Privacy Policy

Last updated: May 29, 2026

1. Who we are

Alma (talktoalma.com) is an AI-powered emotional wellness companion service operated by an individual based in Brazil. We are not a mental health clinic and do not provide psychotherapy, medical advice, or diagnosis of any kind. This Privacy Policy applies to all users worldwide, including residents of California, New York, Washington, and other US states with specific AI and privacy laws.

2. Data we do NOT collect

The content of your conversations is never stored on our servers or any database. Your voice audio is never recorded or stored — speech recognition occurs locally in your browser (Web Speech API), and only the transcribed text is used. We do not collect your name, email address, or any personally identifiable information during sessions. We do not use your conversations to train AI models.

3. Data we collect

Anonymous usage data (Google Analytics): We collect anonymized behavioral metrics such as pages visited and session duration. The topics of your conversations (intentions) are not sent to Google Analytics to protect your privacy. Local preferences (localStorage): Your daily message count and Premium status are stored only in your own browser — never on our servers. Payment data: Processed exclusively by Stripe. We never access your card or banking details.

4. Third-party data processors

To function, Alma uses the following third-party services, each with their own privacy policy:

Anthropic (Claude API): Your text messages are sent to Anthropic's API to generate responses. Anthropic contractually states it does not use API data to train its models. Policy: anthropic.com/privacy

ElevenLabs: The text of Alma's responses is sent to ElevenLabs to generate synthetic voice audio. Policy: elevenlabs.io/privacy

Google Analytics: Anonymized usage metrics. Policy: policies.google.com/privacy

Vercel: Site hosting. Server access logs are maintained by Vercel per their policy. Policy: vercel.com/legal/privacy-policy

Stripe: Payment processing for Premium plan. We do not access your financial data. Policy: stripe.com/privacy

5. AI companion disclosure (CA SB 243 / NY AI Companion Law / WA 2026)

In compliance with California SB 243 (effective January 1, 2026), the New York AI Companion Models Law (effective November 5, 2025), the Washington State AI Companion Chatbot Law (2026), and similar state laws:

You are always interacting with an artificial intelligence system, never with a human being. A disclosure notice appears at the start of every session. A reminder notice is displayed periodically during extended sessions. Alma is designed to recognize signs of crisis and provide emergency resources (988, 911, Crisis Text Line).

6. Your rights — California residents (CCPA/CPRA)

If you are a California resident, you have the right under the California Consumer Privacy Act to: know what personal data we collect; request deletion of your data; opt out of the sale of your personal data (we do not sell data); and not be discriminated against for exercising these rights. To exercise any of these rights, contact us at contact.almasupport@gmail.com. We will respond within 45 days as required by law.

7. Your rights — other US state residents

Residents of Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws have similar rights to access, correct, and delete personal data. Contact us at contact.almasupport@gmail.com to exercise these rights.

8. Children's privacy (COPPA / state minor protection laws)

Alma is intended exclusively for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used the service, please contact us immediately at contact.almasupport@gmail.com so we can take appropriate action.

9. Cookies

We use essential cookies for site functionality and Google Analytics cookies for anonymous traffic analysis. We do not use cookies for advertising tracking. You may disable cookies in your browser settings without affecting the core functionality of the service.

10. Security

All communications use HTTPS/TLS encryption. API keys are stored securely as environment variables on the server and are never exposed in client-side code. We do not maintain a database of conversation content.

11. Changes to this policy

We may update this Privacy Policy periodically. The date of the last update is always shown at the top of this page. Continued use of the service after changes implies acceptance of the updated policy.

12. Contact

Questions about this policy? Write to contact.almasupport@gmail.com.