ALIGN.AI legal
Privacy policy
What we collect, why we collect it, who touches it, and how you take it back. In plain language, because that's the only kind we write.
Last updated: 23 July 2026
Reviewed 23 July 2026. Independent legal review is planned before public paid launch. This document reflects how the product genuinely works today.
Who we are
The company behind ALIGN.AI
ALIGN.AI is a product of Jodie Hayward Ltd, a company registered in England and Wales with company number 13644297, whose registered office is at Arnant, Pontsian, Llandysul, Ceredigion, SA44 4UD. The service lives at https://align.jodiehayward.com.
For the purposes of UK data protection law, Jodie Hayward Ltd is the data controller for the personal data described in this policy. Any question about your data goes to support@jodiehayward.com, and a human will answer.
What we collect
The data ALIGN.AI holds
Account details. Your name and email address, collected when you sign up through Clerk, our authentication provider.
Your conversations.Everything you write to ALIGN.AI, and the transcriptions of any voice notes you send, whether they're transcribed as you speak or after you finish. Conversations are stored so the product remembers you and the reflection builds over time instead of resetting every session.
Files you upload. Images and documents you choose to share with the product, such as a screenshot of a dashboard.
Structured records. The working picture the product maintains for you: your profile and foundational memory, focus areas, business reads, to-dos, patterns, your daily cards, the wins you log, and the weekly letters it writes you. Your foundational memory is yours to read and edit directly in the app.
Payment data.Held by Stripe, our payment processor, and never by us. We don't see or store your card details.
Feedback. Anything you submit through the feedback feature.
Waitlist email. If you join the waitlist, we store your email to tell you about ALIGN.AI... nothing else, and one click unsubscribes you. Our lawful basis is your consent, given when you submit the form.
How we use it
Why we process your data
We use your data to provide the service you're paying for: to run your conversations, keep your records, remember your context, and bill your subscription. Under UK GDPR, our lawful basis for this is contract... we can't deliver ALIGN.AI without it.
We also use your data for safety monitoring and product improvement, such as reviewing how the product handled a conversation it flagged. Our lawful basis for this is legitimate interests: keeping the product safe and making it better, in ways you'd reasonably expect from a service like this. As part of that, we keep anonymous, topic-level statistics about the questions the product couldn't answer well... never your words, never linked to you... so we can improve what it knows.
Where the law requires your consentfor a specific use, we'll ask for it clearly at the time and you'll be free to say no.
We don't sell your data. Ever. The one advertising-related use that exists, the Meta Pixel measuring which pages you visit, runs only with your consent through the cookie banner, and it never touches your conversations or anything you tell ALIGN.AI inside the product.
Who processes it
The providers that power ALIGN.AI
Eight providers process data on our behalf, each for one clear job:
Anthropic generates the AI responses in your conversations and the weekly letters.
OpenAI transcribes your voice notes (including live, as-you-speak transcription) and creates the embeddings that let the product retrieve relevant content.
Railway hosts the application and the database where your data lives.
Clerk handles authentication: signing you up, signing you in, and keeping your session secure.
Stripe handles payments and holds your card details so we never do.
Notion receives the feedback you choose to send through the feedback feature, and the anonymous topic-level statistics described above, so a human can act on them. It never receives your conversations.
Meta Platformshandles advertising measurement. With your consent through the cookie banner, its pixel sees which pages you visit here. And when you sign up or start a trial, and only if you've said yes to advertising in the banner, our server sends Meta a confirmation of that one event with your email address hashed beyond recognition, so we can measure whether our ads work. It never sees your conversations, under any setting.
Google Analytics handles site analytics, only with your consent through the cookie banner, and only ever sees how the site is used... never anything from inside the product.
One thing worth stating plainly, because it matters: none of these providers train their AI models on your conversations sent through our API integrations. What you tell ALIGN.AI stays in the service that's serving you.
Where your data travels.Some of these providers are US companies, so your data can be processed outside the UK. Wherever that happens, the transfer is covered by safeguards UK law recognises: the UK's data-bridge arrangements where the provider is certified under them, or the standard contractual protections (including the UK International Data Transfer Addendum) built into our agreements with those providers. Same duties, wherever the server sits.
How long we keep it
Retention
We keep your data while your account is active, because continuity is the point of the product.
Export and deletion are self-service features in Settings. Export downloads everything we hold about you as a file. Deletion permanently removes your account and your data from the live service the moment you press it... no support ticket, no waiting on us.
One honest exception, so nothing here contradicts itself: safety and audit records. Logs of interactions the product's safety layer flagged, and the technical records that show the service behaved lawfully, are kept for up to 12 months after deletion, de-identified where possible, and then deleted too. We keep them to meet our legal and audit obligations, including under emerging AI regulation.
Your rights
What you can ask of us
UK GDPR gives you the right to access the data we hold about you, to correct it, to have it erased, to receive it in a portable format, and to object to certain processing.
The fastest route for most of these is the app itself: export and deletion are buttons in Settings, and your foundational memory is directly editable. For anything else, write to support@jodiehayward.comand we'll act on it within the timescales the law sets (usually a month).
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put it right first, but that route is always open to you.
Human review
When a person reads your conversations
Jodie Hayward, and members of her team authorised for this purpose, may review flagged conversations, for example a conversation the product's crisis detection has flagged, and small, periodic samples of conversations for quality and safety, de-identified where possible.
We do this under what UK GDPR calls legitimate interests: keeping the product safe and honest for everyone who uses it. We tell you here, before you start typing, because you deserve to know. The purpose is always the same, and it's never curiosity and never marketing. You can object to this processing at any time using the contact details below, and your rights in the section above always apply.
Cookies
Three kinds, one honest list
Essential cookiesare always on: the authentication and session cookies set by Clerk that keep you signed in. The service can't work without them.
Analytics comes in two kinds. Umami is cookieless: it sets nothing on your device, collects no personal data, and runs on our own server, so your visit data never goes to a third-party analytics company... which is why it runs on every visit. Google Analytics sets cookies, so it loads only if you say yes to analytics cookies in the banner.
Advertising cookies, from the Meta Pixel, load only if you say yes in the cookie banner. They help us measure our ads and build ad audiences, and until you consent, nothing loads and nothing is sent to Meta.
The full list, cookie by cookie, lives in our cookie policy, along with the link that reopens the banner whenever you change your mind.
Crisis
ALIGN.AI isn't an emergency service
The product signposts crisis resources when it detects you might need them: Samaritans on 116 123 in the UK, 988 in the US. But it's software, and it isn't an emergency service. If you're in crisis, please reach a human now, through those numbers or your local emergency services.
Changes
If this policy changes
If we make a material change to this policy, we'll tell you by email or in the app before it takes effect. The date at the top of this page always shows when it was last updated.
Contact
Reach a human
Questions about this policy or your data go to Support: support@jodiehayward.com. It reaches a human, and you'll get a human back.
And if you want to reach Jodie... jodie@jodiehayward.com. It goes to her directly.