Alygn

Privacy Policy

Last Updated: November 5, 2026 | Version: 2.0

Includes our Consumer Health Data Privacy Policy for Washington, Nevada, and covered U.S. state residents.

This Privacy Policy describes how Alygn collects, uses, stores, and protects information from Founding Members and users of the Alygn web application, onboarding survey, menu and food scanners, meal planner, and coaching services. We are committed to handling your data with transparency and care.

How Alygn works: on-device mode and Alygn Accounts

On-Device Mode: When you explore the Alygn web app without submitting the onboarding survey or signing in to an Alygn Account, your meal plans, preferences, and day logs remain stored locally in your browser (localStorage and IndexedDB) on your device.

United States & Standard Regions (Survey Submission & Signed-In Use): When you submit the onboarding survey for a coach-reviewed plan or sign in to an Alygn Account, your agreement to our Terms of Service (User Agreement) and this Privacy Policy covers sending your survey answers to an Alygn human coach to prepare your starting plan, saving your profile, meal plans, and logs to your Alygn Account so your guidance stays tailored across devices, and using de-identified or aggregated patterns from what you share to improve Alygn's guidance for everyone. You can opt out of product improvement or cloud storage at any time with one click on your plan page (/plan/<key>) or in Data & Privacy (Settings).

European Economic Area (EEA), United Kingdom, and Switzerland: When you submit the onboarding survey from the EEA, UK, or Switzerland, sharing your answers with your Alygn coach and saving your personalized plan to your account are provided as the service you requested. Using what you share to improve Alygn for everyone is offered via a separate, unticked opt-in checkbox, and your coach-reviewed plan works in full whether or not you opt in.

Information we collect

Survey, Wellness, and Dietary Information: Weight-management goals, eating styles, culinary preferences, food allergies, sensitivities, self-reported health conditions (such as digestive, metabolic, or cardiovascular context), pregnancy or breastfeeding status, medications, supplements, sleep and stress patterns, optional lab marker bands or body metrics (height, weight, age, biological sex), and optional free-form notes for your coach.

Meal Plans, Logs, and Scanner Inputs: Weekly meal plans, saved recipes, shopping lists, morning check-ins, habit streaks, optional snack or restaurant meal logs, and photos of restaurant menus, plates, grocery shelves, product nutrition labels, barcodes, or fridge contents that you choose to scan.

Account, Billing, and Technical Information: Your email address, authentication session tokens, basic Google account identifier (if signing in with Google), payment confirmation metadata processed by Stripe (we never store your full credit card number), de-identified usage beacons when enabled under your privacy settings (never including your typed health notes, meal logs, or email address), and standard HTTP security metadata.

How we use your information

We use the information we collect to calculate deterministic nutritional targets, generate meal plans, check restaurant menus and grocery products against your goals and exclusions, deliver your submitted survey to an Alygn human coach, sync your Alygn Account across your devices, run AI-assisted menu/food scans and meal chat you initiate (medical free-text notes and medication names are never auto-attached to AI prompts), improve Alygn's catalog and guidance using de-identified or aggregated patterns (where permitted by your regional consent and privacy settings) - including corrections you choose to send from a short list and how useful you said your plan was, sent only while you are signed in and sharing to improve Alygn, and removed when you delete your account - and send transactional sign-in codes and coach plan links.

Service providers and data sharing

Alygn does not sell or rent your personal information or consumer health data to third parties, and we do not share your information for third-party cross-context behavioral advertising. We share information only with your Alygn human coach and with service providers acting as processors on our behalf under data-protection obligations:

Unison Computing, PBC (Unison Cloud) for encrypted cloud hosting and database storage in the United States; Google LLC (Google Gemini API & Google Sign-In) for primary AI inference (on a paid commercial API tier where customer prompts and responses are not used to train Google models) and optional OAuth sign-in; OpenRouter, Inc. and DeepInfra, Inc. for fallback AI inference routing (configured to route only to providers that do not train models on customer prompts); Resend, Inc. for transactional email delivery of sign-in codes and coach plan links; and Stripe, Inc. for payment processing.

Data security, storage, and retention

Data transmitted to Alygn is encrypted in transit (HTTPS/TLS) and stored encrypted at rest in Unison Cloud in the United States. Synced account records are retained while your account is active or until you delete them. When you delete your cloud copy or your account in the app, your records are removed immediately from active Unison Cloud tables; residual copies in encrypted operational backups are never restored to active use and age out automatically within normal backup retention cycles (within 6 months).

Your controls and privacy rights

You can opt out of product improvement, switch to device-only mode, download and delete your synced cloud records (Delete the copy Alygn holds), permanently delete your entire account (Delete my account), or erase all local browser data at any time from Settings → Data & Privacy or on your plan page (/plan/<key>). You may also request access, correction, portability, deletion, or appeal a privacy decision by emailing [email protected]. We respond within 30 days (or up to 45 days where permitted by law).

Children's privacy

Alygn is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take steps to delete it promptly.

Changes to this policy

Alygn may update this Privacy Policy periodically. We will notify Founding Members of material changes. The version number and last-updated date at the top of this page reflect the current version.

Contact

Questions, requests, or concerns about this Privacy Policy or how Alygn handles your data may be directed to the Alygn team at [email protected].

By using Alygn, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

At Alygn ("we", "our", or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Alygn web application, onboarding survey, menu and food scanners, meal planner, and coaching services (collectively, the "Service").

For Washington and Nevada residents and other consumers covered by state consumer health data laws, please also review our Consumer Health Data Privacy Policy, which governs our handling of consumer health data.

Read the full Privacy Policy

1. How Alygn Works: On-Device Mode and Alygn Accounts

You can explore Alygn in two ways:

  1. On-Device Mode (Browsing Without Submitting or Signing In): When you explore the Alygn web app without submitting the onboarding survey or signing in to an Alygn Account, your meal plans, preferences, and day logs are stored locally in your browser (localStorage and IndexedDB) on your device.
  2. Coaching, Personalized Account & Improvement (Survey Submission & Signed-In Use):
    • United States & Standard Regions: When you submit the onboarding survey for a coach-reviewed plan or sign in to an Alygn Account, your agreement to our User Agreement and this Privacy Policy covers:
      • Coach Review of Your Plan: Sending your survey answers to an Alygn human coach so they can review and personalize your starting plan.
      • Personalized Account Storage: Saving your profile, preferences, meal plans, and logs to your Alygn Account so your guidance stays tailored to you across devices and visits.
      • Product Improvement: Using de-identified or aggregated patterns from what you share to improve Alygn's guidance, recipes, and food data for everyone. You can opt out of product improvement or cloud storage at any time with one click on your plan page (/plan/<key>) or in Data & Privacy (Settings).
    • European Economic Area (EEA), United Kingdom, and Switzerland: When you submit the onboarding survey from the EEA, UK, or Switzerland, sharing your answers with your Alygn coach and saving your personalized plan to your account are provided as the service you requested. Using what you share to improve Alygn for everyone is offered via a separate, unticked opt-in checkbox, and your coach-reviewed plan works in full whether or not you opt in.

2. Information We Collect

Depending on how you use the Service, we collect or process the following categories of information:

A. Survey, Wellness, and Dietary Information

  • Goals and Preferences: Weight-management goals, eating styles, culinary preferences, cooking time/equipment, household size, and budget preferences.
  • Allergies, Sensitivities, and Exclusions: Food allergies, intolerances, and ingredients you choose to avoid.
  • Health and Medical Context: Self-reported health conditions (such as digestive, metabolic, or cardiovascular context), pregnancy or breastfeeding status, medications, supplement routines, sleep and stress patterns, and optional lab marker bands or body metrics (such as height, weight, age, and biological sex) used to calculate nutritional floors and targets.
  • Free-Form Notes for Your Coach: Optional notes you write when submitting your survey for human coach review.

B. Meal Plans, Logs, and Scanner Inputs

  • Planner and Check-In Data: Weekly meal plans, saved recipes, shopping lists, morning check-ins, habit streaks, and optional snack or restaurant meal logs.
  • Photos and Scanned Text: Photos of restaurant menus, plates, grocery shelves, product nutrition labels, barcodes, or fridge contents that you choose to scan.
  • Product & Recipe Contributions: Barcode numbers, label photos, or typed food queries you submit when asking Alygn to add or check a food item.

C. Account, Authentication, and Billing Information

  • Account Identifiers: Your email address, authentication session tokens, and (if you sign in with Google) your basic Google account identifier and verified email address.
  • Payment Information: When you purchase a coaching or subscription plan, payments are processed by Stripe. Alygn receives confirmation of your payment status and billing metadata from Stripe, but we do not store your full credit card number.

D. Technical, Diagnostic, and Usage Information

  • Usage Beacons: When enabled under your privacy settings, Alygn records de-identified interaction events (such as which survey step or tab was reached, or whether a feature was used) to understand drop-off and improve the Service. Usage beacons do not include your typed health notes, meal logs, or email address.
  • How You Reached Us: If one of our links brought you to Alygn, we note which link, or which kind of site. If you send your survey answers, your health coach also sees which one.
  • Server and Security Logs: Standard HTTP request metadata (such as IP address, timestamps, and rate-limiting counters) used to protect the Service against abuse.

3. How We Use Your Information

We use the information we collect for the following purposes:

  1. Providing Your Starting Plan and Coaching: Calculating your deterministic nutritional targets, generating meal plans, checking restaurant menus and grocery products against your goals and exclusions, and delivering your submitted survey to an Alygn human coach so they can prepare and send your personalized plan.
  2. Syncing Your Alygn Account: When account storage is active, storing and syncing your chosen categories across your devices.
  3. AI-Assisted Features: When you scan a restaurant menu, plate, fridge, or product label, or use AI-assisted meal-plan chat, the relevant image or prompt text and the dietary context permitted by your settings are sent through our server proxy to our AI inference providers to generate the response shown to you.
  4. Improving Alygn (With Opt-Out Anytime): Where permitted by your regional consent and privacy settings, using de-identified or aggregated patterns (such as common food queries, recipe ratings, or aggregated survey completion patterns) to improve Alygn's catalog, nutrition rules, and guidance. This includes corrections you choose to send - picking from a short list that a scanned dish looks wrong - and how useful you said your plan was. These go to Alygn only while you are signed in and sharing to improve Alygn, carry no text you typed, appear in our internal exports under a pseudonymous key, and are removed when you delete your account. We never sell your personal information or use your data for third-party cross-context behavioral advertising.
  5. Security, Transactional Emails, and Legal Compliance: Sending one-time sign-in codes and your coach-reviewed plan link, preventing fraud or abuse, enforcing rate limits, and complying with applicable legal obligations.

4. How Your Information Is Shared (Service Providers & Processors)

We do not sell or rent your personal information or consumer health data to third parties, and we do not share your information for third-party targeted advertising.

We share information only with your Alygn human coach (when you submit your survey or use coaching features) and with the following service providers acting as processors on our behalf under strict confidentiality and data-protection terms:

Service ProviderRoleData Processed
Unison Computing, PBC (Unison Cloud)Cloud hosting and database infrastructure (United States)Account records, coach survey submissions, published coach plans, authentication sessions, and API proxy traffic
Google LLC (Google Gemini API & Google Sign-In)Primary AI inference provider for menu/photo scanning and chat; optional OAuth sign-inScanned menu/food images, chat prompts, and permitted dietary context (processed via paid API tier where prompts and responses are not used to train Google models); OAuth identity token when signing in with Google
OpenRouter, Inc. & DeepInfra, Inc.Fallback AI inference routing and model hostingScanned menu/food images and text prompts when primary inference falls back (configured to route only to providers that do not train on customer prompts or retain prompt payloads beyond abuse-monitoring windows)
Resend, Inc.Transactional email deliveryEmail address, one-time sign-in codes, and notifications when your coach-reviewed plan is ready
Stripe, Inc.Payment processingBilling details, email address, and subscription/checkout status

Capability Share Links: If you choose to create a shared shopping list link or view your plan via a capability link (/plan/<key>), anyone with whom you share that unique link can view the contents of that shared list or plan.


5. Data Storage, Security, and Retention

  • Browser Storage: Data stored in your browser (localStorage and IndexedDB) remains on your device until you clear your browser data or use the Erase All Local Data control in the app.
  • Cloud Storage & Security: When you submit a survey or sync an Alygn Account, data is transmitted over encrypted connections (HTTPS/TLS) and stored in Unison Cloud tables in the United States encrypted at rest, isolated by internal account or submission identifiers.
  • Retention & Backup Aging:
    • Synced account records are retained while your account remains active and until you delete your cloud copy or your account.
    • When you delete your cloud copy or your account through the app, your records are removed immediately from active Unison Cloud tables. Residual copies in encrypted infrastructure backups are not restored to active use and age out automatically within normal backup retention cycles (within 6 months).
    • De-identified, non-reversible aggregate counts (such as how often a food name was searched) may be retained as statistical tallies that cannot be linked back to any individual.

6. Your Controls and Privacy Rights

Alygn provides direct, self-serve controls inside the app (Data & Privacy in Settings and on /plan/<key>) so you can exercise your choices immediately:

  1. One-Click Opt-Out & Mode Switch: You can opt out of product improvement or switch your data preference at any time—including switching to Keep my data on this device only—from your plan page (/plan/<key>) or Data & Privacy in Settings.
  2. Delete the Cloud Copy Alygn Holds: You can instruct Alygn to download any account records not yet in your browser, verify your local copy, and delete the synced records Alygn holds in the cloud while keeping your login active.
  3. Delete Your Entire Account: You can permanently delete your Alygn Account, including all synced records, authentication sessions, and account identifiers, using the Delete my account button in Settings.
  4. Erase All Local Data: You can clear all data stored in your browser at any time using the Erase All Local Data button.
  5. Access, Correction, Portability, and Appeal Rights: Depending on where you live (including California, Washington, Nevada, Virginia, Colorado, Connecticut, Texas, Oregon, and the EEA/UK/Switzerland), you have the right to request access to, correction of, or portability of your personal information, to withdraw consent at any time, and to appeal a refusal to take action on a privacy request. You may exercise these rights directly in the app or by emailing us at [email protected]. We respond to verifiable requests within 30 days (or within 45 days where permitted by law, with notice). If we decline a request, you may appeal by replying to our response with "Privacy Appeal" in the subject line; if your appeal is denied, we will provide information on how to contact your state Attorney General or data protection authority.

7. Children's Privacy

The Service is intended for adults (18 years of age and older) and is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children.


8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and version number at the top of this page and, where required by law or where we ask to expand how your synced account data is used, notify you in the app.


9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Consumer Health Data Privacy Policy

Last Updated: October 17, 2026 | Version: 1.0

This section supplements our Privacy Policy for Personal Information that qualifies as "Consumer Health Data" under the Washington My Health My Data Act (MHMDA), the Nevada Consumer Health Data Privacy Law (SB 370), and similar U.S. state laws.

Categories & Sources: We collect only the Consumer Health Data you directly provide or scan in Alygn: self-reported health conditions (digestive, metabolic, cardiovascular, pregnancy/breastfeeding, or eating-disorder history), medications and supplements, bodily measurements and vital context (height, weight, age, biological sex, sleep, stress, optional lab marker bands), dietary exclusions/meal logs/food photos, and derived nutritional targets. We never purchase Consumer Health Data from third-party data brokers.

Purposes & Disclosures: We process Consumer Health Data to calculate your nutrition plan, deliver your submitted survey to your Alygn human coach, run AI menu/food scans you initiate, sync your account across devices, and (where authorized, with 1-click opt-out anytime) improve Alygn's guidance using de-identified patterns. We never sell Consumer Health Data or use it for targeted advertising, and we disclose it only to your Alygn coach and the processors named in our Privacy Policy (Unison Computing, Google Gemini API, OpenRouter, DeepInfra, and Resend).

Exercising Rights & Appeals: You may confirm, access, withdraw consent, or delete your Consumer Health Data at any time in Settings → Data & Privacy or by emailing [email protected]. If we decline a request, you may appeal by emailing [email protected] with the subject line Consumer Health Data Appeal; we will respond in writing within 45 days. If your appeal is denied, you may contact the Washington State Attorney General (atg.wa.gov/file-complaint) or the Nevada Attorney General (ag.nv.gov/Complaints/File_Complaint).

This Consumer Health Data Privacy Policy supplements the Alygn Privacy Policy and applies to Personal Information that qualifies as "Consumer Health Data" under the Washington My Health My Data Act (MHMDA), the Nevada Consumer Health Data Privacy Law (SB 370), and similar U.S. state consumer health data privacy laws.

Read the full Consumer Health Data Privacy Policy

1. Categories of Consumer Health Data We Collect

When you use Alygn, we only collect the Consumer Health Data that you choose to enter or scan, and we only transmit or store it off your device in accordance with the service you request and your privacy settings:

  1. Health-Related Conditions and Status: Self-reported digestive, metabolic, cardiovascular, or other wellness conditions; pregnancy or breastfeeding status; and history of disordered eating (used to apply safety guardrails such as withholding calorie targets).
  2. Medications and Supplements: Self-reported prescription or over-the-counter medications (such as GLP-1 receptor agonists) and dietary supplements.
  3. Bodily Functions, Vital Signs, and Measurements: Self-reported height, weight, age, biological sex, sleep quality, stress levels, digestive symptoms, and optional lab marker bands (such as A1c, lipid, or vitamin D ranges).
  4. Dietary, Nutrition, and Wellness Habits: Food allergies, intolerances, food sensitivities, meal plans, logged meals or snacks, habit check-ins, and photos of meals, menus, or food labels.
  5. Derived Wellness Targets: Deterministic nutritional targets (such as daily protein floors, fiber goals, or starting energy estimates) calculated from the measurements and goals you provide.

2. Sources of Consumer Health Data

We collect Consumer Health Data solely and directly from you when you answer survey questions, log meals or check-ins, scan menus or food items, or write notes for your coach inside the Alygn application. We do not purchase or acquire Consumer Health Data from data brokers, health-information exchanges, or third-party trackers.


3. Purposes for Collection and How We Use Consumer Health Data

We collect and process Consumer Health Data only as reasonably necessary to provide the wellness, nutrition, and coaching services you request, and as otherwise authorized by you:

PurposeWhen It HappensHow It Is Controlled
On-Device Plan & Nutrition CalculationAlways available locally in your browserRuns entirely on your device unless you choose to submit to a coach, scan with AI, or enable cloud account storage
Human Coach ReviewWhen you submit the onboarding survey so an Alygn coach can review and tailor your starting planInitiated by your explicit action to submit your survey for your coach-reviewed plan
AI Menu, Photo & Chat AssistanceWhen you scan a menu, plate, fridge, or product label, or use AI meal chatTriggered when you initiate a scan or chat message; medical free-text notes and medication names are never auto-attached to AI prompts
Personalized Account Storage & SyncWhen you submit your survey or sign in so your plan, profile, and logs stay tailored to you across devicesIncluded when you submit or sign in (with 1-click opt-out to device-only mode at any time in Data & Privacy or on /plan/<key>)
Service & Guidance ImprovementDe-identified or aggregated analysis to improve Alygn's nutrition catalog and guidanceIncluded in standard US onboarding with 1-click opt-out anytime on /plan/<key> or in Data & Privacy; offered via a separate unticked opt-in checkbox for EEA/UK/CH users; and subject to separate affirmative authorization whenever required for regulated Consumer Health Data

No Sale or Targeted Advertising: We never sell your Consumer Health Data, never share it with data brokers, and never use it for third-party targeted or cross-context behavioral advertising.


4. Categories of Entities With Whom We Share Consumer Health Data

We do not share Consumer Health Data with third parties for their own marketing or independent commercial use. We disclose Consumer Health Data only to:

  1. Your Alygn Coach: Authorized Alygn coaching personnel who review your submitted survey and prepare your personalized plan.
  2. Service Providers / Processors: Entities that host our infrastructure or process requests strictly on our behalf under binding processor terms:
    • Unison Computing, PBC (Unison Cloud): Hosts our encrypted cloud database and API services in the United States.
    • Google LLC (Google Gemini API), OpenRouter, Inc., and DeepInfra, Inc.: Process menu/food photos and chat prompts when you initiate an AI scan or chat request, under paid/commercial API configurations that prohibit training foundation models on customer prompts.
    • Resend, Inc.: Delivers transactional sign-in codes and notifications when your coach-reviewed plan is ready.
  3. Corporate Transactions or Legal Process: Successors in the event of a merger or acquisition (subject to this Policy), or where strictly required by valid legal process.

5. How to Exercise Your Consumer Health Data Rights

Under Washington's MHMDA, Nevada's SB 370, and similar state laws, you have the right to:

  1. Confirm and Access: Confirm whether Alygn is collecting, sharing, or selling your Consumer Health Data and access that data (including a list of all third parties or affiliates with whom it has been shared, if any—note that Alygn shares only with the processors listed above and never sells Consumer Health Data).
  2. Withdraw Consent / Opt Out Anytime: Withdraw your consent for Alygn to collect, sync, or use your Consumer Health Data off your device at any time.
    • In the App or on Your Plan Page: Open /plan/<key> or Settings → Data & Privacy and switch your preference to Keep my data on this device only (or opt out of product improvement). When you leave cloud storage, Alygn downloads any records your account holds to your browser, verifies the local copy, and deletes the cloud copy.
  3. Delete Your Consumer Health Data: Request permanent deletion of your Consumer Health Data.
    • In the App: Use Delete the copy Alygn holds (to delete all synced health and wellness records while keeping your login) or Delete my account (to delete your entire account and all associated records). Active cloud records are deleted immediately, and residual encrypted backup copies age out automatically within normal backup retention cycles (within 6 months).
    • By Email: Email [email protected] from the email address associated with your account or survey submission.

We will respond to your request without undue delay and within 30 days (or up to 45 days where permitted by law, with notice). We will not discriminate against you for exercising any of these rights.


6. Appeals Process

If we decline to take action on a request you submit under this Consumer Health Data Privacy Policy, we will inform you of our reasons within our response window. You may appeal that decision by emailing [email protected] with the subject line "Consumer Health Data Appeal". Within 45 days of receiving your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision.

If your appeal is denied, you may submit a complaint to the relevant state regulator:


7. Contact Us

For any questions or requests regarding Consumer Health Data, contact us at: