Privacy Policy

Alex is operated by PanaceAI (a sole-trader business based in New South Wales, Australia). You can reach us at privacy@panaceai.com.au.

To make Alex work, we collect:

• Account data: your email address, region, locale, and authentication tokens.
• Baby profile data: name, date of birth, sex at birth (optional), and one-off birth + screening data you choose to record.
• Event log data: feeds, sleeps, nappies, growth measurements, milestones, immunisations, food intros, tooth eruptions, care contacts, and any free-text notes you add.
• Voice transcripts:when you use the mic, your audio is transcribed (in your browser) and the text is sent to Anthropic's Claude API to extract structured event data. The audio itself never leaves your device. The transcript is stored alongside the event.
• Photos: with cloud photos on (the family default), photos you add sync to private cloud storage so your family members can see them — encrypted in transit and at rest, visible only to people in your family, never public, never shared with advertisers, and never attached to the Sunday Briefing or its share links. Turn cloud photos off in Me → Cloud photos to keep new photos in your browser on this device only. Photos are never part of your data export.
• Subscription metadata: if you upgrade, Stripe stores your payment details (we never see your card). We store only a customer id and subscription status returned by Stripe.
• Operational logs: standard server logs (IP address, request path, timestamp) retained for security and debugging purposes.

• To render your data back to you in the app.
• To generate your Sunday Briefing PDF (narrative written by Anthropic's Claude from your structured events).
• To compute statistics shown in the Insights and Health tabs.
• To allow members of your family circle (who you invite) to view and contribute to the same baby's record.
• To send transactional email — sign-in magic links and the weekly briefing — via Resend.
• To process payments via Stripe if you subscribe.
• To understand which pages and features get used, via privacy-friendly analytics — never including your baby's data or anything that identifies you.

We do not use your data to train AI models. We do not sell your data. We do not share it with advertisers.

We use these third-party services to run Alex. Each has its own privacy policy:

• Supabase (database + auth) — hosted in Sydney, Australia.
• Vercel (web hosting + CDN, and privacy-friendly, cookieless web analytics — aggregate page views and performance, no cross-site tracking) — global edge.
• PostHog (optional anonymous product analytics — which pages and features are used) — US region. Off by default; only active if you opt in under /me → Product analytics. We never send your baby's data, your event log, or any identifying information; share/invite tokens are stripped from URLs before anything is recorded.
• Anthropic (Claude API for voice extraction and the Sunday Briefing narrative) — US.
• Resend (transactional email delivery) — US.
• Stripe (payment processing, only if you subscribe) — global.
• Google (optional sign-in via OAuth) — global.

The /me page lets you choose between three data-residency tiers and opt in or out of marketing communications and aggregate research use. The default tier is Cloud under DPA (sync via Supabase and Anthropic under standard data processing agreements). The strictest tier — On-device only — is recorded as a stated preference today; the full on-device sync layer is a future build.

You can download a complete JSON export of your data from the Your data section in /me at any time. You can also soft-delete your account from the Danger Zone of /me — your family, baby profile, events and milestones are then flagged as deleted and permanently purged after 30 days. Within those 30 days you can email us to undo it.

Photos in IndexedDB are deleted when you clear browser data or delete them from /photos.

Alex is intended for use by a parent or legal guardian recording information about their own child. Children do not sign up or use Alex themselves. We follow the same data minimisation principles for baby profile data as we do for parent data.

Data in transit is encrypted with TLS. Data at rest in Supabase is encrypted with AES-256. Row-Level Security policies ensure family members only see their own family's data. We rotate keys when we become aware of any potential compromise.

Alex is a record-keeping tool. It is not a medical device, not a clinical decision support system, and not a substitute for professional healthcare. We never interpret your baby's data — we only display the numbers and the words you (or your clinical team) provided. Any health decisions about your child should be made with a qualified healthcare professional.

We will post any material changes to this page and bump the version number. Continued use of Alex after a change indicates acceptance. If a change reduces your rights materially, we will email you at least 14 days in advance.

Questions about privacy, data access requests, or anything else: privacy@panaceai.com.au.