Your privacy

Information you provide

We process your name, email, sign-in details such as one-time links and codes through our sign-in provider, selected facilities, role, preferences and activity needed to provide the service. Private facility workspaces, manager and staff invitations, access roles, facility verification requests, assignments, training completions and certificates are stored on our servers. Authorized managers can work in the locations the workspace owner invites them to. A private workspace does not verify public facility authority. Public facility records come from AHCA public data.

When you opt into the owners network, the profile and facility details you choose to share become visible to other signed-in owners. Room availability and services you publish are visible on the owners board. Direct messages are visible to their participants and may be accessed to investigate abuse or support requests. We also store reports, blocks and support requests.

ALF AI

When you choose to use ALF AI, your question, relevant conversation context and facility information needed to answer it are sent to Anthropic for processing. Conversations and generated documents may be saved in your account. Do not enter resident names, medical records, Social Security numbers or other sensitive personal information. Automated filters reduce risk but cannot detect every private detail.

Your chats and documents stay in your account until you delete them or delete your account. You can delete a chat from the chat list. We also keep a count of the answers you use each month, so we can apply the monthly limit. When our filters catch a private detail, it is replaced before the text is saved or sent to our AI provider.

AI output can be wrong. Read the cited sources before relying on an answer. ALF AI is an information and drafting tool.

EverythingALF is not a HIPAA business associate. Do not send protected health information.

Billing and service providers

Purchases and subscription management take place on the EverythingALF website through Stripe. We receive purchase, subscription, payment-status and customer identifiers. Full card details are handled by Stripe.

Our service providers include Neon for database and authentication, Vercel for hosting, Anthropic for AI, Resend for service email, Apple for iPhone alerts and Google Firebase Cloud Messaging for Android alerts. They process information to operate these features. We may disclose information when required by law, to protect people or the service, or in a business transfer subject to appropriate safeguards.

Data on your device

The iPhone app stores session credentials in the device Keychain. Interests, saved facilities, drafts, sample messages and learning progress may be stored locally. Some preferences also sync with your account. Learning reminders use optional local notification permission. Quiz explanations can play a recorded narration that our server sends to signed-in members with exam access. No audio is made from anything you type or say.

Law Watch and to-do alerts on iPhone are off until you turn them on. When you turn them on, we store a push token for that device, linked to your account. We use it only to tell you that a Florida rule change was added to Law Watch, or that you have a to-do due that week. Apple's push service delivers these alerts. The text on your lock screen is general and never includes resident information or facility names; the details open only after you sign in. Alerts that would arrive overnight wait until morning. When you turn alerts off or sign out in the app, the app tells us to stop sending to that device. Deleting your account deletes its push tokens. We do not send advertising or marketing alerts, and push tokens are not used for tracking. The app does not request contacts, precise location or direct microphone access.

The Android app keeps your session in storage protected by the Android Keystore on your phone. Like the iPhone app, it may store interests, drafts and learning progress locally. Law Watch and to-do alerts on Android are off until you turn them on and allow notifications. Only then does the app start Google Firebase Cloud Messaging and its Firebase Installations service, which create a push token and an app instance identifier for that phone. We store the push token, linked to your account, for the same two alerts and the same overnight rule as on iPhone. Our server sends each alert as data only: your phone shows nothing until the EverythingALF app checks that you are signed in, that alerts are on and that you can still open that facility, and only then shows the same general text. When you turn alerts off or sign out, the app stops showing these alerts and asks our server to remove that phone's notification registration. Turning alerts off does not delete Firebase's local installation identifier on the phone; clearing the app's storage in Android settings, or uninstalling the app, removes the app's local data. Google Analytics is not used in the Android app, and push tokens are not used for tracking or advertising. The Android app asks only for internet access and, if you turn alerts on, notification permission.

Website sign-in cookies and browser storage keep you signed in and remember your progress and preferences. On the website, your browser storage holds these items:

• Your light or dark theme choice.
• Your learning progress.
• Your recent searches.
• A referral code, if you arrived from a referral link, until your account is made.
• A signal that tells your other open tabs to sign out when you sign out.
• Answers you type into a document, kept on your device for that document.

We do not use advertising or analytics trackers on the website. We do not sell your personal information or share it for advertising, on the website or in the app.

Referrals, email and support

Referral rewards are tied to the payments of the people you refer. If a payment is later fully refunded or disputed, the reward it earned is reversed.

We send receipts and account notices because of something you did, and these have no unsubscribe link. Law Watch and tips emails have a one-click unsubscribe link.

When you use the support form, we read your network address to block spam and to limit how often one person can send requests. Your email and message go to our support inbox so we can reply.

Your choices and deletion

You can edit your network profile, hide it, remove your room posts, block other owners and change email preferences. In the iPhone app, open More, Settings, Account & device data, then Delete account to start deletion. In the Android app, open More, Settings & privacy, then Delete my account. You will be asked to confirm your identity. On the website, open Your account and choose Delete my account; we email a 6-digit code to the address on your account to confirm it is you. You can also ask support for help with deletion.

Deletion removes or anonymizes your personal account information, network profile, room listings and messages, including those messages from the other participant's history. Active website subscriptions must be canceled as part of the deletion process to prevent future billing. If a provider cannot finish immediately, we give you a request reference and tell you deletion is pending. A pending request is not a completed deletion.

We retain limited transaction, fraud-prevention and security records where necessary. Facility-held training and certificate records may remain as part of the facility's records. If you delete a manager account, shared facility documents and operational progress may remain with the workspace owner and other authorized users; your attribution is removed or detached. Your manager invitations and access are removed. Deleting a workspace owner account archives its owned workspaces and ends other invited users' access to those workspaces. Public AHCA facility data remains public. Copies in backups may persist until the provider's normal backup cycle expires. Other copies you or another person exported are outside the app's control.

Local progress stays on a device until you reset that workspace or delete its local data. Uninstalling the app does not cancel a website subscription.

Your privacy rights

You can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, and ask for a copy. Use our support form and choose the privacy topic. We may need to confirm it is really you before we act.

Security, age and contact

We use encrypted network connections and access controls. No service can guarantee absolute security. EverythingALF is intended for adult professionals and is not directed to children under 13.

Use our support form for access, correction, deletion, privacy or safety concerns. You can also write to BGAI Ventures LLC at the address below. We will update this page when our practices change.