Privacy Policy
Effective Date: January 1, 2026 · Last Updated: June 2026
1. Who We Are
Ally, Inc. is a Delaware C Corporation (EIN: 37-2215465) operating Ally AI Assistant at allyapp.one. We are the data controller for all personal data processed through Ally.
Contact: info@allyapp.one · Data rights portal: allyapp.one/privacy/my-data
2. What Data We Collect
2.1 Registration Data
| Data | Purpose | Basis |
|---|---|---|
| Phone number | Account creation and OTP auth | Contract |
| Name | Personalisation and network display | Contract |
| Date of birth | Age verification | Legal obligation |
| City | Assistant context | Contract |
2.2 Contact Data
When you grant phonebook access, we import names and phone numbers. Words revealing sexual orientation, health conditions, or romantic history are blocked at import and never stored.
2.3 Conversation Data
Conversations are stored for 12 months; summaries for 3 years. You may request immediate deletion from Settings at any time.
2.4 Technical Data
Device type, OS, app version, IP address (fraud prevention only), session duration, feature usage. Analytics via PostHog (no PII). Error monitoring via Sentry (anonymised).
3. How We Use Your Data
- Provide and personalise the Ally AI Assistant
- Enable network intelligence features
- Process payments via Paddle (Merchant of Record)
- Detect and prevent fraud
- Train AI models using anonymised, aggregated patterns (k-anonymity ≥10)
We do not use your data for advertising. We do not show you ads. We do not sell your data.
4. Who We Share Your Data With
| Processor | Purpose |
|---|---|
| Anthropic (Claude API) | AI conversation processing — no data retained beyond the API call |
| Supabase (Frankfurt, Germany) | Database hosting |
| Railway (Frankfurt, Germany) | Backend hosting |
| Paddle (Paddle.com Market Ltd) | Merchant of Record — billing, payments, tax |
| Bridge (USA) | USDT payout processing and KYC for withdrawals |
5. Data Retention
| Data Type | Retention |
|---|---|
| Account data | Duration of account + 30 days |
| Conversation messages | 12 months |
| Conversation summaries | 3 years |
| Payment records | 7 years (legal requirement) |
6. Your Rights (GDPR)
- Right of access, rectification, and erasure
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
Exercise rights at: allyapp.one/privacy/my-data or email info@allyapp.one. We respond within 30 days.
7. Security
TLS encryption in transit · AES-256 at rest · Two-factor authentication for system access · Periodic penetration testing · 72-hour breach notification to supervisory authorities.
8. Contact
Email: info@allyapp.one
Data rights portal: allyapp.one/privacy/my-data
Legal: Ally, Inc. c/o Tornike Abuladze, 1328 Botetourt Gardens, Norfolk, VA 23517, USA