Privacy Policy

Controller: Aluma Center. Contact: privacy@aluma-center.com.

What we process

Account identifiers; the information you provide for your evaluation (questionnaire answers, interview responses, informant responses, uploaded documents which may include health data); and privacy-minimal analytics (identifiers, categories and numbers only, never your free-text answers).

Why (purposes)

Solely to conduct your evaluation and prepare a structured report to support evaluation by a qualified professional, and to operate and secure the service. We do not sell your data or use it for advertising.

Legal bases

Israel, Privacy Protection Law (incl. Amendment 13). EU/UK where applicable, GDPR Art. 6 and Art. 9 (explicit consent / provision of health care). US where applicable, HIPAA Business Associate posture.

Automated processing

Some responses/documents are processed by secure third-party automated language technology under a Business Associate Agreement to phrase questions, extract information you provided, and draft narrative for your report. Inputs are retained by the model provider for no more than 30 days and are not used to train models. It never scores and never diagnoses.

Where your data lives

Encrypted and stored in the European Union (Frankfurt).

Sub-processors

Anthropic (secure language-processing provider, under BAA), Supabase (database/auth/storage, EU), Vercel (hosting), Resend (email), Sentry (error monitoring, PII-scrubbed).

Retention & your rights

Records are kept for the minimum period required by applicable medical-records law, then securely deleted. You may request access, correction, deletion, or a copy of your data at any time from your account's Account & Data section, subject to legal-hold exceptions.

Informants & children

Informants give their own consent and see only the questions asked of them. For minors, a parent/guardian provides consent and age-appropriate assent is captured.