Privacy Notice — almwell.io

Effective: 2026-05-04 Last updated: 2026-07-11

This Notice covers what almwell.io does — and does not — collect, and what we do with it. It covers the marketing site and the Almwell app (accounts, home records, and payments).

We have a small number of hard rules we treat as load-bearing — if any of them ever stop being true, we will say so on this page before that change ships:

• We do not sell your data. Not in the legal-definition sense. Not in the colloquial sense.
• We do not share your data with realtors, title companies, or anyone outside Almwell. Co-branded Snapshot relationships do not give partners access to who visited almwell.io.
• We do not run third-party ad-tech or behavioral advertising trackers on almwell.io, with one narrow, disclosed exception: Google Ads conversion measurement (see §3), which tells us whether our own Google ads lead to a purchase. It does not give Google — or anyone — access to who you are, and it is not an audience-sharing or data-sale arrangement.
• If we add a new data collection tool or share your data with a new service provider, this page will list it before that change ships.

1. Who we are

This site is operated by Ryan Clark, doing business as Almwell. Almwell is not yet incorporated; we will update this section when Almwell, Inc. is formed. Contact addresses are in §10.

2. Scope

This Notice applies to almwell.io — Almwell’s marketing site and the Almwell app (accounts, home records, and payments).

3. What we collect

• Server access logs. When your browser requests a page from almwell.io, our hosting provider records the request URL, the timestamp, your IP address, the HTTP method and status code, response size, the referrer URL (if your browser sends one), and your User-Agent string. Standard web-server fields, nothing else.
• Account information. When you create an account, we collect your email address and (optionally) OAuth identity from Google or Apple. We use this to authenticate you and send transactional email (confirmation, notifications).
• Home record data. Information you enter about your home — system ages, past work, priorities — is stored in your account and used to generate your priority plan.
• Product analytics (PostHog). We run PostHog on almwell.io pages to measure the signup funnel and how the app is used. PostHog captures page views and named product events (for example landing_view, signup_started, account_created). PostHog also automatically records interaction telemetry on the pages you visit — clicks, scroll depth, and rageclicks — to help us improve the site. Session replay: PostHog’s session-replay feature is disabled in our JavaScript configuration. We do not record page sessions. We configure PostHog with person_profiles: 'identified_only', which means anonymous visitors are not recorded as billable PostHog persons — their events are captured without a linked profile. Signed-in users are identified by their Almwell user ID. PostHog does not receive your home address, financial data, or inspection-report contents. See §6 for the provider entry.
• Advertising conversion measurement. We run Google’s conversion tag (gtag.js, part of Google Ads) on almwell.io so we can tell whether clicks on our own Google ads lead to a purchase. The tag sets Google advertising cookies in your browser (for example _gcl_au and _gcl_aw) and sends Google the pages you visit on almwell.io along with an ad-click identifier when you arrived from one of our ads. We use it only to measure our own ad campaigns. See §6 for the provider entry.
• Inbound email. If you email us using an address listed in §10, we receive your email content, address, and any attachments you send.

We do not collect: your home address, your phone number, geolocation beyond what is implied by IP, financial account credentials, or device fingerprints. Beyond the cookies set by PostHog and the Google Ads tag (described above), we set only the cookies needed to run the site itself (such as a sign-in session cookie).

4. How we use it

• To serve the site, debug it, and protect it from abuse (server logs).
• To authenticate you and communicate with you about your account (email, account data).
• To store and display your home record and priority plan (home record data).
• To measure and improve the signup funnel and product experience (PostHog analytics).
• To measure whether our own Google ads lead to a purchase (Google Ads conversion tag).
• To answer your email when you write to us (inbound email).

We do not use any of the above to build a behavioral profile for advertising, to sell to third parties, or to train models on your personal data.

5. What we do not do

• We do not sell your data — under the CCPA/CPRA “sale” definition, under the colloquial definition, or under any future definition that is reasonable on its face. If you are a California resident, you have nothing to opt out of, because we are not selling.
• We do not share your data with realtors, title companies, brokerages, lenders, insurers, or any third-party marketing partner. Co-branded Snapshot programs do not give partners access to almwell.io visitor data.
• We do not run Google Analytics, Meta Pixel, or any cross-site behavioral advertising tracker. We run PostHog (disclosed in §3) for first-party product analytics, and the Google Ads conversion tag (disclosed in §3) for measuring our own ad campaigns. Neither is an audience-sharing or cross-site tracking arrangement.
• We do not set tracking cookies beyond the PostHog and Google Ads cookies disclosed in §3, and we set no other cookies except those required to operate the site (such as sign-in sessions).
• We do not sell, rent, license, or otherwise transfer your data as part of a marketing or research agreement.

6. Service providers

We use a limited set of third-party services to run the site. Each receives only what is needed for its function, under a written contract or standard provider terms that limit use to providing the service:

• Hosting: Hetzner Online GmbH. The Rails app runs on a single Hetzner box and receives the server access logs described in §3 as part of normal operation.
• DNS and email forwarding: Porkbun, LLC. Porkbun resolves almwell.io DNS and forwards inbound mail sent to the addresses in §10 to a personal mailbox we read.
• Transactional email: Postmark (ActiveCampaign, Inc.). Postmark delivers account confirmation and notification emails to your address. We send Postmark your email address and the email content; Postmark does not receive your home record data.
• Product analytics: PostHog, Inc. The PostHog JavaScript snippet loads on almwell.io pages in production and captures page-view, funnel, and interaction events (for example landing_view, signup_started, account_created; plus autocapture of clicks, rageclicks, and scroll — input field contents are masked). PostHog’s session-replay feature is disabled in our JavaScript snippet. We do not record page sessions. For anonymous visitors, no person profile is created (identified_only mode). For signed-in users, PostHog receives their Almwell user ID and email address for identity resolution. PostHog processes this data under its DPA; we do not send PostHog your home address, inspection data, or financial information.
• Authentication (OAuth): Google LLC and Apple Inc. If you choose “Sign in with Google” or “Sign in with Apple,” the respective provider authenticates you and returns an identity token. We store only the provider name, your provider-assigned user ID, and your email address from that token. Neither Google nor Apple receives your home record data.
• Advertising conversion measurement: Google LLC. The Google Ads conversion tag (gtag.js) loads on almwell.io pages, sets the advertising cookies described in §3, and receives page-visit and ad-click data so we can measure whether our Google ads result in purchases. Google processes this data under its Google Ads terms; we do not send Google your name, email address, or anything you enter into the product.

If we add or change a service provider in a way that affects what is collected, we will update this list before that change ships.

7. Retention

• Server logs: retained for 30 days, then rotated out. Older logs are deleted, not archived.
• Account and home record data: retained for the life of your account. Deleted within 30 days of a verified deletion request.
• PostHog analytics events: retained per PostHog’s default retention policy. We do not control PostHog’s retention independently.
• Inbound email: retained for as long as needed to keep a record of the conversation, then deleted on request.

8. Your rights

• Access. Email us using §10 and we will tell you what we have on you.
• Deletion. Email us and we will delete your account and home record data within 30 days. Server access logs may take longer to fully expire because of how rotation works; deletion happens with the next rotation. PostHog analytics events are subject to PostHog’s own data deletion process.
• Correction. If something we have is wrong, email us or update it in your account settings.
• No sale opt-out is needed — see §5.

9. Other defaults you should know

• Children. almwell.io is not directed to children under 13, and we do not knowingly collect data from them. If we discover that we have, we will delete it.
• Security. We use industry-standard encryption in transit (HTTPS). No site is perfectly secure; if we have a breach that affects you, we will notify you and the appropriate authorities as required by law.
• International. Almwell operates from the U.S. and the site is hosted in the U.S. If you visit the site from outside the U.S., your data is processed in the U.S. By using the site, you understand and consent to that.
• Changes. We will update this Notice when something material changes — for example, adding an analytics tool, a service provider that processes personal data, or a covered service. Updates take effect on publish; the “Last updated” date at the top of the page is authoritative.

10. Contact

• Privacy: privacy@almwell.io
• General: hello@almwell.io

— End of Privacy Notice —