Privacy Policy

Who we are

Almanac ("us", "we", or "our") operates the website https://almanac.to (the "Service").

For any privacy question or request, contact us at contact@almanac.to.

Data we collect

Account details: your email address and a securely hashed (bcrypt) version of your password. We never store your password in plain text.

Your content: the goals, habits, measurements and notes you create in the app.

Payment data: when you buy Almanac, payment is processed by Stripe. We receive confirmation of payment and a customer reference, but never your full card number.

Technical data: an essential session cookie that keeps you signed in. We do not use advertising or third-party tracking cookies.

How we use your data

To provide the service: create your account, store and sync your goals, and keep you signed in.

To process your one-time purchase and unlock unlimited goals.

To send account emails you request, such as password-reset links.

To keep the service secure and prevent abuse.

Service providers

We share data only with providers that help us run Almanac: MongoDB Atlas (database hosting), Stripe (payments), Vercel (application hosting), and Resend (password-reset emails). Each processes data on our behalf under its own terms.

Data retention

We keep your account and content for as long as your account exists. When you delete a goal it is removed; when you close your account we delete your associated data, subject to any records we must keep by law.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

You can edit or delete your goals in the app at any time. For other requests, contact contact@almanac.to.

Security

Passwords are hashed with bcrypt, traffic is served over HTTPS, and session tokens are stored only as hashes. No system is perfectly secure, but we take reasonable measures to protect your data.

International transfers

Your data may be processed in countries other than yours by the providers listed above. Where required, we rely on appropriate safeguards for such transfers.

Children

Almanac is not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy; material changes will be reflected by updating the effective date above.