Privacy Notice

• Account data — email address, name, authentication identifiers (including Google sign-in). Used to create and secure your account. Legal basis: performance of our contract with you.
• Content you create — goals, journal and gratitude entries, scripting text, vision board images and voice notes, language and personalization answers. Used to provide the service and sync it across your devices. Legal basis: contract.
• AI prompts and outputs — the inputs you send to AI features and the generated results. Used to produce your letters, stories, goals and reflections. Legal basis: contract.
• Usage and device data — app interactions, feature usage counters, device identifiers, IP address and error logs. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
• Support messages — what you write to us. Used to answer you. Legal basis: legitimate interests.
• Marketing emails — only if you opt in. Legal basis: consent, withdrawable at any time.

• Merchant of Record — Paddle.com handles the sale, subscription management, payments, tax compliance and invoicing. Payment card details are collected and processed by Paddle, not by us.
• Service providers / subprocessors — cloud hosting, database and authentication, and the AI model providers that process your prompts to generate results.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

We do not sell your personal data.

Some of our providers are located outside the EEA/UK. Where data is transferred, we rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary safeguards.

We keep account and content data for as long as your account is active. After you delete your account, data is deleted or anonymised within 30 days, except where we must keep records longer for legal, tax or accounting reasons. Usage logs are kept for a shorter period.

Under the GDPR you can request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent at any time. Write to support@aldven.app and we'll respond within one month. You can also complain to your local supervisory authority (in Italy, the Garante per la protezione dei dati personali).

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage at rest with our hosting provider, and row-level access controls so each account can only reach its own data.

ALDVEN uses only essential cookies and browser local storage — to keep you signed in, remember your language, and cache your entries for offline use. We do not use advertising or third-party tracking cookies. You can clear this data at any time in your browser settings or from the app's Settings screen.

ALDVEN is not intended for children under 16.