Your privacy.
One policy for everything we offer: the AlchemistOne app, The Program and our websites. What we collect, why, who processes it, and how to have it deleted.
Last updated October 21, 2026
Who we are, and what this covers
AlchemistOne Inc. is a company in Regina, Saskatchewan, Canada. This policy covers everything we offer: the AlchemistOne app on iOS and Android, The Program and its member platform at platform.alchemistone.io, and our websites, including the pilot signup and the application. Where the app and The Program handle information differently, this policy says so.
People come to us with things they have told almost nobody. So the rules that matter most are the simple ones. What you write in a journal in the app stays encrypted on your device, where we cannot read it. The live rooms in The Program are not recorded, by us or by anyone in them. What you write in an application is read by the people who decide on it and nobody else. We do not sell information about you, and we do not use what we know about your recovery to advertise anything to you.
Questions and requests about your information go to privacy@alchemistone.io. Our Privacy Officer is responsible for this policy and for answering you. Anything else goes to support@alchemistone.io.
What we collect
We collect only what each part of our service needs to work. The table shows what, and the paragraphs after it say what is different about the most sensitive items.
| If you | We collect | Who can see it |
|---|---|---|
| Visit a website | Technical cookies needed to run the site; analytics and advertising identifiers only if you accept them (see Advertising, analytics and cookies) | Our team, in aggregate |
| Fill in a contact form | Your name, email, phone number if given, and your message | Our team |
| Apply for a job with us | Your name, email, where you are, your answers to the listing’s questions, and the files you attach | Our team |
| Leave your email with us, for the pilot or for updates | Your email, the date and source of your consent, whether you confirmed, the time zone your device reports so our emails arrive in your morning, and any optional answers you give about where you are at. If an email from us takes you to a side quest and you tick the box to keep what you wrote, we keep those answers too | Our team only; never used for advertising. Side-quest answers are kept only when you ask, exist so a later side quest can bring them back to you, and are never shown to our team |
| Apply to The Program | Your name, email, where you live, your answers about your gambling, and notes from your intake call | The staff who assess applications, and nobody else |
| Become a member of The Program | Your account and sign-in details, your rooms and when they meet, your check-ins, notes, favourites and messages with the team, whether you paid, and a profile photo if you add one | You and the staff supporting you |
| Use the AlchemistOne app | Your name, email and time zone; your account and subscription status; usage data such as meditation preferences and time in the app; and, if you connect them, activity data from Apple Health or Health Connect | Our team sees account, subscription and usage data; your personal entries are encrypted on your device and we cannot read them |
| Apply for a job with us | Your résumé and what you tell us during the process | The people involved in hiring |
- If you
- Visit a website
- We collect
- Technical cookies needed to run the site; analytics and advertising identifiers only if you accept them (see Advertising, analytics and cookies)
- Who can see it
- Our team, in aggregate
- If you
- Fill in a contact form
- We collect
- Your name, email, phone number if given, and your message
- Who can see it
- Our team
- If you
- Apply for a job with us
- We collect
- Your name, email, where you are, your answers to the listing’s questions, and the files you attach
- Who can see it
- Our team
- If you
- Leave your email with us, for the pilot or for updates
- We collect
- Your email, the date and source of your consent, whether you confirmed, the time zone your device reports so our emails arrive in your morning, and any optional answers you give about where you are at. If an email from us takes you to a side quest and you tick the box to keep what you wrote, we keep those answers too
- Who can see it
- Our team only; never used for advertising. Side-quest answers are kept only when you ask, exist so a later side quest can bring them back to you, and are never shown to our team
- If you
- Apply to The Program
- We collect
- Your name, email, where you live, your answers about your gambling, and notes from your intake call
- Who can see it
- The staff who assess applications, and nobody else
- If you
- Become a member of The Program
- We collect
- Your account and sign-in details, your rooms and when they meet, your check-ins, notes, favourites and messages with the team, whether you paid, and a profile photo if you add one
- Who can see it
- You and the staff supporting you
- If you
- Use the AlchemistOne app
- We collect
- Your name, email and time zone; your account and subscription status; usage data such as meditation preferences and time in the app; and, if you connect them, activity data from Apple Health or Health Connect
- Who can see it
- Our team sees account, subscription and usage data; your personal entries are encrypted on your device and we cannot read them
- If you
- Apply for a job with us
- We collect
- Your résumé and what you tell us during the process
- Who can see it
- The people involved in hiring
In the app, your journals, gratitude lists, written insights, logged therapy, workout history and anything else you write stay encrypted on your device. Even if we wanted to, we could not read them, and we never share them with anyone, including our own staff. Aggregate counts, such as goals completed, are used inside the app to show your progress.
In The Program, your application answers and your own words on the platform are the most sensitive things we hold. They are visible only to the staff who need them, stored separately from anything public, and never placed in a web address, a log line or an analytics event. The platform deliberately does not keep a count of your days, or any record of a slip as a failure.
Activity data from Apple Health or Health Connect is used only to show it to you inside the app. It is never used for advertising, never sold, and never shared with anyone else.
Payment details go directly to Stripe, Apple or Google. We see whether a payment was made; we never see or store your card number.
Why we use it, and the consent we rely on
We use your information to run the thing you asked for and for nothing beyond it:
- To provide the app, The Program and the platform, and to support you while you use them.
- To assess your application and run your intake call.
- To take payment and keep the records the law requires.
- To write to you, if you have asked us to, about the pilot, The Program, AlchemistOne’s other offerings and, in time, an invitation to an intake call. Every message identifies us and has a way to stop receiving them, and we keep a record of when and how you agreed. If you have an account in the AlchemistOne app, we may also write to you, occasionally, about changes to what we offer, as the law allows for an existing relationship; those messages carry the same way to stop them, and one click ends every marketing email from us.
- To understand, in aggregate, how our sites and services are used, so we can improve them.
- To measure which advertising brings people to us, using the click identifiers described below.
- To protect people’s safety and to comply with the law.
We rely on your consent. For anything sensitive, which includes everything about your gambling, your recovery, your health and your finances, that consent is explicit: you give it when you answer a question, and you can withdraw it. For routine matters, such as keeping your account working or sending a verification code, consent is implied by your use of the service. We will ask again before using your information for any purpose this policy does not describe.
We do not use what we know about your recovery to decide what to show you in advertising.
Who we share it with
We run on a small number of services, each of which sees only what its job requires:
| Service | What it does | What it sees |
|---|---|---|
| Vercel | Hosts our websites and the member platform | Web traffic to our sites |
| Neon | Stores the platform database, in the United States | Platform records |
| Resend and Customer.io | Send our email, such as verification codes, confirmations and updates (Customer.io for the app, Resend for The Program) | Your email address and what we send you |
| Sign-in if you choose it; analytics and advertising measurement if you accept them | Sign-in identity; aggregate site usage; click identifiers | |
| Apple and Google app stores | Distribute the app and take in-app payment | Your store account and subscription status |
| Stripe | Takes payment on the web | Your payment details, which we never see |
| Cal.com | Schedules intake calls | Your name, email and the call time |
| Zoom | Carries the live rooms | That you joined; the rooms are not recorded |
| Apple Health and Health Connect | Share activity data with the app if you connect them | Only on your device |
- Service
- Vercel
- What it does
- Hosts our websites and the member platform
- What it sees
- Web traffic to our sites
- Service
- Neon
- What it does
- Stores the platform database, in the United States
- What it sees
- Platform records
- Service
- Resend and Customer.io
- What it does
- Send our email, such as verification codes, confirmations and updates (Customer.io for the app, Resend for The Program)
- What it sees
- Your email address and what we send you
- Service
- What it does
- Sign-in if you choose it; analytics and advertising measurement if you accept them
- What it sees
- Sign-in identity; aggregate site usage; click identifiers
- Service
- Apple and Google app stores
- What it does
- Distribute the app and take in-app payment
- What it sees
- Your store account and subscription status
- Service
- Stripe
- What it does
- Takes payment on the web
- What it sees
- Your payment details, which we never see
- Service
- Cal.com
- What it does
- Schedules intake calls
- What it sees
- Your name, email and the call time
- Service
- Zoom
- What it does
- Carries the live rooms
- What it sees
- That you joined; the rooms are not recorded
- Service
- Apple Health and Health Connect
- What it does
- Share activity data with the app if you connect them
- What it sees
- Only on your device
Because some of these services are outside Canada, information about you may be stored or processed in the United States, where it is subject to that country’s laws, including access by its courts and authorities. We choose providers that commit to protecting it and share no more than is needed.
We disclose information otherwise only when the law requires it, or when it is needed to protect someone’s safety. We do not sell personal information, and we do not share it for anyone else’s marketing. Facilitators and every member of our team sign a confidentiality agreement, and in The Program so does every member.
Advertising, analytics and cookies
Our websites work without cookies. Two things are optional and under your control.
Analytics. We use Google Tag Manager and Google Analytics to see how our sites are used in aggregate, and only after you accept the cookie notice. Until you do, those tags run in a mode that stores nothing about you. You can change your choice at any time from the notice.
Where you came from. If you arrive from an advertisement, a small cookie remembers the campaign and click identifiers for up to 90 days, so that if you later sign up, apply or enrol we can tell which advertising works. It holds no name and no address, and it is never joined to your application answers or your recovery.
A few technical cookies are needed to keep the sites working, such as the one that remembers your cookie choice and the ones that keep a sign-in secure. They cannot be turned off and track nothing.
We may occasionally use your email address, in hashed form, to show existing users and members updates about AlchemistOne on advertising platforms, or to stop showing you ads for things you already have. We never use anything about your gambling, recovery or health to target advertising, and nothing you tell us in the app, an application or the platform is ever sent to an advertising platform. You can opt out of this use by emailing privacy@alchemistone.io.
The app itself does not use advertising identifiers or third-party advertising trackers.
How long we keep it, and how we protect it
We keep information only for as long as it is doing a job:
| Information | Kept for |
|---|---|
| Our email list | Until you unsubscribe or ask to be removed, or after two years without opening anything we send |
| Side-quest answers you asked us to keep | As long as your place on the email list, or until you ask us to remove them |
| An application that does not lead to enrolment | Twelve months after the decision, then deleted |
| A member’s record in The Program | The length of the membership and twelve months after it ends, in case you return |
| An AlchemistOne app account | For as long as your account is open; deleted as soon as you ask us to close it |
| Contact-form and job-application information | Twelve months |
| Records required for tax or legal reasons | As long as the law requires |
- Information
- Our email list
- Kept for
- Until you unsubscribe or ask to be removed, or after two years without opening anything we send
- Information
- Side-quest answers you asked us to keep
- Kept for
- As long as your place on the email list, or until you ask us to remove them
- Information
- An application that does not lead to enrolment
- Kept for
- Twelve months after the decision, then deleted
- Information
- A member’s record in The Program
- Kept for
- The length of the membership and twelve months after it ends, in case you return
- Information
- An AlchemistOne app account
- Kept for
- For as long as your account is open; deleted as soon as you ask us to close it
- Information
- Contact-form and job-application information
- Kept for
- Twelve months
- Information
- Records required for tax or legal reasons
- Kept for
- As long as the law requires
You can ask us to delete your information sooner, and we will, except where the law requires us to keep it. Deleting an app account deletes your encrypted entries with it; they exist only on your device.
Everything travels encrypted. Access to our databases and admin tools is limited to the staff who need it, and the most sensitive records, your application answers and your own words, are restricted further still. Members can turn on two-factor sign-in. No system is perfect. If something ever went wrong with your information we would tell you, and where the law requires it we would also notify the Privacy Commissioner.
Your rights and choices
Wherever you live, you can ask to see the information we hold about you, to correct it, to have it deleted, to receive a copy in a usable format, or to withdraw a consent you gave. Write to privacy@alchemistone.io. We may ask you to confirm your identity first, because answering the wrong person would be the disclosure this policy exists to prevent. We respond within thirty days. Withdrawing consent or deleting your information may mean we can no longer provide the service, and we will tell you if so.
In Canada, we handle your information under the Personal Information Protection and Electronic Documents Act and the provincial laws that apply, including Quebec’s Law 25. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d’accès à l’information.
In the United States, if you live in California or another state with a comprehensive privacy law, you also have the right to know what we collect and why, to opt out of targeted advertising and of the sale or sharing of your information, and not to be treated differently for exercising these rights. We do not sell your information, and we do not profile you in ways that produce legal or similarly significant effects. To opt out of the one advertising use described above, email privacy@alchemistone.io. An authorised agent may act for you with written proof.
In the European Economic Area and the United Kingdom, we process your information with your consent, to provide the service you asked for, or to meet a legal obligation, and you have the rights set out in the GDPR and UK GDPR, including the right to complain to your local supervisory authority. Transfers out of those regions are protected by standard contractual clauses.
You can stop marketing email from any message’s unsubscribe link, change your cookie choice from the notice on any of our sites, and disconnect Apple Health or Health Connect from the app at any time.
Age, changes, and how to reach us
Our services are for adults. We do not knowingly collect information from anyone under eighteen, and we will delete it if we learn we have.
If this policy changes in a way that matters, we will say so on this page and, if you are a member or app user, by email. The date at the top is the date of the last change. This policy replaces the separate privacy policies previously published for the AlchemistOne app and for The Program.
AlchemistOne Inc., 3022 Birch Crescent, Regina, Saskatchewan S4W 0M2, Canada. Privacy Officer: privacy@alchemistone.io.