The Midnight Alchemist app and website are operated by 3Men Pty Ltd (ABN 83 678 873 839), Level 1, 63–73 Ann Street, Surry Hills NSW 2010, Australia ("we", "us", "our"). Contact support@themidnightalchemist.com for privacy questions or requests.
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the EU or UK General Data Protection Regulation applies to you, 3Men Pty Ltd is the controller of your personal data and this policy also serves as our notice under those laws. In this policy, "Ritual audio" means the daily AI-generated audio sessions produced in your own cloned voice, and "Protocol" means the structured programme those sessions belong to.
A cloned voice model derived from your voice may be biometric information — sensitive information under the Privacy Act 1988 (Cth) and special-category data under Article 9 GDPR. We collect and process it only with your separate, explicit consent (Article 9(2)(a) GDPR where it applies), and you can withdraw that consent at any time without deleting your account.
Where the GDPR applies, our legal bases are: performing our contract with you (Article 6(1)(b)) for the core service; our legitimate interests (Article 6(1)(f)) in operating, securing and improving the service; compliance with legal obligations (Article 6(1)(c)); your consent (Article 6(1)(a)) for optional features; and your explicit consent (Article 9(2)(a)) for Voice Signature processing. You may withdraw voice consent in Settings without deleting your account; withdrawal does not affect the lawfulness of processing before it.
The sample you record is sent to OpenAI for liveness transcription and to ElevenLabs to create your personal Voice Signature. The Midnight Alchemist does not save that original sample after the processing request completes. The encrypted provider voice model remains until you withdraw voice consent, delete the Voice Signature, or delete your account. If a provider is temporarily unavailable, the deletion request is recorded and retried; we do not mark provider deletion complete until it is confirmed.
Your Voice Signature is used to produce audio for your account only. Do not upload another person's voice. Generated Ritual audio is stored privately for your use. Voice-journal audio is separate from the Voice Signature and remains in your private journal until you delete the journal or account.
You can export your Ritual audio as an MP3 file — a full session or a 30-second excerpt. Because that audio is in your own cloned voice, we show you a likeness disclosure before the download and record your acceptance (notice version, hash and timestamp) in an audit trail. An exported file leaves our systems and our control: you are responsible for copies on your device and for anywhere you choose to share them. Deleting your Voice Signature or account removes our copies, not files you have already exported.
We use service providers to operate The Midnight Alchemist. Each receives only what it needs to deliver its function, and processes it under contractual and privacy obligations:
These providers process information outside Australia, principally in the United States. We take reasonable steps required by Australian Privacy Principle 8 so that overseas recipients handle your information consistently with the APPs. Where the GDPR applies, international transfers rely on an adequacy decision or standard contractual clauses with supplementary safeguards. We do not sell personal information or share it for third-party advertising.
We use encryption in transit, provider encryption at rest, private audio storage, row-level database controls, signed short-lived media links, encrypted on-device credential storage, access logging and server-side entitlement and Protocol controls. No system is completely secure; if we identify a breach likely to cause serious harm, we will investigate and notify affected people and regulators as required by law.
Wherever you live, you may ask us to:
If the GDPR applies to you, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting processing that happened before withdrawal.
Use the controls in Settings, follow our account and data deletion instructions, or email support@themidnightalchemist.com. We will verify the request and respond within the time required by applicable law — usually within 30 days. If you are unhappy with our response, Australian users may complain to the Office of the Australian Information Commissioner (oaic.gov.au); EEA/UK users may contact their local supervisory authority.
The Midnight Alchemist uses AI to create reflections, transcripts and journal insights. These outputs can be incomplete or wrong and are not used to make legal or similarly significant decisions about you. You decide whether to use or act on them. The Midnight Alchemist is a self-development tool, not therapy, medical advice or treatment.
We do not use website data for third-party advertising. We use Vercel Web Analytics and Google Analytics, delivered through Google Tag Manager, to understand website traffic and interactions. Google Analytics may use cookies or similar identifiers depending on its configuration and your browser settings. You can restrict cookies in your browser and use Google's available opt-out controls. Strictly necessary storage may also be used to deliver requested pages, protect the service and process a form submission.
The Midnight Alchemist is intended for adults aged 18 and over. We do not knowingly create Voice Signatures for children. Contact us promptly if you believe a person under 18 has created an account.
Every in-app consent and disclosure notice in The Midnight Alchemist carries a version identifier and a cryptographic hash of its content. When you accept an in-app notice, we record the version, hash and timestamp — so both of us can prove exactly what you agreed to, and when. This website policy is version 2026-09-04. If a notice materially changes, we ask for fresh consent where required.
We may update this policy as the service and law change. Each update receives a new version identifier. We will present material changes in the app or by email where appropriate and ask for fresh voice consent if the Voice Signature processing purpose or providers materially change.
Privacy Officer, 3Men Pty Ltd: support@themidnightalchemist.com