Privacy Policy

Effective: October 15, 2026

Who We Are

Albatross LifeOS is a life planning and mental strength application developed by Alan Verbeke, operating as Albatross LifeOS ("we", "us", or "our"). We are based in Vernon, British Columbia, Canada.

For privacy questions or data requests, contact us at: hello@albatrosslifeos.com

The Short Version

Your data is yours. We do not sell it. We do not share it with advertisers. We do not use it to profile you for third parties. The app is built to serve you — not to monetize you.

When you use the Flight Attendant AI feature, a limited, specific subset of your in-app data is sent to Anthropic's API to generate responses. This is disclosed fully below. If you do not use the Flight Attendant, no personal content leaves your device beyond what is needed to sync your account.

What We Collect

Account information: When you create an account, we collect your email address and a securely hashed password. We do not store your password in plain text.

Profile data: Your first name and Flight Attendant name preference, which you provide during onboarding.

App content: Your journal entries, daily check-in responses, life wheel scores, habits, goals, and reflection answers are stored in your account database hosted on Supabase (see Third-Party Services below). This data is encrypted in transit and at rest, and is protected by row-level security — meaning only your authenticated account can access your data.

Consent record: We record the date and time you agreed to this Privacy Policy and Terms of Service. This is required for legal compliance.

Voice recordings: If you record a voice memo or time capsule, the audio file is stored in your account so it is available on your other devices. Recordings are only uploaded when you save them, and are deleted when you delete them or delete your account.

Handwriting: If you write by hand with Apple Pencil (in the Journal, the Daily Check-In, Planner notes or Holding Pattern), each piece of handwriting is saved as an image in your account so it appears on your other devices. It is uploaded when you save it, and is deleted when you delete it or delete your account.

Subscription status: Purchases are processed by Apple (or Google Play on Android). We use RevenueCat to confirm which plan you have; it receives your account ID and your purchase status.

Device identifier: We generate a random ID for each app install, used only to apply the one-device limit on free accounts. It is not your advertising identifier.

Basic in-app activity: We store a few simple things tied to your account — such as how many times you have opened the app and which introductory tips you have seen — so features like tips behave correctly. We do not use third-party analytics or advertising SDKs.

Flight Attendant usage count: To prevent abuse and keep costs under control, our server counts how many Flight Attendant requests your account makes each day (your account ID, the date and a number). It does not contain what you or the Flight Attendant said, and it is deleted with your account.

App settings: Choices you make in the app, such as reminder times, which things the Flight Attendant may see, whether Flight Plan is on, and what Flight Plan has learned about you (see the Flight Plan section), are saved on your account so every device you use matches. Display settings (like dark mode) and things that belong to one device (like which Apple Health data it can read) stay on that device.

Work hours (optional): If you tell us the days and hours you work (for Flight Plan), we save that on your account so your devices match. It is used only to keep Flight Plan suggestions out of your working hours.

Routines and their steps (optional): If you list what is in a routine (for example a morning routine: stretch, meditate, journal), the list and how long each step takes are saved in your account settings so your devices match. The same list is saved as a note for the Flight Attendant (see below), which you can see, correct or delete at any time.

Newsletter choice: If you tick "Send me the monthly newsletter" (at sign-up or in Account Settings), we record that choice and the date, and we use your email address to send you a monthly newsletter about the app, the science behind it, and what is coming. It is off unless you choose it, it is separate from your account, and you can unsubscribe at any time in Account Settings or with the link in every email. We do not sell or share this list.

Crash reports: If the app crashes, a crash report (the error, your device model, and OS version) is sent to Google Firebase Crashlytics so we can fix it. Crash reports are not linked to your account.

What We Do NOT Collect

We do not collect:

— Your journal entries or personal reflections for any purpose other than displaying them to you
— Biometric data
— Precise location beyond what is needed to calculate local sunrise and sunset times
— Financial information beyond what is processed by Apple or Google for subscription management
— Any data from your contacts, camera, or microphone beyond features you explicitly activate
— Any data for advertising purposes
— Any data sold or licensed to third parties

Health Data

On iPhone and iPad, Albatross can optionally read three things from Apple Health — your sleep, your workouts, and your mindful minutes — to show them in your Daily Check-In. This is entirely optional: nothing is requested until you tap "Connect Apple Health", and you choose exactly what to allow.

By default Albatross only reads this data, and it stays on your device. It is shown on your screen and nowhere else: it is not uploaded to our servers, not stored in your account, and not sent to anyone.

Optionally, you can turn on "Apple Health sharing" for your Flight Attendant (Menu → What Your Flight Attendant Knows). If you do, daily totals for the past 7 days — hours slept (and, when recorded, time in deep and REM sleep), workout minutes, and mindful minutes — together with, for each workout, its type (such as running or yoga), its length, and the effort rating you gave it (iOS 18 and later), are included with your Flight Attendant requests and processed by Anthropic like the rest of the Flight Attendant context described below. A memory summary of a conversation may reflect them. Raw Health records, routes, locations, and heart rate are never included. Sharing is off by default, applies only from when you turn it on, and you can turn it off at any time.

Apple Health data is never used for advertising, marketing, or data mining, and is never sold.

Linking a habit to workouts: In the Daily Check-In you can link a weekly habit to your Apple Health workouts (the watch icon beside the habit). On days Apple Health shows a workout of at least 10 minutes, Albatross ticks that habit for you, marks it "Ticked from Apple Health", and you can untick it. Only the tick is saved to your account, like any habit you tick yourself. The workout itself is not saved. The link is kept on your device, is off by default, and you can remove it at any time.

Saving your mood to Apple Health: On iOS 18 and later you can turn on "Save my mood to Apple Health" in Account Settings → Apple Health. If you do, your Mood rating is also saved to Apple Health as a single State of Mind entry for the day, with no notes or other details. That entry then lives in Apple Health on your device under your control — you can view or delete it there — and this feature does not send it anywhere. (Your mood rating is already part of your check-in saved in your account.) It is off by default, and you can turn it off at any time. Apart from this, Albatross never writes to Apple Health.

You can change or turn off access at any time in iOS Settings → Health → Data Access & Devices → Albatross LifeOS. Health Connect (Android): On Android, Albatross can optionally read your sleep and your workouts from Health Connect to show them in your Daily Check-In. Nothing is requested until you tap Connect, and you choose what to allow. This data is shown on your phone and is not uploaded to our servers or stored in your account. If you turn on Health sharing for your Flight Attendant, daily totals for the past 7 days (hours slept and workout minutes, with each workout's type and length) are sent with your Flight Attendant requests and processed by Anthropic like the rest of the Flight Attendant context described below. Health sharing is off by default and you can turn it off at any time. Albatross never writes to Health Connect, never uses this data for advertising, and never sells it. You can change access at any time in your phone's Settings, under Health Connect. Mindful minutes, saving your mood, and workout effort ratings are not available on Android.

Calendar

If you allow calendar access, Albatross reads your device calendar (on iPhone, iPad, Android and Mac) so your existing events appear in the Planner, and adds events there when you schedule them. If you edit or remove one of those events in Albatross, the change is made on your device calendar.

Events you create in Albatross are saved to your account (title, time, location, and notes). Meeting notes you write on an event are saved to your account too, with the event's name and date; they are never written to your device calendar. Events, to-dos and goals can be linked to each other (for example a meeting to a goal); those links are saved to your account. To offer to-dos from your meeting notes, Albatross reads them on your device, and on devices with Apple Intelligence it may also use Apple's on-device model, or, on Android phones that already have it, Google's on-device Gemini Nano; this happens on the device and the notes are not sent anywhere for it. For events that already exist on your device calendar, we save only the event's ID and the Life Wheel category you assign to it — not its title or details. If you link one of these events to a goal, we also save the goal it belongs to and the event's title, so the goal can count it.

Calendar access is optional and can be turned off at any time in your device Settings.

Location Data

Albatross may request your approximate location solely to calculate local sunrise and sunset times for the circadian rhythm interface feature — the shift between morning navy mode, day white mode, and evening navy mode.

Your location is used only in the moment of calculation. It is not stored, logged, or transmitted. It is not used for advertising or tracking.

Location access is entirely optional. You can use the app without it by using the manual day/night toggle.

The Flight Attendant and AI Processing

The Flight Attendant ("FA") feature uses the Anthropic Claude API to generate personalized responses. When you interact with the FA, a context payload is assembled from your in-app data and sent to Anthropic's servers to generate a response.

What is included in every FA context payload:

— Your life wheel category names and scores
— Your active habits and goals
— Your daily check-in data from the past 7 days, including morning identity statements, energy, mood, stress, habit completions, Top 3 task completions, evening scores, and small wins
— Your recent "Your Truth" responses from weekly and monthly reviews
— Your personality anchor paragraphs (generated during onboarding)
— Your ranked values
— Only if you turn on "Apple Health sharing": your daily sleep (and, when recorded, time in deep and REM sleep), workout, and mindful-minute totals for the past 7 days, plus each workout's type, length, and effort rating (never raw Health records, routes, locations, or heart rate)
— Only if you turn on "Planner sharing": when things are planned over the next 7 days and which life area each belongs to (times and life areas only — never event titles, notes, or calendar names), and, in reviews, totals of time per life area

FA Memory System:

Albatross stores AI-generated memory summaries of meaningful FA conversations in your account database on Supabase. After a substantive exchange with the FA, a secondary AI call is made to Anthropic to extract 1–3 sentences summarising what was learned about you. This summary is stored under your account and injected into future FA conversations so the FA can build genuine knowledge of you over time.

These memory summaries:

— Are stored in your Supabase account database, protected by row-level security
— Are accessible only to your authenticated account
— Are used solely to personalise your FA experience
— Are never used to train AI models
— Are never shared with third parties
— Can be read, corrected or deleted by you at any time in the app (menu, "What your Flight Attendant knows"), or on request — email hello@albatrosslifeos.com and we'll remove them within 30 days, or they're removed automatically if you delete your account
— Are retained until you delete them or delete your account

Routine notes: If you tell the Flight Attendant what is in a routine (typed in your own words, or as a list of steps), it is saved the same way, as a note you wrote. These notes are always included when the Flight Attendant is asked something, so it can know your routines. You can see, correct or delete them in the same place.

Journal Consent Toggle:

By default, your journal entries — including your goal for the day, I Am declarations, gratitude entries, and your free-write journal body — are not included in the FA context payload.

You may choose to grant the FA access to your complete journal entries — including your free-write journal body — by enabling the Journal sharing switch (Menu → What Your Flight Attendant Knows). This toggle can be turned off at any time and takes effect immediately, and only applies going forward from when it's enabled.

Planner Sharing:

By default, the FA does not see your planner. You may choose to let it see what is planned over the next 7 days by enabling "Planner sharing" (Menu → What Your Flight Attendant Knows). If you do, the FA receives only when each thing is planned and which life area it belongs to — never event titles, notes, links, locations, or calendar names. In your Weekly and Monthly Reviews, and in the question on Your Truth, it also receives totals worked out from your planner, such as how many hours went to each life area and how many events there were (still never titles). This includes events from calendars you have connected to your planner, such as Google, iCloud, or Outlook, but only the calendars you have chosen to show there. It is off by default, applies only from when you turn it on, and you can turn it off at any time.

Flight Plan and the Flight Attendant:

If you have turned on Planner sharing, the Flight Attendant may also see a short summary of the life areas and times of day you tend to accept or decline Flight Plan suggestions for (never event titles). See the Flight Plan section for everything Flight Plan does.

Adding things for you:

If you ask the Flight Attendant to put something on your planner or to remind you, and the day and time are clear, it shows a card with an Add button. Nothing is added unless you tap Add, and then it is saved like anything you add yourself. To do this it is told today's date and time and the names of your life areas. The area you choose for an item is remembered on your phone, so the same title goes to the same area next time.

Reactions:

When you react to an FA message (double-tap to react with ❤️ 😂 👍 🔥 💯), those reactions are stored in your device's session memory only. They are never transmitted to our servers, never stored in Supabase, and are cleared when you close the conversation.

Anthropics role:

All data sent to the FA is processed by Anthropic under their API terms of service and privacy policy. Anthropic does not use API-submitted data to train their models by default. You can review Anthropic's privacy policy at anthropic.com/privacy.

If you do not wish your data to be processed by Anthropic, do not use the Flight Attendant feature.

Flight Plan

Flight Plan (in the Planner, switched on in Account Settings) suggests blocks of time in your free time for what matters to you. It never adds anything to your planner by itself: you add, change or skip each suggestion.

What it works from: your routines (things you want regularly, like the gym or time with your family, which you add or confirm yourself), your weekly focus area, how much time each of your life areas has had compared with how much you said it matters, goals with no time planned (and a goal's next step, or that you marked it stuck), your Top Three and open to-dos that have no time yet, and your work hours. If you have connected Apple Health, it also looks at your last few nights of sleep and whether you worked out today, and it looks at your recent morning energy answers, only on your device, only to suggest less when you are tired or have already had a hard day. It also leaves a little extra time around events that have a place, without ever reading or sending the place itself. On your device it also reads the titles, times and lengths of the events in your own planner, so it can learn what you usually do, when, and for how long.

The suggestions are worked out on your device. Nothing is sent to anyone to make them.

What it learns is saved on your account so your devices match: which suggestions you accept or skip, the times of day you prefer, what each of your life areas is about, any changes you make to what it has learned, and the date it started learning. You can see all of it under Account Settings → Flight Plan → What it has learned, and change or delete any item. Routines can be changed or removed at any time. Turning Flight Plan off stops new suggestions, and deleting your account erases what it learned.

If you have turned on Planner sharing, the Flight Attendant may see a short summary of the life areas and times of day you tend to accept or decline (never event titles); see the Flight Attendant section.

Home Screen Widget and Siri

Home Screen widget: If you add the Albatross widget, it shows your Life Wheel, this week's focus, your "who I choose to be" line and, in the medium and larger sizes, the next few items from your planner and calendars, including their titles. This information is copied into storage that Albatross shares with its widget on your device only. Anyone who can see your Home Screen can see what the widget shows. Remove the widget to stop it.

Siri and Shortcuts: If you use Albatross's Siri shortcuts, "Ask my Flight Attendant" sends your question, as text, to the Flight Attendant, which handles it like a message you typed in the app, including your sharing choices (see the Flight Attendant section). Apple handles your voice itself under Apple's own terms. "Log my mood" and "Mark my Top Three complete" save to your account as if you had tapped them in the app.

Reminders on Tasks

You can set a reminder on a task (once, or every day). The reminder time is saved with the task on your account, like the rest of the task, and the notification itself is created on your device, so it does not depend on a connection. Pressing Done, In 1 hour or Tomorrow on a reminder notification is saved the same way as any change you make in the app. Reminder text is shown on your lock screen, so you may prefer to keep sensitive details out of task names. Nothing about your reminders is sent to the AI provider.

Answering from a Notification

On iPhone, iPad, Mac and Android, some notifications from your Flight Attendant can be answered without opening the app: you press and hold the notification, then tap a button (your energy, whether you are still on course, how the day felt) or, if you have turned on Plan tomorrow, type a short reply (the one thing that matters tomorrow). Your answer is saved to your account like anything else you enter in the app, and it is covered by everything else in this policy. The "still on course" and "energy right now" answers are kept as short quiet answers (a day and a word such as "on course"), and your Flight Attendant can see the last week of them, as it can your check-ins. Nothing you type this way is sent to the AI provider. What you type is checked on your device for crisis language, the same as everything else you write in the app; if it sounds like you may need support, you will get a gentle notification that opens the support screen. If your device is offline, the answer waits on your device and is saved when the app next opens. Notification text is shown on your lock screen, so it never includes your goals, journal or other personal content. You can turn this off under Notifications → Quick answers on notifications.

Data Storage and Security

Your personal app content — journals, check-ins, scores, goals, habits, values, FA memory summaries, and Your Truth responses — is stored in your account database hosted on Supabase, protected by row-level security. This means only your authenticated account can read or write your data. No other user, including Albatross staff, can access your personal content through normal application channels.

Reaction data from the FA screen is stored in session memory on your device only. It is never transmitted or persisted.

Data read from Apple Health stays on your device unless you turn on Apple Health sharing with your Flight Attendant (see Health Data above).

All data transmission between the app and Supabase uses HTTPS encryption. Data is encrypted at rest on Supabase's infrastructure.

We implement reasonable technical and organizational measures to protect your data. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Your Rights Under PIPEDA (Canada)

As a Canadian user, you have the following rights under the Personal Information Protection and Electronic Documents Act:

— Right to access: You can request a copy of the personal information we hold about you
— Right to correction: You can request correction of inaccurate personal information
— Right to withdrawal of consent: You can withdraw consent for data collection at any time
— Right to deletion: You can request deletion of your account and associated data

To exercise any of these rights, contact us at hello@albatrosslifeos.com. We will respond within 30 days.

Your Rights Under GDPR (International Users)

If you are located in the European Economic Area, you have additional rights including the right to data portability, the right to erasure ("right to be forgotten"), and the right to lodge a complaint with a supervisory authority.

Contact us at hello@albatrosslifeos.com to exercise these rights.

Data Deletion

You can delete your account and all associated data at any time from Account Settings → Delete Account.

Deletion is permanent and irreversible. Upon deletion:

— Your account credentials are removed from our systems within 30 days
— All server-side data associated with your account is permanently erased, including journal entries, check-ins, goals, wheel scores, FA memory summaries, Your Truth responses, voice recordings, handwriting images, settings and what Flight Plan learned
— Local device data is cleared from the app

You can also make your Flight Attendant forget its memory summaries, one at a time or all at once, without deleting your account: in the app (menu, "What your Flight Attendant knows"), or email hello@albatrosslifeos.com and we'll remove them within 30 days.

Note: We may retain anonymized, non-identifiable usage statistics that cannot be linked back to you.

Data Export

You have the right to a complete export of your in-app content in a readable format. Email hello@albatrosslifeos.com to request one — we'll provide it within 30 days, free of charge.

Children's Privacy

Albatross LifeOS is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at hello@albatrosslifeos.com and we will delete it promptly.

Third-Party Services

Albatross LifeOS uses the following third-party services. Each has access only to the data necessary for its specific function:

— Supabase (database and authentication): Your account credentials, app content, and FA memory summaries are stored on Supabase's infrastructure. Supabase implements enterprise-grade encryption, row-level security, and SOC 2 compliance. Privacy policy: supabase.com/privacy

— Anthropic (AI processing for Flight Attendant): When you use the Flight Attendant feature, a context payload is sent to Anthropic's API. FA memory summaries are generated via a secondary Anthropic API call after meaningful exchanges. See "The Flight Attendant and AI Processing" section above for full details. Privacy policy: anthropic.com/privacy

— Our email service provider (newsletter, only if you opted in): Receives your email address and the fact that you opted in, solely to send the monthly newsletter. It is not used for advertising.

— RevenueCat (subscription management): Receives your account ID and purchase status to confirm which plan you have. Privacy policy: revenuecat.com/privacy

— Google Firebase Crashlytics (crash reports): Receives crash reports containing the error, your device model, and OS version. Not linked to your account. Privacy policy: policies.google.com/privacy

— Apple (App Store, in-app purchases, and Apple Health on your device): apple.com/privacy

— Google (Google Play, on Android): policies.google.com/privacy

We are not responsible for the privacy practices of these services. We encourage you to review their privacy policies. We select third-party services carefully and do not use any services whose primary business model is advertising.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document and notify you through the app.

Continued use of Albatross LifeOS after changes are made constitutes your acceptance of the updated policy.

Mental Health and Clinical Disclaimer

Albatross LifeOS is a personal life planning and reflection tool. It is not a medical device, clinical tool, therapy service, or crisis intervention service.

— Albatross LifeOS does not provide medical advice, psychiatric diagnosis, or psychological treatment
— The Flight Attendant AI feature is not a therapist, counsellor, or mental health professional
— The Holding Pattern feature is a personal reflection aid, not a substitute for professional crisis intervention
— If you are experiencing a mental health emergency, contact emergency services (911) or a crisis line immediately

United States: call or text 988 (Suicide & Crisis Lifeline)
Canada: Crisis Services Canada 1-833-456-4566
Crisis Text Line: Text HOME to 741741

By using Albatross LifeOS you acknowledge that it is a personal productivity and reflection tool and not a mental health service.

Limitation of Liability

To the maximum extent permitted by applicable law, Albatross LifeOS and Alan Verbeke shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the app, including but not limited to loss of data, loss of revenue, or any harm resulting from reliance on content generated by the Flight Attendant AI feature.

Our total liability to you for any claims arising from use of the app shall not exceed the amount you paid for the app in the 12 months preceding the claim.

Contact Us

For any privacy-related questions, data requests, or concerns:

Email: hello@albatrosslifeos.com
Mailing address: Vernon, British Columbia, Canada

We take privacy seriously and will respond to all inquiries within 30 days.