Your data is yours.

Who is responsible for your data

The Alice service (alicemind.co) is operated from Israel. For anything to do with your data, you can reach us at any time: contact@alicemind.co.

The database is managed in accordance with the Protection of Privacy Law, 5741-1981, and its amendments (including Amendment 13).

What we collect

Personal profile: your first name, your age range, your gender if you choose to tell us, and the journey details you created during onboarding (your identity laws, your anchor).

Conversation content: everything you wrote to Alice and everything she replied. This memory is what lets her pick up where you left off.

Usage metadata: the date of each conversation, the day of the journey, the number of messages. Measuring how the site itself is used is anonymous and cookie-free.

Email and sign-in: sign-in is passwordless, through a one-time link sent to your email, with the option to sign in with Google as well. We never store a password.

Phone number: given during checkout, and used only to contact you and for support.

Payment information: we never store your card details. They are handled directly by Stripe (PCI-DSS Level 1).

Sensitive information. Conversation content may include personal and sensitive information: emotional material, beliefs and inner thoughts. We treat it as such: it is stored encrypted, kept separate for each user, and used for Alice's memory of you and to improve the experience, and for nothing else.

Why we use your data

Your information is collected and kept to provide the service: running your conversations with Alice, saving your history and progress, sending the emails that are part of your journey, and processing payments. As part of that, we also use it to keep the service and your account secure, to check the quality and safety of Alice's replies, and to meet our legal and accounting duties.

The one use beyond the service is measuring our ads, and it happens only if you choose "Allow all" (see "What we do not do" and "Cookies" below). It never includes what you wrote to Alice.

Giving us the information is voluntary, but without it we cannot provide the service (Section 11(2) of the Law).

How we store it

Your information is stored on Supabase servers (Postgres infrastructure in the EU), with encryption at rest and encryption in transit on every connection (TLS 1.3+).

The database's Row-Level Security ensures the database itself will not return your data to any other user. Only you, signed in to your account, can read it.

Who receives your data

Besides you, three service providers access parts of your data, solely to provide the service. None of them has any right to use it for anything else:

Supabase (Frankfurt, EU): hosts the database. Receives all of the information, in encrypted form.

Anthropic (USA): provides the Claude model. Receives conversation content at run time only, and commits not to keep it after the API call and not to use it for training, under its commercial terms.

Stripe (USA, EU): processes payments. Receives your card details directly from your browser; we never see them.

Transfers outside Israel

Some of the information is transferred outside Israel to provide the service:

EU (Supabase): under the GDPR's framework of protection, which the Israeli Registrar of Databases has recognized as providing an adequate level of protection.

USA (Anthropic, Stripe): both providers operate under the EU-US Data Privacy Framework and meet the standards of protection required by the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001.

If you use Alice from the United States, this means your information is stored in the EU, processed in part in the US, and managed from Israel.

What we do not do

Your conversations are not used to train models. Not Anthropic's, not any other AI provider's, and not ours.

We do not sell data, and we do not share the content of your conversations with anyone outside. If you accepted advertising cookies, Meta receives information about your visit to the site only (pages, sign-up, purchase), to measure ads, and never what you wrote to Alice. Part of this reporting is sent from our server rather than your browser, so that ad blockers do not break the measurement, and it includes your email address as a one-way hash, which lets Meta match a sign-up to an ad without receiving the address itself. This too happens only if you chose "Allow all". You can decline, and you can change your mind at any moment. Under some US state laws this counts as "sharing" or "targeted advertising"; see your US state privacy rights.

Your conversations are kept so that Alice can remember you, and to improve the experience. Access to them is limited to that.

How long we keep it

Active account data: kept for as long as the account is active.

Inactive account: if you have not signed in for 24 months in a row, we will contact you by email; if you do not respond, the account is deleted automatically within a further 90 days.

Closed account: all of the data is deleted from the main server immediately. Operational backups (daily) are deleted within 30 days.

Billing data: accounting records are kept for 7 years, as the record-keeping law that applies in Israel requires, without any conversation content.

Your rights under Israeli law

Under Section 13 of the Protection of Privacy Law you have the right to review any personal information held about you in the database. Under Section 14you have the right to ask for information that is wrong, out of date, or not needed for the database's purpose to be corrected or deleted.

Right of access (Section 13): you can ask to receive all the information held about you, in a readable format. We will send it within 30 days of receiving the request (the period set in the regulations).

Right to correction (Section 14): if you find that wrong information is held in the database, you can ask us to correct it. Much of it you can correct yourself in your account area; we handle more complex corrections by hand.

Right to deletion: the "Close my account permanently" button in your personal area deletes all of your data, irreversibly and immediately. You can also ask for deletion by email.

Right to object: if you would like us not to use a certain kind of information, you can contact us and we will consider the request.

Right to complain: if you were not satisfied with how your request was handled, you can turn to the Privacy Protection Authority (on gov.il).

If you live in the United States, you have further rights, set out in the next two sections.

Your US state privacy rights

If you live in California, or in another US state with a privacy law of its own (such as Virginia, Colorado, Connecticut, Utah, Texas or Oregon), this section and the next one apply to you. They add to the rest of this policy; they do not replace it.

We do not sell your personal information for money. We never sell or share the content of your conversations, or any other sensitive personal information, with anyone.

What we collected in the last 12 months, in the categories the law uses:

Identifiers: your name, email address and phone number, the account identifier we create for you, and the IP address your browser connects from, which reaches our systems as it does any website's.

Personal characteristics: your age range, and your gender if you choose to tell us.

Commercial information: what you bought from us and when. Never your card details, which only Stripe holds.

Internet activity: how you use the service (the dates of your conversations, the day of the journey, the number of messages). Only if you choose "Allow all": the pages you visit on the site, and your sign-up and purchase, as reported to Meta.

Sensitive personal information: the content of your conversations with Alice, which may reveal your mental or emotional health, your beliefs, and other private matters.

Inferences: what your conversations conclude about you, such as the limiting belief Alice helps you identify and the new rule you write in its place.

Where it comes from: from you, when you sign up, talk with Alice and pay; from your browser, when you use the site; from Stripe, which confirms your payment and passes on the phone number you give at checkout; from Google, if you choose to sign in with Google (your name and email address); and from a friend who gives you the journey as a gift, who may give us your name and email address.

Why we use it: for the purposes in "Why we use your data" above: to provide the service, process payments, answer you when you write to us, keep the service secure, check the quality and safety of Alice's replies, and meet our legal duties. And, only if you choose "Allow all", to measure our ads.

Who we disclose it to: our service providers, for those purposes only (see "Who receives your data" above). The database host (Supabase) holds every category. The AI model (Anthropic) receives the content of your conversations and the profile details Alice needs in order to talk with you. The payment processor (Stripe) receives identifiers and commercial information. Our site measurement (Vercel) is anonymous.

Sharing for advertising: if you choose "Allow all", Meta's advertising cookies run on our site, and our server tells Meta when you sign up or buy, with your email address as a one-way hash (see "What we do not do" above). California law may call this "sharing" personal information for cross-context behavioral advertising, and some other states may call it "targeted advertising" or a "sale". What is involved: identifiers (the cookie identifiers and the hashed email), internet activity, and commercial information (that you signed up or bought). None of it happens unless you choose "Allow all". We do not knowingly sell or share the personal information of anyone under 16.

How to opt out: choose "Essential only" in the cookie notice, and none of this happens. If you chose "Allow all" and change your mind, clear this site's data in your browser: the notice will appear again, and you can choose "Essential only". If your browser sends Global Privacy Control, we honor it automatically as your opt-out: the notice does not ask, Meta's cookies do not load, and our server tells Meta nothing.

Sensitive personal information is used only to provide the service you asked for, and for the limited purposes the law allows alongside it, such as keeping the service secure. We do not use it to infer anything about you for any other purpose, and never for advertising. Because we use it only in these ways, the right to limit its use has nothing further to restrict, but you can always write to us about it.

How long we keep it: as set out in "How long we keep it" above.

How to use your US privacy rights

Depending on the state you live in, you have the right to:

Know and access: ask what personal information we hold about you, where it came from, why we use it and who we disclose it to, and get a copy of it in a portable format.

Delete: ask us to delete it. You can also do it yourself at any time, with "Close my account permanently" in your personal area. We keep only what the law requires us to keep, such as billing records.

Correct: ask us to fix information that is wrong.

Opt out of sale, sharing and targeted advertising, as described above.

Limit the use of sensitive personal information, as described above.

Equal treatment: we will not charge you a different price, or give you a different service, because you used any of these rights.

How to ask: write to contact@alicemind.co, from the email address on your account if you can, and tell us which right you want to use.

Verification: to protect you, we confirm that a request comes from you before we act on it. Usually it is enough that it comes from the email address on your account; otherwise we will write to that address to confirm. We ask for no more than we need, and use it only to verify you.

An authorized agent can make a request for you. We will ask for your signed permission, and we may ask you to confirm your identity with us directly.

When we answer: we confirm that we received your request within 10 business days, and answer it within 45 days (a request to see your information, within the 30 days Israeli law sets). If we need more time, we will tell you why, and take no more than the law allows.

Appeal: if we turn down your request and you live in a state that gives you the right to appeal (such as Virginia, Colorado or Connecticut), you can appeal by replying to our answer, or by writing to contact@alicemind.co with "Appeal" in the subject. We will answer within 45 days and explain what we decided and why. If you are still not satisfied, you can contact your state's Attorney General.

Consumer Health Data Privacy Policy

This is our Consumer Health Data Privacy Policy, as Washington's My Health My Data Act requires, and as similar laws in Nevada and Connecticut expect. It is written to be read on its own, and it applies wherever you live in the United States.

Alice is a self-coaching service, not a medical, health care or mental health service, and she does not assess, diagnose or treat anything. But what you choose to share with her can still touch on your wellbeing, so we handle it with the care these laws ask for.

What it is: your conversations with Alice may include information about your emotional or mental wellbeing: how you feel, what weighs on you, what you believe about yourself. What comes out of them may too: the limiting belief you identify, the new rule you write, and the notes Alice keeps so she can remember you. Laws like these may call this consumer health data.

Where it comes from: from you, in your conversations, and from Alice's replies to you.

Why we collect and use it: only to provide the conversations and the journey you asked for, so that Alice can answer you, remember what you told her, and help you write and practice your new rule; and to keep that service secure and check that her replies are safe and of good quality.

Your consent: we collect and use it only with your consent, which you give when you start your journey. You can withdraw it at any time by writing to us. Because the conversations are the service, withdrawing consent ends your journey: we stop collecting, and we delete your consumer health data along with your account.

Who receives it: we never sell it, and we do not share it with any third party. It is processed for us only by our service providers, under contract and only to provide the service. The conversations themselves are handled by the database host (Supabase, in the EU), which stores them encrypted, and the AI model (Anthropic, in the US), which receives them at run time. The advertising measurement described above, which happens only if you choose "Allow all", tells Meta that you visited, signed up or bought, and never anything you wrote or anything Alice concluded.

Your rights: you can ask us to confirm whether we collect or process your consumer health data, to see it, and to list every third party it has been shared with or sold to (there are none). You can ask us to delete it: closing your account deletes it from our main database at once, and from our backups within 30 days. And you can withdraw your consent at any time.

How to use them: close your account from your personal area, or write to contact@alicemind.co. We verify and answer as described in "How to use your US privacy rights" above, within 45 days, and you can appeal a refusal the same way. If your appeal is refused, you can contact your state's Attorney General (in Washington, the Washington State Office of the Attorney General). We will not treat you differently for using these rights.

Cookies

Some cookies are essential to running the service. One kind is optional, and the choice is yours:

Authentication (Supabase auth): keeps you signed in. Expires when the session ends or when you sign out.

Your consent setting: remembers your choice in the cookie notice. A local setting only.

Advertising cookies (Meta): loaded only if you chose "Allow all". They let us know which ads bring us women the journey really helps. If you chose "Essential only", they are not loaded at all, and the site works exactly the same.

Our own usage measurement (Vercel) is anonymous and uses no cookies at all. To change your choice at any time, clear the site's data in your browser and the notice will appear again. If your browser sends Global Privacy Control, the advertising cookies never load, and the notice does not ask.

Do Not Track and Global Privacy Control

Some browsers can send a "Do Not Track" signal. There is no common standard for what it means, so we do not act on it.

We do honor Global Privacy Control(GPC). If your browser sends it, we treat it as your choice of "Essential only", and as your opt-out of the sale and sharing of your personal information and of targeted advertising, automatically and without asking.

Children

Alice is for adults 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it. If you are under 18, please do not use Alice; if you believe someone under 18 has given us information, write to us at contact@alicemind.co.

Information security

We follow accepted industry practice: encryption in transit and in storage, RLS at the database level, passwordless sign-in (a one-time link to your email), and access control for our admin systems.

If a significant security incident occurs, we will report it to the Privacy Protection Authority and to the users affected within 72 hours of discovering it, as Amendment 13 requires. If you live in the United States, we will also notify you as your state's data breach law requires.

Changes to this policy

We will update this policy from time to time. Material changes will be announced by email and in your personal area at least 14 days in advance. Continuing to use the service after the date they take effect means you accept the new policy.

Contact

Questions, access requests under Section 13, requests for correction or deletion, requests under US state privacy or consumer health data laws, or anything to do with your privacy: contact@alicemind.co.

Last updated: October 14, 2026.