Privacy Policy

Information you give us

Account: your email address. We sign you in with a one-time link sent by email, so we never store a password. If you set a display name, we store that too.

Recovery information you choose to enter: your intake answers and any free-text you write (including a free-form "brain dump"), your recovery stage and path, your goals and worries, injury and surgery dates, appointments you add (surgeon, physical therapist, or other, with dates and notes), check-ins (pain, swelling, confidence, spirits, and notes), your symptom-log settings, the physical-therapy exercises you track and check off, milestone measurements, and the recovery briefs and visit summaries the app generates for you.

How we use your information

We use it to run the product: to sign you in, build and show your plan, generate your briefs and visit summaries, track your check-ins and progress, and manage your subscription.

We do not sell your personal information, and we do not use your recovery information for advertising.

AI processing

To generate recovery briefs and visit summaries and to read your intake into structured details, the free text and document content you provide is sent to a third-party AI provider (OpenAI) for processing. We store the generated result, not the raw documents you upload. This is enforced in our system: uploads are processed and discarded, and only the structured brief is saved.

Please avoid pasting information you would not want processed this way. The AI output is informational and is not medical advice.

Payments

Paid plans are billed through Stripe. Stripe handles your card details directly. We never see or store your full card number. We store only the identifiers and status Stripe gives us (a customer ID, a subscription ID, your plan status, and your renewal date) so we can show your plan and manage billing.

Service providers we share with

We use a small set of providers to operate ACL Ally, and we share only what each needs to do its job:

Resend (sends your sign-in emails). OpenAI (AI processing described above). Stripe (payments). Neon (our database, where your account and recovery data are stored). Vercel (hosts and serves the application).

How long we keep it

We keep your information for as long as your account exists. When your account is deleted, we delete the recovery data associated with it. Backups and provider logs may persist for a short period before they cycle out.

Your choices and rights

You can access, correct, export, or delete your information. Deleting your account removes your stored recovery data along with it. Depending on where you live, you may have additional rights (for example, under the CCPA or GDPR) to request a copy of your data, ask us to correct or delete it, or object to certain processing.

To make any of these requests, email us at mpkerem@gmail.com. We will not discriminate against you for exercising these rights.

Security

Your data is encrypted in transit. We limit access to what is needed to operate the service and rely on established providers (listed above) for storage and payments. No system is perfectly secure, but we work to protect your information and to keep the amount we hold small.

Children

ACL Ally is intended for adults (18 and older). It is not directed to children, and we do not knowingly collect information from anyone under 18.

Not medical advice

ACL Ally helps you prepare for care conversations and organize your recovery. It does not diagnose or treat, and it does not replace your surgeon or physical therapist. See our Terms of Service for the full disclaimer.

Changes to this policy

We may update this policy as the product changes. When we do, we will update the date at the top of this page.

Contact

Questions or requests about your privacy: email mpkerem@gmail.com.