brokers.
• We will not use anything about your breathing, your sessions, your mood check-ins or your health answers for advertising, marketing or profiling. Apple Guideline 5.1.3 prohibits this for health data and we apply the same rule to everything in the app.
• We will not make a paid feature conditional on you granting a permission you would rather not grant. Everything you pay for works with Apple Health, notifications and analytics all switched off.
• We will not put safety information behind a login, a paywall or a network request.

Your answers to the health questions — whether you are pregnant, have a heart condition, have epilepsy, faint easily and so on — are stored only on your phone. They are never transmitted to us, never included in analytics, and never synced to your account even if you have one. They exist so the app can decide which exercises to offer you, and for nothing else.

If you use Alisi without an account, the same is true of everything else: your session history, your streak, your breath-hold times and your settings are all held in the app’s local storage on your device. Deleting the app deletes them.

An account is optional. Its only purpose is so your history survives a lost phone and follows you to a new one. If you create one, we hold:

• Account identifiers — your email address, or an identifier from Sign in with Apple or Google. Sign in with Apple can hide your real address from us and we support that.
• Session records — which exercise, when you did it, how long it lasted, whether you finished, and your breath-hold durations if you practise retention.
• Check-in answers — the optional before-and-after taps on how you feel.
• Programme progress — which multi-week programme you are on and how far through it you are.
• Diagnostic data — crash reports and performance measurements, aggregated and not tied to your identity.

We do not ask for your name, your date of birth, your address or your phone number, because we do not need them.

Some of what an account holds is health data under the GDPR — most clearly your mood and stress check-ins, and your breath-hold times. We treat all session data as health data rather than arguing about the edges.

That means we rely on your explicit consent to process it, asked separately from your acceptance of the Terms, and you can withdraw it at any time from Profile without losing access to the app. Withdrawing consent stops the syncing; it does not delete what is already on your own device.

If you turn on Apple Health or Health Connect, Alisi writes your mindful minutes to your health record on your device. It is a one-way write: we do not read anything back, and nothing from your health record is sent to our servers. It is entirely optional and every paid feature works without it.

We measure how the product is used — which screens people open, whether sessions get finished, whether onboarding works — so we can make it better. This is behavioural data about the app, not physiological data about you.

The distinction is enforced in code rather than by policy. Our analytics layer refuses to send a defined list of properties, including breath-hold durations, check-in answers, stress and energy ratings, health-screening answers and email addresses. If a developer tries, the call throws.

ALISI Plus is billed by Apple or Google, not by us. We never see your card number or your billing address. We receive a signed receipt telling us whether your subscription is active, which is all we need to unlock the paid features.

We use a small number of service providers, and each one only receives what it needs:

• Supabase — hosts the database and handles sign-in, for accounts only.
• RevenueCat — validates subscription receipts across both app stores.
• PostHog — product analytics, configured to exclude the properties listed above.
• Apple and Google — payment processing, crash reporting and app distribution.
• Our website host — serves tryalisi.com and processes beta signups.

Each is bound by a data processing agreement and may only act on our instructions. None of them is permitted to use your data for their own purposes. We do not use ad networks, attribution SDKs or customer data platforms that feed advertising audiences.

Some of our providers process data outside the UK and EEA, primarily in the United States. Where that happens we rely on the UK and EU Standard Contractual Clauses, or on an adequacy decision where one applies. You can ask us for a copy of the relevant safeguards.

• Account and session data — for as long as your account exists, then deleted within 30 days of you deleting the account.
• Diagnostic and crash data — 90 days.
• Analytics events — 24 months.
• Beta signup emails — until launch, or until you ask us to remove you, whichever comes first.
• Records we must keep by law, such as tax records of a purchase — for the period the law requires, and nothing beyond it.

If you are in the UK or the EEA you have the right to access your data, correct it, delete it, restrict or object to how we use it, take it elsewhere in a portable format, and withdraw consent at any time. If you are in California or another US state with a privacy law, you have comparable rights, including the right not to be discriminated against for exercising them. We do not sell or share personal data as those laws define it, so there is nothing for you to opt out of.

To exercise any of these, email privacy@tryalisi.com. We will respond within 30 days. You do not need an account to make a request, and we will not charge you.

If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to [SUPERVISORY AUTHORITY] or to your local data protection authority, and you do not need our permission to do so.

In the app: Profile → Account → Delete account. It asks you to confirm, then removes your account and everything attached to it. There is no "deactivated" state and no grace period during which we quietly keep it.

If you have already uninstalled the app, you can request the same thing from tryalisi.com/account-deletion without reinstalling anything.

Deletion removes your account, session history, check-ins and programme progress within 30 days. It does not cancel an active subscription — Apple and Google control that, and you need to cancel it in your store account or you will keep being billed.

Alisi is not intended for children. You must be at least 16 to create an account, or older where your country sets a higher age for consenting to data processing. We do not knowingly collect data from children; if you believe a child has given us data, email privacy@tryalisi.com and we will delete it.

tryalisi.com sets no advertising or tracking cookies. If you join the beta list we store the email address, sport and platform you give us, and use them only to tell you when the app is available.

If we change this policy in a way that materially affects you, we will tell you in the app before the change takes effect, and where the law requires it we will ask for your consent again rather than assuming it. The date at the top always reflects the current version.

Privacy questions: privacy@tryalisi.com. Anything else: hello@tryalisi.com.