Privacy

This policy is for the Aligned website and app. It is written for California residents and U.S. users. If we offer the app to people in the EEA or UK, GDPR and UK GDPR also apply.

California Online Privacy Protection Act, Cal. Bus. & Prof. Code §§ 22575–22579 (must post a privacy policy if we collect personally identifiable information from California residents). California Consumer Privacy Act as amended by the CPRA, Cal. Civ. Code §§ 1798.100–1798.199.10. Regulation (EU) 2016/679 (GDPR).

We collect the following, from you or from your device, to run the product:

• Identifiers: name, email, sign-in provider id, if you create an account.
• Profile: age, sex, height, weight, activity, equipment, goals, injuries you type.
• Health-related logs: workouts, meals, calories, weigh-ins, fasts, journal notes, food photos.
• Commercial: whether premium is on, plan (month or year), and expiry.
• Device and session: cookies or a session token so sign-in stays signed in.

We use this to provide the log, generate meal and workout plans, estimate food from a photo, sync a signed-in save, and keep the service secure. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Cal. Civ. Code § 1798.100(b) (notice at collection); § 1798.130(a)(5) (privacy policy contents); § 1798.140 (definitions of personal information, sell, share, and sensitive personal information). Categories track the CCPA list in § 1798.140(v).

Weight, injuries, food logs, and similar entries can be personal information collected and analyzed concerning your health. We use that only to provide the log and plans you ask for, not to infer health conditions for advertising.

Cal. Civ. Code § 1798.140(ae) (sensitive personal information includes, at (ae)(2)(B), “personal information collected and analyzed concerning a consumer’s health”); § 1798.121 (right to limit use and disclosure of sensitive PI). GDPR art. 9 (special-category data) if we are established in, or target, the EU.

If you upload a food photo, we send it to a model to estimate calories and macros. That estimate can be wrong. We do not use food photos to train a public ad profile. Do not upload photos of other people without their permission.

FTC Act § 5, 15 U.S.C. § 45 (do not overclaim accuracy). Cal. Civ. Code § 1798.140 (processing by a service provider / contractor). Cal. Civ. Code § 3344 (using a person’s likeness).

If Aligned is listed on the App Store, this is the data we collect, linked to your identity, used for app functionality — not for tracking other companies’ apps and websites:

• Contact Info — name and email, if you create an account.
• Health & Fitness — weight, workouts, meals, fasts, sleep, mood, injuries you type.
• Photos — food photos you choose to scan.
• Identifiers — account id and a session token.
• Purchases — whether premium is on, and which plan.

We do not use this data for third-party advertising. We do not sell it. Health data stays in the log and plans you ask for.

Without an account, data stays on your device and we may drop days older than 7 days. Sign in if you want a cloud save. Delete account in Settings clears the local copy.

We share data with operators that run sign-in (Google, Apple, X, email) and, when a photo is scanned, the model provider, only to provide that feature. We do not sell personal information as defined in California law. We may disclose information if the law requires it.

Cal. Civ. Code § 1798.140(ad) (sell); § 1798.140(ah) (share — cross-context behavioral advertising); § 1798.140(d) (which businesses the CCPA covers). Cal. Civ. Code § 1798.115 (right to know what was sold or shared). Cal. Civ. Code § 1798.83 (Shine the Light) only if we disclosed for third-party direct marketing.

We use a session cookie or token so you stay signed in. That is needed for the account to work. We do not use advertising cookies.

CalOPPA, Cal. Bus. & Prof. Code § 22575(b)(6) (how we respond to browser do-not-track: we do not follow DNT signals at this time). ePrivacy Directive 2002/58/EC art. 5(3) if we target the EU — strictly necessary session storage does not need a marketing-cookie banner.

If the CCPA/CPRA applies to us, you may request to know, access, correct, or delete personal information, and to opt out of sale or sharing. We do not sell or share. You may also ask us to limit sensitive PI to what is needed for the service. You will not be discriminated against for exercising these rights. To ask, use Settings or the sign-in screen. We will need to verify it is you.

CCPA currently applies to a business that meets a threshold (for example, $25 million gross revenue, or buying/selling/sharing PI of 100,000 or more consumers, or 50% of revenue from selling or sharing PI). Even if we are under those thresholds, CalOPPA still requires this policy, and we will honor a good-faith delete request.

Cal. Civ. Code § 1798.140(d) (business; thresholds); § 1798.100 (right to know / notice); § 1798.105 (delete); § 1798.106 (correct); § 1798.110 (access specific pieces); § 1798.120 (opt out of sale/share); § 1798.121 (limit sensitive PI); § 1798.125 (non-discrimination); § 1798.135 (opt-out link if we sold or shared).

Aligned is not directed at children under 13. We do not knowingly collect from them. If you think we did, contact us and we will delete it.

15 U.S.C. §§ 6501–6506; 16 C.F.R. §§ 312.2–312.5. We set the product minimum age at 16.

We keep signed-in data while the account is open, guest data about 7 days, and premium status while the subscription period lasts. We use reasonable security. No method is perfect.

Cal. Civ. Code § 1798.81.5 (reasonable security for personal information); § 1798.82 (breach notice if applicable).

If those laws apply, we process account data to perform the contract, and health-related logs with your request/consent for the log and plans. You may access, rectify, erase, restrict, or port data, and object where the law gives you that right.

GDPR arts. 6, 9, 13–21, 32. UK GDPR and Data Protection Act 2018.

We may update this notice. The date at the top will change.

Cal. Bus. & Prof. Code § 22575(c) (effective date and change process in the policy).

Privacy and delete requests: Settings → Delete account, or email help@alignedfueltrain.com. Help is also at the Help tab in Settings. Put a legal entity name and postal address here before collecting data from California residents at scale.

Cal. Bus. & Prof. Code § 22575(b); Cal. Civ. Code § 1798.130(a).