Privacy Notice

1. Who we are

Alrightly is operated by Alrightly ("we," "us," "our"), the data controller for personal data processed through the Alrightly service. You can reach us via our contact form.

2. Personal data we collect

• Account data: name, email address, password credentials, timezone.
• Contact data: phone number (optional), email, and the emails of the trusted contacts you invite. If you provide your mobile phone number and opt in to SMS messaging, Alrightly will use your phone number solely for providing the SMS services you have requested.
• Service data: your check-in schedule, check-in responses, alerts sent, and activity logs.
• Technical data: device, browser, IP address, and log data used for security and service delivery.
• Support data: messages you send us.

Payment card and billing details are collected directly by Paddle (see Section 5); we do not receive or store full card numbers.

3. Why we use your data and legal bases

• Provide the service — sending scheduled check-ins and alerting your trusted contacts (performance of contract).
• Account creation and management — authentication, settings, support (performance of contract).
• Security and fraud prevention — abuse detection, rate limiting, audit logs (legitimate interests, legal obligation).
• Service improvement — troubleshooting, aggregate analytics (legitimate interests).
• Legal compliance — tax, accounting, responding to lawful requests (legal obligation).
• Communications — transactional messages required to operate the service (performance of contract); optional marketing only with your consent.

4. Sharing your data

Your phone number is only made visible to your trusted contacts if you enable that setting. Beyond that, we share personal data only with:

• Service providers / subprocessors — cloud hosting, database, email delivery (Resend), push notification delivery, planned SMS delivery (Twilio), and authentication providers, acting on our instructions.
• Paddle.com Market Ltd. — our Merchant of Record for all orders. Paddle processes payments, subscription billing, tax, invoicing, and customer service inquiries related to purchases.
• Professional advisers — legal, accounting, and audit advisers under confidentiality obligations.
• Authorities — where required by law, court order, or to protect rights and safety.

5. Payments and Paddle as Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you purchase a subscription, Paddle collects your payment and billing information directly under its own privacy notice.

6. International transfers

Our providers may process personal data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Data retention

We keep account and service data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it (for example, billing records kept for up to 7 years for tax and accounting purposes, or security logs retained for up to 12 months).

8. Your rights

Subject to applicable law, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Receive a portable copy of data you provided.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, message us via our contact form. We respond within one month.

9. Security

We use appropriate technical and organizational measures, including encryption in transit, access controls, hardened authentication, and audit logging. No system is perfectly secure, but we work to protect your data at a level appropriate to its sensitivity.

10. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and to operate the service. We do not use advertising cookies. You can control cookies through your browser settings.

11. Children

Alrightly is not directed to children under 13, and we do not knowingly collect their personal data.

12. Changes

We may update this notice from time to time. Material changes will be communicated by email or in-app notice.

13. Contact

Alrightly · Contact form