Legal Effective: 12 October 2026 · Version 2026-10-12-v2

Privacy Policy

3Men Pty Ltd (ABN 83 678 873 839), Australia, operates The Midnight Alchemist app and website. Contact support@themidnightalchemist.com about privacy, access, correction, export, deletion or a complaint. This notice describes current processing and the transition away from member voice cloning. Features and data flows can differ for people using an earlier app build.

Information we handle

We handle account details and identifiers; Identity Audit answers, goals and preferences; journal entries, recordings and transcripts; generated Rituals and insights; saved content; consent and legal-acceptance records; subscription status and store transaction references; support messages; device, usage, security and diagnostic data. Some earlier members supplied voice samples and have a derived voice model or generated audio held by the voice provider. We also collect website waitlist or quiz information when you submit it, such as email, optional name, quiz responses and optional contact information. We do not receive a full payment-card number from Google Play.

Reflections, recordings, inferences about emotions or health, and voice data may be sensitive. We treat them with additional care. The app presents separate choices for sensitive-data processing where the feature requires them. Withdrawal stops future processing covered by that choice; withdrawal alone is not confirmation that stored copies or provider data have been erased. Request deletion separately through the app or by emailing us.

How and why we use it

We use information to authenticate you, deliver the features you choose, generate and display reflections, transcribe spoken entries, manage subscriptions, respond to requests, maintain security, investigate faults, prevent abuse and meet legal obligations. AI-generated text uses selected information you provide and relevant journal context. We do not use private reflections for third-party advertising. We do not claim that our suppliers have zero retention or that historical voice models have already been deleted.

The AI Disclosure explains AI and speech processing. A future app update is intended to use text Rituals and optional phone speech, without sending a Ritual to a separate speech supplier when you press Listen. Earlier app versions may still display voice features or attempt to use ElevenLabs. We are winding down that integration; do not assume that installing the current Play build has removed historical provider data.

Recipients and locations

We use Supabase for account, database and private-file functions; OpenAI for selected AI generation and transcription; Google Play and RevenueCat for Android subscription status; Expo for app distribution; Vercel for the website, waitlist and aggregate analytics; and email/support providers for service messages. ElevenLabs is a legacy voice provider for earlier versions and voice models. We are not using Cartesia or Inworld for member Ritual speech in the new offer. Each provider receives data relevant to its function. Provider subprocessors and processing locations can change; content may be processed outside Australia, including in the United States. Our primary app database has been configured in South Korea. Contact us for the current provider and transfer information relevant to your data.

The website uses Vercel Web Analytics to measure visits and selected interactions. Hosting and security systems process request and device information needed to serve the site and detect abuse. We serve fonts from our own website. The website does not load Google Tag Manager, Google Analytics or Google Fonts. Website requests and measurement records can be personal information when linked to a person. See the Cookie and Similar Technologies Notice.

Retention and deletion

We retain account and content data while needed to provide the Service, unless you delete it or ask us to do so. We may keep restricted records for security, accounting, dispute handling or legal duties. Backups and provider copies can take additional time to expire or be deleted. We do not promise an exact deletion time that we cannot verify. If an earlier account has a provider voice model, ask for “Voice deletion”; we will track the provider request separately from removal in our own systems and confirm completion only when evidenced. An exported file on your device or shared elsewhere is outside our deletion control.

The app offers account deletion and data-export requests; you can also email us. A request receipt is not proof that all erasure steps are complete. If you withdraw sensitive-data consent, the account may enter a limited mode. We will explain the status of any deletion request and any data we must retain.

Security, rights and complaints

We use access controls, private storage and encrypted transport. No system is risk-free. You may ask to access, correct or delete information, obtain a copy where available, withdraw consent, or complain. Rights depend on applicable law and may have exceptions. Email support@themidnightalchemist.com. We will respond within the time required by applicable law. Australian residents may contact the Office of the Australian Information Commissioner. Washington residents should also read our Consumer Health Data Privacy Policy.

We do not knowingly offer the app to children under 18. We may update this notice when the 1.0.9 app and backend are released. A new effective date will describe that changed service; this version describes the service and transition at publication.