Privacy Policy

Last updated: 2026-06-06

1. Who We Are

Aletheia Lattice ("we", "us", "our") is a personalized emotional journaling service available at aletheialattice.com. To exercise your rights or contact us about your data, write to hello@aletheialattice.com.

2. Data We Collect

• Account data: name, email address, and password (stored as a salted hash).
• Profile data: country, language, and phone (optional).
• Journal content: your daily reflections, emotional responses, and questionnaire answers. This is the core of our service.
• AI-generated insights: emotional profile summaries and narrative analyses produced on the basis of your journal entries.
• Payment data: billing information is handled exclusively by Stripe. We store only the Stripe subscription ID and status — never card numbers.
• Usage data: if you consent, aggregated analytics events are collected via Google Analytics 4 to help us improve the service.

3. Legal Basis

• Contract performance (Art. 6(1)(b) GDPR): we process your account, profile, journal, and payment data to provide the service you subscribed to.
• Consent (Art. 6(1)(a) GDPR): analytics cookies are only activated if you explicitly accept them via our consent banner.
• Legitimate interest (Art. 6(1)(f) GDPR): server logs and error monitoring for security and reliability.

4. How We Use Your Data

We use your data solely to provide and improve Aletheia Lattice. We do not sell, rent, share, or license your personal data to any third party for advertising, marketing, or commercial purposes. We do not share your data with data brokers, advertisers, or affiliate networks. Your journal content is never used to train AI models.

5. Service Providers

We share data only with the service providers required to operate Aletheia. All providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

• Secure database and authentication — your account information and journal entries are stored in a secure, EU-hosted database.
• Personalised guidance — to generate your daily emotional guidance, your journal responses and emotional context are sent to an AI service per session. This data is used solely to produce your response and is not stored by that service or used to train models.
• Personalised memory (Companion plan only) — to build your long-term emotional memory, journal excerpts are processed by an AI service to create a semantic index. Excerpts are transmitted to generate this index; the service does not store them beyond that operation.
• Payments — payment processing is handled by Stripe, a PCI-DSS certified provider. We never see or store your card details.
• Analytics — we use Google Analytics 4 to understand how users navigate the site. This is only activated with your explicit consent.
• Email delivery — transactional emails (welcome messages, emotional follow-ups) are sent via a secure SMTP provider. Your email address is used only for this purpose.

6. Retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (e.g., financial records for 7 years).

7. Your Rights (GDPR)

If you are located in the EU/EEA or the United Kingdom, you have the following rights:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your account and data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: withdraw analytics consent at any time via the cookie banner.

To exercise any right, email us at hello@aletheialattice.com. We will respond within 30 days.

8. Cookies

We use the following cookies and similar technologies:

• Authentication — a session cookie is set when you log in to keep you signed in. This cookie is strictly necessary for the service to work and does not require consent.
• Attribution — if you arrive via a link with campaign parameters (for example, from an Aletheia email), we store those parameters for the duration of your browser session so we can measure the effectiveness of our own campaigns. This data is used only by Aletheia and is not shared with any third party or advertising network.
• Analytics — we use Google Analytics 4 to understand how users navigate the site in aggregate. This cookie is only set with your explicit consent.
• Consent preference — we store your cookie preference in your browser's local storage so we do not show you the banner on every visit.

You can review and change your cookie preferences at any time using the Cookie settings link in the footer.

For a complete cookie inventory see our Cookie Policy.

9. Changes to This Policy

We will notify you by email of material changes to this policy at least 14 days before they take effect.

10. Contact & Complaints

Email: hello@aletheialattice.com. You also have the right to lodge a complaint with your national data protection authority. In Spain: the AEPD (aepd.es). In the United Kingdom: the ICO (ico.org.uk).