Privacy Policy

allfine.ai is operated by POWERBRAINSHOP HOLDING CORPORATION ("we", "us", "our"). We are the data controller for all personal data processed under this policy. Reach us at support@allfine.ai.

This policy applies to the allfine.ai mobile app (iOS and Android), the web app at app.allfine.ai, and the marketing site at allfine.ai. By creating an account you agree to the practices described here.

Account data: your email address, a display name you choose, and a hashed password. If you sign in with Google or Apple, we receive a provider user ID and your email; your Google or Apple password is never shared with us.

Service configuration: your timezone, daily check-in time, grace window, and language preference.

Check-in records: timestamps of check-in notifications sent, confirmations you made, and records of missed check-ins.

Push tokens: device tokens issued by Firebase Cloud Messaging (Android) or Apple Push Notification Service (iOS), used to deliver notifications to your device. Tokens are renewed by your device and pruned when they become invalid.

Caretaker relationships: the accounts linked as your caretakers. Caretakers see only missed-check-in alerts — not your history or configuration.

Usage events: pseudonymised feature-interaction events (for example, "opened alarm screen") used to improve the product. These are linked to your account ID, not to any real-world identity.

Error reports: crash reports and device context sent to our error-monitoring provider (Sentry) when the app encounters an unexpected error.

If you turn on Activity monitoring in Settings, the app measures how much your device is used so we can notice unusually low activity — a possible sign that you need help — and support the caretaker alerts that allfine.ai provides. This feature is off by default and runs only after you explicitly enable it and grant the relevant device permissions. You can turn it off at any time in Settings; doing so also deletes any not-yet-sent data still stored on your device.

What is measured depends on your device and the permissions you grant. On iOS and iPadOS: your step count (from Motion & Fitness) and how often and how long you open the allfine.ai app. On Android: your daily screen-time total, how often the screen turns on, how many apps you use (a count only), your step count, and how often and how long you open the allfine.ai app.

We collect only aggregate numbers — totals and counts. We never collect the names of the apps you use, their contents, what you type, the websites you visit, or your location.

These measurements are grouped into time windows and sent to your account about four times a day. We use them solely to understand your normal usage pattern and, in a later version, to alert your caretakers if your activity drops unusually low. For users in the EEA, the legal basis is your explicit consent (Art. 6(1)(a) GDPR); you give it by turning the feature on and can withdraw it at any time.

Activity-monitoring records are deleted automatically 100 days after we receive them, and immediately when you turn the feature off or delete your account.

We use your data exclusively to operate the service: to schedule and deliver daily push notifications, record check-in confirmations, detect missed check-ins, and alert caretakers when a grace window lapses.

We do not build advertising profiles, sell data, or use your data for any purpose outside delivering allfine.ai.

For users in the European Economic Area, the legal bases are: contract performance (Art. 6(1)(b) GDPR) for account, configuration, check-in, and push-token data; legitimate interest (Art. 6(1)(f) GDPR) for pseudonymised usage events and error reports; and legal obligation (Art. 6(1)(c) GDPR) for transaction records required for accounting purposes.

We share data only with processors that help us run the service, under data-processing agreements:

Google Firebase Cloud Messaging (Google LLC, USA) — delivers push notifications to Android devices. Notification payloads include check-in status and alarm alerts but no sensitive personal data.

Apple Push Notification Service (Apple Inc., USA) — delivers push notifications to iOS devices.

Google Sign-In (Google LLC, USA) — only if you choose to sign in with Google. We receive your Google account email and a provider-specific ID; no other Google data is accessed.

Apple Sign In (Apple Inc., USA) — only if you choose to sign in with Apple. We receive your Apple ID and, if you allow it, your email address.

Sentry (Functional Software Inc., USA) — captures crash reports and error traces to help us fix bugs. Reports may include device type, OS version, and the error location in code; they do not include check-in content or messages.

STRATO AG (Germany) — hosts our backend servers and database in Germany (EU).

We do not use advertising networks, data brokers, or third-party analytics platforms.

Our servers are hosted in Germany (EU). Push notification delivery and error monitoring involve processors in the United States (Google, Apple, Sentry).

Transfers to the USA are covered by the EU–US Data Privacy Framework where the recipient is certified and, as a fallback, the European Commission's Standard Contractual Clauses. You may request a copy of the relevant safeguards by emailing support@allfine.ai.

Account data (email, display name, hashed password, OAuth links): until you delete your account.

Service configuration and check-in history: until you delete your account. Check-in records older than two years are deleted automatically.

Push tokens: pruned automatically when your device invalidates them or when you delete your account.

Usage events: raw records are deleted after 12 months.

Error reports: deleted from Sentry after 90 days.

Transaction records: retained as long as required by applicable tax law (typically 7–10 years in the EU).

All users: you can view and edit your profile, update your configuration, and delete your account at any time from the app or web app. Account deletion removes all personal data within seven days.

EU/EEA residents (GDPR): you have the right to access your data, have it corrected or erased, receive a portable copy, restrict or object to processing, and withdraw any consent at any time. You also have the right to lodge a complaint with your national supervisory authority — for example the BfDI (Germany), CNIL (France), ICO (UK), or the authority in your country of residence.

California residents (CCPA/CPRA): you have the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale or sharing of personal information for advertising. We do not sell or share personal information. You will not face discrimination for exercising these rights.

To exercise any right or request a portable data export, email support@allfine.ai. We respond within 30 days.

allfine.ai is not intended for children under 16 (or under 13 in the United States). We do not knowingly collect personal data from children below these ages.

If you believe a child has created an account, contact us at support@allfine.ai and we will delete it promptly.

We use industry-standard measures: passwords are stored as bcrypt hashes and never in plain text, all data is transmitted over TLS, access tokens have a 15-minute lifetime, and database access is restricted to our application servers.

No electronic storage or internet transmission is completely secure. If you discover a security vulnerability, please report it responsibly to support@allfine.ai.

You can delete your account from Settings in the mobile or web app. Deletion is immediate and permanent: your account, configuration, check-in history, caretaker links, and OAuth connections are removed. Residual backup copies are purged within seven days.

If you cannot access the app, email support@allfine.ai from the address associated with your account and we will delete it for you.

We may update this policy occasionally. Material changes will be communicated by email and by an in-app notice at least 14 days before they take effect. The date at the top of this page always shows the last revision.

Continued use of allfine.ai after a change takes effect constitutes acceptance of the updated policy.

Data controller: POWERBRAINSHOP HOLDING CORPORATION — support@allfine.ai

Data Protection Officer: support@allfine.ai

Account deletion requests: support@allfine.ai, or use the in-app deletion flow in Settings.

Portable data export requests: support@allfine.ai. We deliver exports within 30 days.