Privacy Policy

Last updated: 2026-04-21

Aliyah AI is a local-first personal concierge for people making Aliyah. This policy describes exactly what happens to your data when you use it. We wrote it in plain English because nothing else makes sense.

Short version: Your data lives in your browser. We never run a database. Nothing you type is stored on any server we own. When an agent needs to think or speak, your text is sent to Anthropic (for Claude) or ElevenLabs (for voice) via a thin proxy that attaches an API key and then forgets about you.

1. What we store on our servers

Nothing that identifies you. Aliyah AI has no database of user accounts, profiles, tasks, listings, or conversations. All of that lives in your browser's localStorage, which only your browser can read.

Our Cloudflare Worker processes each API request you make and discards it. It keeps one thing: a per-user daily counter (scoped to a token you set when you signed up) so abusers can't drain our budget. That counter resets every 24 hours and never leaves Cloudflare KV.

2. What stays in your browser

Your name, email, and optional profile fields (Hebrew level, target city, flight date)
A salted SHA-256 hash of your password — the password itself is never stored
Your tasks, activity log, call log, saved rental listings, contacts, roadmap milestones, and compliance checklist
Your chat history with the command center
Your theme preference

All of it is kept under the aliyah:v1 and aliyah-session keys in localStorage. You can wipe all of it by clicking Settings → Reset all data, or by clearing site data in your browser.

3. Third parties your text passes through

When an agent needs to generate a response, search the web, or draft a document, your text is forwarded to Anthropic and receives a reply from Claude. Their data-handling is governed by their privacy policy. By default, API traffic through Anthropic is not used to train their models.

When the Voice agent speaks out loud, the text is forwarded to ElevenLabs and audio is streamed back. See the ElevenLabs privacy policy.

When you click "Search real listings now," Claude uses Anthropic's built-in web search tool to query real-estate sites. Those sites see a standard web request originating from Anthropic's infrastructure — not from you directly.

4. Infrastructure

The website is hosted on Cloudflare Pages. The API proxy runs on Cloudflare Workers. Both are in Cloudflare's global network. Request logs may be retained by Cloudflare under their privacy policy; we do not inspect, retain, or sell these logs.

5. Cookies and trackers

Aliyah AI sets no cookies and loads no analytics, advertising, or tracking scripts. Your browser does load maps tiles from OpenFreeMap and fonts from Google Fonts. Those providers may see your IP address as part of serving those resources.

6. Your rights

Because we don't keep a profile on you, there is nothing to export, amend, or delete on our side. You have full control of your data via your browser. Press Settings → Reset all data and every trace is gone.

7. Children

Aliyah AI is not directed at children under 16 and we don't knowingly accept accounts from them.

8. Changes

We'll update this page and the "Last updated" date if anything material changes. Continued use after changes means you accept the revised policy.

9. Contact

Questions? Email the site owner at the address listed in the footer, or open an issue if the project is open-source.