Last updated: August 16, 2026
Your privacy matters to us. This policy explains what data Alma collects, how we use it, and your rights regarding your information.
Alma is designed with privacy in mind. We follow these principles:
The following data is stored in your browser. If you use Alma as a guest, without creating an account, it stays there:
Creating an account syncs your conversations and settings to our servers, which is what allows them to appear on your other devices. See section 2.2.
If you create an account, we store:
| Data | Purpose |
|---|---|
| Email address | Account authentication |
| Display name | Personalization |
| Settings (theme, companion name, personality) | Cross-device sync |
| Subscription status | Premium feature access |
| Conversations and companion memories | Cross-device sync and companion memory |
How your conversations are protected: they are stored under row-level security, meaning the database itself enforces that only your own account can read them. We do not sell your conversations, use them for advertising, or train AI models on them. We do not store your API keys on our servers.
Note on AI providers: to generate a reply, the text of your message is sent to the AI provider serving your conversation (see section 3.1). This is true of every AI companion service and is unavoidable — the model has to read your message to answer it.
If you subscribe to premium features, payment processing is handled by PayPal. We store:
We do NOT store your credit card numbers, bank details, or PayPal password. PayPal handles all payment processing according to their Privacy Policy.
Alma uses the following third-party services:
When you send a message, your input is sent to the AI provider you've selected:
Each provider has their own data retention and privacy policies. We encourage you to review them.
We use Supabase for user authentication and data storage. See their Privacy Policy.
Subscription payments are processed by PayPal. See their Privacy Policy.
If you sign in with Google, we receive your email and display name. See Google's Privacy Policy.
We use your data to:
We do NOT:
You have the right to:
We protect your data through:
However, no system is 100% secure. Please keep your API keys and account credentials safe.
Alma is not intended for users under 18 years of age. We do not knowingly collect data from children.
Our services are hosted in the United States. By using Alma, you consent to the transfer of your data to the US.
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date.
For privacy-related questions or to exercise your rights, contact us at: