A
Almyia
Privacy Policy

Your privacy is our priority

We built Almyia with privacy at its core. Core processing happens on your device, and we only collect what's necessary to provide our services.

Last updated: October 14, 2026

Our Privacy Principles

These principles guide every decision we make about your data.

Local-first processing

Core chat analysis happens in your browser. Your WhatsApp export never leaves your device unless you opt into AI features.

Transparent data use

We clearly explain what data we collect, why we need it, and how long we keep it. No hidden tracking.

Minimal collection

We only collect what's necessary. No account required for basic stats, and we never sell your data.

User control

You control your data. Delete your account, export your information, or opt out of analytics at any time.

Secure storage

Any data we do store is encrypted and protected with industry-standard security measures.

Automatic cleanup

Analysis results are temporary. Clear your browser cache, and your data is gone from our systems.

Data We Collect

We collect different types of data depending on how you use Almyia. Here's a complete breakdown.

Core Features (No Account Required)
WhatsApp chat exports (.txt files)
Processed locally in your browser. Never sent to our servers for basic stats.
Browser cache (temporary)
Analysis results stored temporarily in your browser. Clearing cache removes all data.
Almyia Mobile App (iOS & Android)
Chat exports you choose
Core statistics and sentiment are calculated on your phone. Your full chat export is not uploaded. Optional AI features send limited samples of text excerpts only after you request them.
Saved analyses
Stored only in the app's private storage on your device. Delete any analysis, or all of them, from the app at any time; uninstalling the app removes everything.
No account, analytics, or tracking
The app does not require sign-in and contains no advertising, analytics, or tracking SDKs. AI preview requests use a network address for abuse limits. If you use paid reports, we create a pseudonymous report account on our server.
Optional AI preview
Up to 24 text excerpts, at most 180 characters each, are sent through our server to OpenRouter and a model provider. Sender names are replaced with Person labels, but message text may still contain personal details. We do not save these excerpts or the AI response on our server. The response is saved on your device with the analysis and disappears when you delete it. We retain a daily one-way hash of your network address and request counts for usage limits, removing records older than 30 days during subsequent preview requests; we do not store the address itself in this quota table. Our hosting and AI providers process request data under their own policies.
Optional AI reports
A paid report sends up to 60 text excerpts, at most 220 characters each, plus their month labels through our server to OpenRouter. A text model writes the report while a decision model checks the same excerpts for possible events. Sender names are replaced with Person labels, but excerpts may contain personal details. We do not store the excerpts. We temporarily store the generated report on our server so an interrupted request can retrieve its result; server copies are cleared after seven days by a daily cleanup job. The report is also saved on your device until you delete its analysis.
Mobile report purchases
Google Play processes Android payments, and RevenueCat sends us purchase and refund events. We store a pseudonymous account ID, report balance, purchase transaction IDs, product IDs, and report usage records. We keep a rotating one-way hash of a network address for account-creation abuse limits, removing records older than 30 days during daily cleanup. A recovery code kept on your device lets you reclaim unused reports after reinstalling if you saved it elsewhere. We do not receive your full card number.
Links you open
Opening our website, privacy policy, or support page from the app takes you to almyia.com in your browser, where this policy's website sections apply.
AI Features (When You Opt In)
Chat text content
Sent through our server to OpenRouter and model providers only when you request an AI feature. Event detection may use a second model. The mobile preview sends selected excerpts; the website may send more chat text for its full analysis.
Analysis results
Stored temporarily to display results and enable email delivery. Deleted after 7 days or upon request.
Account & Support (When You Contact Us)
Email address
Collected when you contact support, request a refund, or opt in to email delivery of results.
Support messages
Your messages and any attachments you send. Used solely to respond to your inquiry.
Payments & Analytics
Payment information
Processed securely via Stripe. We never see or store your full credit card details.
Token balance & purchase history
Stored to track your token usage and enable refunds. Linked to your email address.
Analytics data
Anonymous usage data via Google Analytics and Microsoft Clarity to improve our service. Can be disabled.

How We Use Your Data

We use your data only for the purposes described below. We never sell your data to third parties.

Provide our services

Process your WhatsApp exports, generate insights, and deliver AI-powered analysis when you opt in.

Process payments

Handle token purchases via Stripe and manage your token balance for refunds and support.

Respond to support requests

Answer your questions, resolve issues, and process refund requests when you contact us.

Improve our product

Analyze anonymous usage patterns to fix bugs, improve performance, and add features you want.

Send important updates

Notify you about service changes, security updates, or issues affecting your account (rare).

Comply with legal obligations

Respond to lawful requests, protect our rights, and comply with applicable laws and regulations.

Data Retention

We keep your data only as long as necessary. Here's how long different types of data are stored.

Browser cache (analysis results)
All analysis results are stored locally. Clear your cache to delete everything.
Until you clear your browser cache
AI analysis results
Stored temporarily for display and email delivery. Auto-deleted after 7 days.
7 days
Email address
Kept for support, refunds, and email delivery. Delete anytime by contacting us.
Until you request deletion
Token balance & purchase history
Required for refunds and support. Deleted along with your account upon request.
Until you request deletion
Support messages
Kept for quality assurance and to reference past issues. Deleted upon request.
2 years
Analytics data
Anonymous usage data. Can be disabled via browser settings or by contacting us.
14 months (Google Analytics)

Third-Party Services

We use trusted third-party services to power Almyia. Each service has its own privacy policy.

Stripe

Payment processing

Securely processes your payments. We never see or store your full credit card details.

View privacy policy

OpenRouter and model providers

AI analysis

Processes chat text when you opt into AI features. Our requests require zero data retention model endpoints.

View privacy policy

Google Analytics

Website analytics

Collects anonymous usage data to help us improve our service. Can be disabled.

View privacy policy

Microsoft Clarity

User experience analytics

Provides anonymous heatmaps and session recordings to improve UX. Can be disabled.

View privacy policy

Vercel

Hosting & infrastructure

Hosts our website and API. Provides secure and reliable infrastructure.

View privacy policy

Your Rights

You have the following rights regarding your personal data. Exercise these rights by contacting us at privacy@almyia.com.

Access your data

Request a copy of all personal data we have about you, including purchase history and token balance.

Delete your data

Request deletion of your account, email address, and all associated data from our systems.

Correct your data

Request correction of inaccurate or incomplete personal information we hold about you.

Opt out of analytics

Disable Google Analytics and Microsoft Clarity tracking for your browser sessions.

Data portability

Request your data in a structured, commonly used format for transfer to another service.

Withdraw consent

Withdraw consent for any data processing that requires your explicit permission.

How to exercise your rights

To exercise any of these rights, send an email to privacy@almyia.com with your request. We'll respond within 30 days (usually much sooner). For account deletion, include the email address associated with your account.

For urgent privacy concerns, you can also contact us at support@almyia.com.

Children's Privacy

Almyia is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@almyia.com, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.

Data Transfer Safeguards

  • We use third-party services that maintain appropriate data protection certifications (e.g., GDPR-compliant cloud infrastructure).
  • We implement standard contractual clauses approved by the European Commission for international data transfers.
  • We regularly review our third-party service providers to ensure they maintain adequate data protection standards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

How we notify you of changes

  • Posting the updated policy on this page with a new "Last updated" date
  • Sending an email notification to users who have provided their email address (for material changes)
  • Displaying a prominent notice on our website for significant updates

Your continued use of Almyia after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.

Privacy Inquiries

For privacy questions, data access requests, or account deletion:

privacy@almyia.com
General Support

For product questions, billing, or technical support:

support@almyia.com
Response Time

We typically respond to privacy inquiries within one business day. For complex requests, we may need additional time but will keep you informed of our progress.