Privacy Policy
Last updated: 15 July 2026
This policy explains what personal data Aluma collects and how we use it, under the EU General Data Protection Regulation (GDPR).
In crisis or thinking about harming yourself? Aluma is not an emergency service. Please reach out now:
- Emergencies (EU): 112
- Suicide prevention (France): 3114 — free, 24/7
- Find a helpline (worldwide): findahelpline.com
Data controller
The controller is Aluma. For any privacy request, contact adel.tarki@gmail.com.
What we collect
Account & intake: your email, name, date of birth (to confirm you are 18+), and the type of support you select.
Conversations: the messages you send and receive, kept so you and your advisor can continue the conversation.
Technical: a language-preference cookie and a session cookie needed to keep you signed in. We do not use advertising or tracking cookies.
Please do not share more sensitive personal data than necessary in conversations.
Why we use it (legal basis)
To provide the service and your conversations (performance of a contract); to verify eligibility and prevent abuse (legitimate interests); to take payment (contract); and to meet legal obligations.
Who processes it
We use trusted processors under data-processing agreements: Supabase (authentication, database, real-time), Stripe (payments), and Resend (transactional email). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses.
How long we keep it
We keep your account and conversations while your account is active and for a reasonable period afterwards, then delete or anonymise them, unless a longer period is legally required.
Your rights
Under the GDPR you may access, correct, delete, export, or restrict the processing of your data, and object to certain processing. To exercise these, contact adel.tarki@gmail.com. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).