This Privacy Notice explains what information Alati collects, how it is used, and the choices you have.
1. Information We Collect
- Account information: email address and password (stored as a salted hash, never in plain text).
- Scan results: the AI-generated diagnosis text for each scan, associated with your account.
- Usage data: scan counts, timestamps, and subscription/billing status.
We do not store your retinal images. Uploaded images are held in memory only for the seconds it takes to run the AI screening, and are discarded immediately afterward — they are never written to disk or cloud storage, and are never used to train or fine-tune our AI models.
2. How We Use Your Information
We use this information to provide and improve the Service, enforce usage limits for your plan, process subscription billing, send account-related emails (such as email verification), and provide support.
3. Data Storage & Security
Account records and scan diagnosis text are stored in an encrypted-at-rest database. As noted above, the retinal images themselves are never persisted. Access to stored data is restricted to what is needed to operate the Service.
4. Third-Party Service Providers
We share the minimum necessary information with the following processors to operate the Service:
- Paddle — payment processing and subscription billing for Premium accounts (Paddle acts as merchant of record for these transactions).
- Our email provider — delivery of account verification and transactional emails.
We do not sell your personal information.
5. Data Retention
We retain account and scan data for as long as your account is active, or as needed to comply with legal obligations. You may request deletion of your account and associated data at any time (see below).
6. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us at the address below. We will respond within a reasonable time.
7. Local Storage
The Service uses your browser's local storage to keep you signed in (an authentication token) — no third-party tracking or advertising cookies are used.
8. Changes to This Notice
We may update this Privacy Notice from time to time; the "Last updated" date above will reflect the most recent revision.
9. Contact Us
Questions or requests regarding your data can be sent to ahmadalaty@gmail.com.