Privacy — Albus

Waitlist: If you joined the waitlist before signing up: your email, an optional note on what you’re hoping for, and how you found us. We use it only to send you an invite when there’s a spot.
Account: Name, email, and profile photo (from your Google sign-in).
Child: Name and date of birth.
Values: The free-text answers you write during onboarding.
Observations: Text and voice notes you send us about your child.
Payment: Handled through Stripe. We never see your card number.
Errors: Crash reports via Sentry. No personal content is included by design.
Usage: Aggregate page views and visit counts, via Vercel Web Analytics. Cookieless, no IP address stored, and it cannot identify you or follow you to other sites.

We do not use tracking pixels or marketing trackers. There is no ad pixel on any Albus page.

To generate your bi-weekly reports. That is the entire purpose.

Before any AI call (Anthropic for report generation, Perplexity for research citations), we replace your child’s name with [CHILD], your name with [PARENT], and strip locations and other identifying details. The models never see who the data is about.

We do not train any AI model on your data.

Anthropic
Anonymized values and observations, to generate the report content (Claude).
Perplexity
Anonymized topic queries (e.g. “16-month sleep transition”), to fetch research citations.
Resend
Your email address and the report email body, to deliver reports.
Stripe
Your name, email, and billing info, to process subscription payments. They handle card numbers; we never see them.
Supabase
Database and file storage for everything we hold about you. Encrypted at rest and in transit.
Vercel
Hosting for the Albus web app, plus Vercel Web Analytics for aggregate page-view counts. The analytics sets no cookies and stores no IP addresses.
Twilio
Your phone number and SMS messages, for SMS observation logging.
Inngest
Your user ID and event metadata, to orchestrate scheduled jobs (report generation, follow-up emails).
Sentry
Error logs and crash reports. No personal content by design.
Google
The fact that you have an Albus account, via OAuth sign-in.

That is the complete list. No advertisers. No data brokers. No “trusted partners.”

Supabase, US region. Encrypted at rest. TLS in transit. No copies in other regions.

Waitlist signups: Kept until you ask to be removed. Email help@helloalbus.com to be removed at any time.
Active account: As long as your account is open.
Closed account: Deleted within 30 days of closure.
Reports after graduation (third birthday): 90 days, then deleted.
Payment records: Seven years (legal and tax requirement, held by Stripe).
Error logs: 90 days.

See it: Everything you have sent is visible in the app (Reports and Settings).
Correct it: Edit any setting at any time.
Change recipients: Settings, then Recipients.

If you live in California, Virginia, Colorado, Connecticut, or Utah, your state gives you these same rights by law. We do not sell or share personal information for advertising purposes, so the “opt out of sale” right does not apply but is honored by default.

Albus is for parents. You create the account (you must be 18 or older), you send the observations, you read the reports. Your child does not interact with Albus directly.

The data is about your child, owned by you, controlled by you. You can delete all of it at any time using Settings, then Delete account.

We comply with COPPA’s parental-consent structure: the parent is the operator of the account, and the parent provides all consent for the data we hold about their child.

Only the session cookie that keeps you signed in. No analytics cookies, no marketing cookies, no cross-site tracking. The one analytics tool we use, Vercel Web Analytics, is cookieless by design and sets nothing on your device. The session cookie is essential to logging in and does not require consent under any US privacy law.

If you add a mobile number during onboarding and check the consent box, Albus sends you one welcome text and a short confirmation each time you text us an observation. Those are the only messages we send by text. Message frequency depends on how often you log observations.

Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also remove your number at any time in Settings.

We never sell your phone number or your text messages, and we never share them, or your consent to be texted, with any third party or affiliate for marketing or promotional purposes. Twilio is the only company that processes them, solely to deliver the texts you asked for (see section 03).

Email help@helloalbus.com. We respond within 2 business days.

For data deletion or export specifically, use the in-app controls above. Those are the fastest path.

If we change anything substantive about this policy, we will email you 14 days before the change takes effect.

This is what we know about you. And who else knows it.

What do you collect?

What do you use each piece for?

Who else touches my data?

Where does it live?

How long do you keep it?

What can I do with my data?

What about my child’s data?

Do you use cookies?

What about text messages?

How do I reach you?