Summary
Data we collect automatically
We automatically collect data from you, for example when you use Aimly: trackers, usage data, and device information.
Shared with trusted third parties: Apple Inc., Google Ireland Limited, RevenueCat, Inc. for registration, authentication, and handling payments.
Data you give us
Collected when you create an account: email address, password, first name, last name, and a couple of other fields covered below.
Shared with trusted third parties for the same purposes: registration, authentication, and payments. Some of this data may be transferred outside the EU.
Owner and Data Controller
Karol Dobryniewski, Czarna Białostocka, Poland
Contact: dobryniewskiwiktor@gmail.com
Types of Data we collect
Among the types of Personal Data that Aimly collects, by itself or through third parties, are: trackers, usage data, email address, password, first name, last name, payment info, device information, and other data described below.
All data requested by Aimly is mandatory unless stated otherwise. Without it, we may not be able to provide the service. Where data is optional, you're free not to provide it.
You're responsible for any third-party personal data you obtain, publish, or share through Aimly.
Mode and place of processing the Data
Methods
We take appropriate security measures against unauthorized access, disclosure, alteration, or destruction of your data. Processing follows organizational procedures strictly tied to the purposes described here, and may involve appointed data processors (technical providers, hosting, communications) where necessary.
Place
Data is processed at the Owner's operating locations and anywhere the parties involved in processing are based. Depending on where you are, this can mean your data crosses borders. See the relevant sections below for specifics.
Retention
Personal data is kept only as long as needed for the purpose it was collected for, unless a longer period is required by law or by your consent. Once that period ends, the data is deleted, and rights like access or erasure can no longer apply to it.
The purposes of processing
We collect and process your data to provide the Aimly service, meet our legal obligations, respond to enforcement requests, protect our rights and yours, detect fraud or misuse, and specifically for:
- Registration and authentication provided directly by Aimly
- Handling payments
- Data transfer outside the EU, where applicable
Detailed information on the processing of Personal Data
Handling payments
Unless stated otherwise, Aimly processes payments through external payment providers. You provide payment details directly to those providers. Aimly never collects or stores your card information, and only receives a notification of whether a payment succeeded.
AI-powered data extraction
Aimly sends the text you write to Anthropic's Claude API to automatically extract structured data (mood, energy, sleep, and other metrics) from your daily entries. This is processed by Anthropic, PBC in the United States. Your text is not used to train AI models.
Registration and authentication
When you register or sign in, we collect only the data necessary to identify you and give you access to the service. For direct registration, this means your email address and a few related fields.
Delete your account
You can delete your account, in full, from inside the app
Deleting your account permanently removes your profile, journal entries, habits, goals, and subscription record from our systems. This cannot be undone. There is no recovery period and no way to restore a deleted account.
- Open Aimly and go to Profile or Settings
- Scroll to the Account section
- Tap Delete Account
- Confirm: your account and all associated data are deleted immediately
Further information for Users in the European Union
Legal basis of processing
We process your personal data when at least one of these applies: you've given consent; it's necessary to perform our agreement with you; it's required by law; it serves a public interest task; or it serves our legitimate interests or those of a third party. We're glad to clarify which basis applies to any specific processing on request.
Your rights under GDPR
Objecting to direct marketing
If your data is ever processed for direct marketing, you can object at any time, free of charge, without needing to justify it, and we'll stop using your data for that purpose.
How to exercise these rights
Send any request to the contact details at the bottom of this page. Requests are free, and we respond as early as possible, always within one month.
Data transfers outside the EU
Where a transfer relies on your consent, we only move your data from the EU to a third country after explicitly informing you of the absence of an adequacy decision and any relevant risks, and collecting your explicit consent through Aimly.
Additional information about Data collection and processing
Legal action
Your personal data may be used for legal purposes in court or in proceedings arising from misuse of Aimly. You acknowledge we may be required to disclose data upon request from public authorities.
System logs and maintenance
For operation and maintenance, Aimly and its third-party services may collect system logs or other data (such as IP address) that record interactions with the app.
Changes to this policy
We may update this policy at any time. Changes will be posted on this page, and where feasible, we'll notify you directly. Check back periodically: the date at the top always reflects the latest revision. If a change affects processing based on your consent, we'll collect new consent where required.
Definitions and legal references
- Personal Data
- Any information that, directly or indirectly, identifies or makes identifiable a natural person.
- Usage Data
- Information collected automatically through Aimly: IP addresses, request timestamps, browser and OS details, time spent per page, and similar technical parameters.
- User
- The individual using Aimly, typically the same as the Data Subject.
- Data Subject
- The natural person the personal data refers to.
- Data Processor
- The party that processes personal data on behalf of the Controller, as described in this policy.
- Data Controller (Owner)
- The party that determines the purposes and means of processing personal data. For Aimly, this is the Owner named above.
- Cookie
- A small set of data stored in your browser, used as a type of tracker.
- Tracker
- Any technology (cookies, unique identifiers, embedded scripts, fingerprinting) used to track Users, e.g. by accessing or storing data on their device.