This is what we know about you.
And who else knows it.

Waitlist

If you joined the waitlist before signing up: your email, an optional note on what you’re hoping for, and how you found us. We use it only to send you an invite when there’s a spot.

Account

Name, email, and profile photo (from your Google sign-in).

Child

Name and date of birth.

Home ZIP (optional)

If you add it, your five-digit ZIP code, used only to suggest places near you. We look up your town in GeoNames’ public ZIP list (geonames.org, CC BY 4.0) on our own servers; nothing is sent to GeoNames. Change or remove it at any time in Settings.

Values

The free-text answers you write during onboarding.

Observations

Text and voice notes you send us about your child.

Payment

Handled through Stripe. We never see your card number.

Technical

Your IP address, used transiently to keep out spam and abuse (rate-limiting and a bot check on the waitlist). We do not store it alongside your account or use it to track you.

Errors

Crash reports via Sentry. No personal content is included by design.

Usage

Which reports you open and when you log a note, tied to your account in our own database, so we can improve Albus. Plus cookieless, aggregate page views via Vercel Web Analytics. Never sold or shared.

We do not use tracking pixels or marketing trackers. There is no ad pixel on any Albus page.

To generate your reports. That is the entire purpose.

Before any AI call (Anthropic and OpenAI for report generation, Perplexity for research citations), we replace your child’s name with [CHILD] and your name with [PARENT], and remove contact details, street addresses and birth dates. The models never see who the data is about.

If you add your home ZIP code, it goes to OpenAI so Albus can suggest a place near you. The ZIP is never used in a web search: only the place’s name and town go to Perplexity and Anthropic, to check the place against its own website.

We do not train any AI model on your data.

Anthropic

Anonymized values and observations, to generate the report content (Claude). For a suggested place, its name and town, to check the details against its own website.

OpenAI

Anonymized values and observations, to draft and write the ideas in each report. If you add one, your home ZIP code, to suggest places near you.

Perplexity

Anonymized topic queries (e.g. “16-month sleep transition”), to fetch research citations. For a suggested place, its name and town, to find its own website.

Resend

Your email address and the report email body, to deliver reports.

Stripe

Your name, email, and billing info, to process subscription payments. They handle card numbers; we never see them.

Supabase

Database and file storage for everything we hold about you. Encrypted at rest and in transit.

Vercel

Hosting for the Albus web app, plus Vercel Web Analytics for aggregate page-view counts. The analytics sets no cookies and stores no IP addresses.

Twilio

Your phone number and SMS messages, for SMS observation logging.

Inngest

Your user ID and event metadata, to orchestrate scheduled jobs (report generation, follow-up emails).

Upstash

Your IP address, briefly, to rate-limit the waitlist and protect against abuse. It is held only for the length of the rate-limit window, then expires.

Cloudflare

A one-time bot-check token from the waitlist form, to keep out spam signups (Turnstile). We do not send your IP address or any personal content.

Sentry

Error logs and crash reports. No personal content by design.

Google

The fact that you have an Albus account, via OAuth sign-in.

That is the complete list. No advertisers. No data brokers. No “trusted partners.”

Supabase, US region. Encrypted at rest. TLS in transit. No copies in other regions.

Waitlist signups

Kept until you ask to be removed. Email help@helloalbus.com to be removed at any time.

Active reporting account

As long as your account is open.

Free plan after the two free reports

Deleted 60 days after your last delivered report. We email you the exact date five days ahead, and your reports are yours to download and keep.

Closed account

Deleted within 30 days of closure.

Reports after graduation (third birthday)

90 days, then deleted.

What stays after deletion

One thing: your email address, for an occasional note about what Albus is becoming. Every one carries a one-click unsubscribe.

Payment records

Seven years (legal and tax requirement, held by Stripe).

Error logs

90 days.

See it

Everything you have sent is visible in the app (Reports and Settings).

Correct it

Edit any setting at any time.

Change recipients

Settings, then Recipients.

Delete it

Delete my account from Settings.

If you live in California, Virginia, Colorado, Connecticut, or Utah, your state gives you these same rights by law. We do not sell or share personal information for advertising purposes, so the “opt out of sale” right does not apply but is honored by default.

Albus is for parents. You create the account (you must be 18 or older), you send the observations, you read the reports. Your child does not interact with Albus directly.

The data is about your child, owned by you, controlled by you. You can delete all of it at any time using Settings, then Delete account.

We comply with COPPA’s parental-consent structure: the parent is the operator of the account, and the parent provides all consent for the data we hold about their child.

Only the session cookie that keeps you signed in. No analytics cookies, no marketing cookies, no cross-site tracking. Vercel Web Analytics, which we use for aggregate page views, is cookieless by design and sets nothing on your device. The session cookie is essential to logging in and does not require consent under any US privacy law.

If you add a mobile number during onboarding and check the consent box, Albus sends you one welcome text, and a short reply each time you text us, whether you’re sharing an observation or asking for your checkup prep. Those are the only messages we send by text. Message frequency depends on how often you log observations.

Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also remove your number at any time in Settings.

We never sell your phone number or your text messages, and we never share them, or your consent to be texted, with any third party or affiliate for marketing or promotional purposes. Twilio is the only company that processes them, solely to deliver the texts you asked for (see section 03).

Email help@helloalbus.com. We respond within 2 business days.

For data deletion or export specifically, use the in-app controls above. Those are the fastest path.

If we change anything substantive about this policy, we will email you 14 days before the change takes effect.