Legal
Your Data Rights
Last updated: 19 June 2026
You have the right to access, correct, export, and delete the personal information Evaligned holds about you. This page explains each right, how to exercise it, and how long we keep different kinds of data. It complements our Privacy Policy and applies to all users — including those covered by the Australian Privacy Principles (APPs), the UK/EU GDPR, and US state privacy laws.
1. Your rights
Access & portability. Request a copy of all the data we hold about you, delivered as a structured JSON export — your profile, assessments, check-ins, journal entries, coaching conversations, pathways, worksheets, and more.
Rectification. Correct inaccurate information. Most of this you can edit directly in your account settings; for anything else, contact us.
Erasure (“right to be forgotten”). Request permanent deletion of your account and personal data. Therapeutic data — journal entries, coaching conversations, and your coaching profile — is deleted immediately, with no retention, as a core part of our trust promise.
Restriction & objection. Ask us to pause certain processing, or object to direct marketing at any time (one-click unsubscribe is in every email).
Automated decision-making. Evaligned uses automated analysis to infer your pattern archetype, coaching stage, and to surface proactive prompts. You can ask us to explain these or request human review.
2. How to make a request
Email privacy@evaligned.com from the address on your account. To protect your data, we verify your identity (a login challenge, and for deletion a second magic-link confirmation) before acting. We respond within 30 days.
For erasure requests, deletion is permanent and irreversible. We will retain only what the law requires us to keep — for example, financial records for tax purposes.
3. How long we keep data
We keep your data while your account is active and delete it on account closure, with narrow legal-hold exceptions. We also apply rolling retention to operational data even on active accounts:
- Sensitive therapeutic data (journal, coaching messages, coaching profile) — deleted immediately on account deletion, no grace period.
- AI request logs — 90 days.
- Raw wearable data — 90 days.
- Peer-group messages — anonymised after 90 days (content retained without your identity).
- Nudge log — 6 months. Email send log — 1 year. Intervention log — 2 years.
- Financial records (via our payment processor) — retained as required by tax law (typically 7 years).
Full detail is in our Privacy Policy. Questions? Write to privacy@evaligned.com.