← The Almanac

Privacy Policy

Last updated: 29 May 2026. Version 2.0.
The plain English version We collect what you tell us (check-ins, conversations, voice, forms you ask us to help with) and a small amount of device data. We store it on a UK server. We never sell it. We never train AI on it. You can delete everything any time. The legal detail is below in the order the law expects.

Our AI promise — what we never do.

Your conversations with The Almanac are never used to train AI models — ours, Anthropic’s, ElevenLabs’, or any other provider’s.

This is contractually locked in our Data Processing Agreements with Anthropic (the underlying conversational AI) and ElevenLabs (the voice synthesis layer). It is auditable. It is not negotiable. It applies equally to consumer subscribers and institutional pilot students.

We do not fine-tune models on user wellbeing data. We do not anonymise-then-train. We do not share transcripts with research partners without a separate, freshly obtained, time-bound consent. The conversation you have with The Almanac is yours, ends with you, and disappears with you if you ask.

1. Who we are

The Almanac is a service operated by Conscious Wellness Collective Limited (company number 16976097), registered in England and Wales.

Registered office: Belmont Suite, Paragon Business Park, Chorley New Road, Bolton, Lancashire, BL6 6HG, United Kingdom.

For all privacy queries, contact our Data Protection Lead: privacy@thealmanac.co.uk (Matt Roper, founder and Data Protection Lead).

We are registered with the UK Information Commissioner's Office (ICO). Registration number: C1944247.

2. What data we collect

CategoryExamplesWhy we hold it
Account dataName (or chosen alias), email, optional mobile, optional Telegram chat IDSo we can reach you and the AI companion knows who it is talking to
Check-in dataMood, sleep, energy values you submit each dayTo learn your patterns and help you spot them
Conversation dataMessages between you and The Almanac (web, app, or Telegram)To give continuity across days and weeks
Voice dataVoice recordings (if you speak) and transcriptsProcessed by our voice partner (see Section 5). Not retained beyond the request unless you ask us to save it
Special category dataHealth, mental wellbeing, recovery, sexuality, religious or political beliefs you choose to shareProcessed under your explicit consent — see Section 3
Form and document dataForms, letters, photos you upload for us to help completeOnly to perform the task you asked for. Deleted within 30 days unless you save it
Reminders and nudgesThings you ask us to remind you about, your preferred nudge timesSo we send the right nudge at the right time
Technical dataIP address, browser type, pages visitedSecurity and basic site analytics. Logs retained 90 days. Not linked to your account.
Payment dataSubscription status, last 4 digits of card. Full card details live with StripeTo take subscription payments. We never see or store full card numbers.

3. Special category data (health information)

Some of what you share with The Almanac is special category data under the UK GDPR (Article 9): information about your health, mental wellbeing, sexuality, religious or political beliefs, or recovery from substance use.

We process this data on the basis of your explicit consent, which you give at signup through a clearly separate consent checkbox. The consent is freely given, specific, informed, and unambiguous, as the UK GDPR requires.

You can withdraw this consent at any time by deleting your account or emailing privacy@thealmanac.co.uk. Withdrawal does not affect processing that was lawful before withdrawal.

We treat special category data with extra care:

4. Lawful basis for processing

5. Who we share data with (sub-processors)

We use a small number of third-party processors to operate The Almanac. Your data only goes to them when needed to provide the service. Each has a Data Processing Agreement in place with us:

ProviderWhat they receiveWhereSafeguards
Anthropic, PBC (Claude API)Your message text when the AI companion generates a reply. Not used to train Anthropic's models.United StatesUK Addendum to EU SCCs + signed DPA
ElevenLabs, Inc.Text we convert to speech, and any voice you record for transcription. Processed and discarded; not retained beyond the request.United StatesUK Addendum to EU SCCs + signed DPA
Stripe Payments UK, Ltd.Subscription status, payment card details, billing addressUnited Kingdom (with limited US transfers)UK adequacy / SCCs + bundled DPA
Telegram FZ-LLCYour chat messages and ID, only if you choose to use Telegram as a channelGlobal (BVI)Optional channel — covered by Telegram's own privacy policy
Hostinger International, Ltd.Our application hosting infrastructure (Cloud VPS in UK)United KingdomSigned DPA + UK-located storage
Elavon Financial Services DAC (security partner)Payment processing security review and compliance supportIrelandEU adequacy + signed DPA

We do not sell your data. We do not share it with advertisers or data brokers. Ever.

We notify registered users by email at least 14 days before adding a new sub-processor. The current list always lives at this URL.

6. How long we keep your data

7. Your rights under UK GDPR

You have the right to:

To exercise any of these rights, email privacy@thealmanac.co.uk. We respond within 30 days, often sooner. These rights are free to exercise.

8. Security

Your data lives on a UK-located Cloud VPS, encrypted at rest, with HTTPS (TLS 1.3) in transit. Passwords are hashed using bcrypt with a per-user salt. Access to the underlying server is limited to the founder via SSH key with hardware-backed 2FA. All admin access is logged.

Backups are encrypted with restic and held on a separate UK VPS, also encrypted at rest. We test restore once a month.

If we ever have a data breach affecting your information, we will tell you within 72 hours and report it to the ICO as required by Article 33 of the UK GDPR.

9. Children

The Almanac is not for users under 18. We do not knowingly collect data from anyone under 18. If you believe a child has signed up, please email privacy@thealmanac.co.uk and we will delete the account.

10. Cookies and trackers

We use minimal cookies — just enough to keep you signed in and to remember your preferences. We do not use advertising trackers, third-party analytics that profile you, or any cookies that follow you across other sites. Full details: Cookie Policy.

11. International data transfers

Your data is primarily stored in the United Kingdom. Some processing happens in the United States (Anthropic Claude API and ElevenLabs voice processing).

These transfers are covered by the UK Addendum to the EU Standard Contractual Clauses (the ICO-approved mechanism for transfers to non-adequate jurisdictions), together with each processor's contractual commitment to UK GDPR equivalent protection. The relevant DPAs and SCCs are available on request.

12. How the AI works (transparency)

The Almanac is built on large language models. Specifically, our AI companion responds using Anthropic's Claude model with our own prompt, persona, and safety layers wrapped around it. Your messages are sent to Claude in real time to generate each reply. Voice features use ElevenLabs to generate speech and to transcribe your voice.

Responses are generated, not retrieved. Each reply is the model's best statistical attempt at a helpful response to your message in context. The Almanac is not a clinician, not a therapist, not a doctor, not a lawyer. Its responses are not medical, legal, or financial advice.

For safety-critical situations (self-harm, suicide, child safeguarding, immediate violence) the AI is instructed to provide UK crisis resources and, where appropriate, our safety system may flag the conversation for human review by our Data Protection Lead. We do this to protect you. The human reviewer is bound by confidentiality.

You can ask at any time how a specific reply was generated, what data fed into it, and whether a human ever reviewed it. Email privacy@thealmanac.co.uk.

13. Changes to this policy

If we change anything material, we will email registered users at least 14 days before the change takes effect. The current version always lives at this URL with a "last updated" date at the top.

14. Complaints

If you are not happy with how we handle your data, please email us first — we would like the chance to fix it. If you remain dissatisfied, you can complain to the Information Commissioner's Office at ico.org.uk or by phone on 0303 123 1113.