Privacy Policy

1. Information We Collect

a. Account and Profile Information

When you create an account, we collect:

• Username, email address, and phone number (if provided)
• Password (encrypted and never stored in plain text)
• Full name, bio, and profile picture (optional)
• Account preferences and privacy settings (private account status, notification preferences)

b. User-Generated Content

We collect content you create and share on Align:

• Photos and videos uploaded to Moments
• Captions, comments, and descriptions
• Direct messages and group chat messages
• Moments you create (title, emoji, time, location, visibility settings)
• Photo and video metadata (EXIF data including capture date, camera settings; we automatically strip GPS coordinates from uploaded photos)

c. Location Data

With your explicit consent, we collect and process location data to power Align's core features:

• Precise location when you create or join a Moment (GPS coordinates)
• Approximate location to show you nearby Moments and users on the map
• Location history associated with your Moments (stored only for Moments you participate in)

Important: We do not share your exact GPS coordinates with other users. Location data is displayed as general map pins and regions. You can control location permissions through your device settings at any time. We do not sell your location data to anyone.

d. Social Features and Interactions

We collect data about your social interactions:

• Friend connections (who you're friends with, friend requests sent/received)
• Users you've blocked and users who have blocked you
• Moments you've joined or created
• Search queries and users you've viewed
• Messages sent and received (including read receipts if enabled)

e. Device and Usage Information

We automatically collect technical information:

• Device type, model, operating system (iOS version), and unique device identifiers
• IP address (used for security, fraud prevention, and approximate location)
• App version and crash reports
• Usage data (features used, time spent, screens viewed, interactions)
• Network information (carrier, connection type)

f. Device Permissions

Align may request access to:

• Camera: To take photos and videos for Moments
• Photo Library: To select and upload existing photos/videos
• Location Services: To create and discover location-based Moments
• Notifications: To send you alerts about friend requests, messages, and Moment updates

You can manage these permissions in your device settings. Denying permissions may limit certain features.

g. Payment Information

If you purchase a subscription, payment processing is handled by third parties (Apple App Store, Google Play Store, or Stripe). We do not store your full credit card information. We receive only transaction confirmations and subscription status.

h. Cookies and Tracking Technologies

On our website, we use cookies and similar technologies to maintain your session, remember your preferences, and analyze site traffic. You can control cookies through your browser settings.

i. Analytics and AI-Generated Data

We collect analytics data to improve our Services:

• We use Supabase for backend services, authentication, database hosting, and analytics
• AI-powered features may analyze your activity to provide content suggestions, friend recommendations, or automated moderation
• We may use third-party AI tools (such as OpenAI) for language processing or content moderation, if and when implemented

2. How We Use Your Information

We use the information we collect to:

• Provide the Services: Create and maintain your account, enable you to create and join Moments, facilitate photo sharing, messaging, and friend connections
• Personalize your experience: Show you relevant Moments, suggest friends, customize your map view
• Communicate with you: Send notifications about friend requests, messages, Moment invites, and important account updates
• Process payments: Handle subscriptions and premium features
• Improve our Services: Analyze usage patterns, fix bugs, develop new features
• Ensure safety and security: Prevent fraud, abuse, spam, and harmful behavior; enforce our Terms of Service
• Comply with legal obligations: Respond to legal requests, protect our rights, and comply with applicable laws

3. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Contractual Necessity (Art. 6(1)(b)): Processing necessary to provide the Services you've requested
• Legitimate Interest (Art. 6(1)(f)): Security, fraud prevention, analytics, feature development, and improving user experience
• Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations
• Consent (Art. 6(1)(a)): Location services, cookies, push notifications, and AI-powered features

You may withdraw your consent at any time through your app settings or by contacting us at joinalign@gmail.com.

4. How We Share Your Information

We do not sell or rent your personal information to anyone.

We may share your information in the following limited circumstances:

a. With Other Users (Based on Your Settings)

• Your profile information (username, full name, bio, profile picture) is visible to other users based on your privacy settings
• If you have a private account, only approved friends can see your profile and past Moments
• Content you post to Moments is visible to other participants in that Moment
• Your approximate location may appear on the map when you're active at a Moment
• Users you've blocked cannot see your profile, Moments, or contact you

b. With Service Providers

We share data with trusted third-party vendors who help us operate Align:

• Supabase: Database hosting, authentication, file storage, and backend infrastructure (servers located in the United States)
• Apple App Store / Google Play Store: Payment processing and subscription management
• Stripe: Payment processing (if applicable)
• AI Service Providers: OpenAI or similar tools for content moderation, suggestions, or language processing (if and when implemented)

These providers process data only on our behalf under strict confidentiality agreements and are prohibited from using your data for their own purposes.

c. For Legal and Safety Reasons

We may disclose information if required or permitted by law:

• To comply with legal obligations, court orders, subpoenas, or government requests
• To enforce our Terms of Service or investigate violations
• To protect the rights, property, or safety of Align, our users, or the public
• To prevent fraud, security threats, or illegal activity

d. Business Transfers

If Align is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or in-app notification before your information is transferred and becomes subject to a different privacy policy.

e. With Your Consent

We may share information with your explicit permission, such as when you choose to connect third-party services or share content outside of Align.

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

For All Users:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information through your profile settings
• Deletion: Delete your account and associated data (subject to legal retention requirements)
• Portability: Export your data in a machine-readable format

For European Users (GDPR):

• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Object to Processing: Object to processing based on legitimate interest
• Withdraw Consent: Revoke consent for location, notifications, or AI features
• Lodge a Complaint: File a complaint with your local data protection authority

For California Residents (CCPA/CPRA):

• Know: Request disclosure of what personal information we collect, use, and share
• Delete: Request deletion of your personal information
• Opt-Out: We do not sell personal information, but you can opt out of data sharing for targeted advertising (currently not applicable)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your rights, contact us at joinalign@gmail.com. We will respond within 30 days.

6. Data Retention

We retain your information only as long as necessary to provide our Services and comply with legal obligations:

• Account data: Retained while your account is active and for up to 30 days after deletion (as described in our Terms of Service)
• Messages: Retained indefinitely unless you or the recipient deletes them; deleted messages are removed from active servers within 30 days but may persist in backups for up to 30 additional days
• Photos and videos: Retained while the Moment exists; when you delete a Moment or leave a Moment, your content is removed from the Moment but may remain in other users' devices if already downloaded
• Location data: Retained only for active and past Moments you participated in; not retained after account deletion
• Payment records: Retained for 7 years per financial regulations
• Analytics data: Aggregated and anonymized data may be retained indefinitely for platform improvement

After deletion, some data may persist in backups for up to 30 days before being permanently removed. Content you shared in group Moments may remain visible to other participants even after your account is deleted, as it forms part of their shared experience.

7. Data Security

We implement reasonable technical and organizational measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted password storage (hashed with industry-standard algorithms)
• Secure database infrastructure provided by Supabase
• Access controls and permission limits (only authorized personnel can access user data)
• Regular security monitoring and incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at joinalign@gmail.com.

8. Children's Privacy

Align is not intended for users under 18 years old. We do not knowingly collect personal information from children. If we learn that a user is under 18, we will immediately terminate their account and delete their data. Parents or guardians who believe a child has provided information to Align should contact us at joinalign@gmail.com.

9. International Data Transfers

Align Social LLC is based in the United States. Our servers and service providers (including Supabase) are located in the United States. If you use Align from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

For users in the EEA, UK, and Switzerland, we rely on the following safeguards for international transfers:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Technical safeguards including encryption and access controls
• Vendor agreements that meet international privacy standards

10. Third-Party Links and Services

Align may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

11. Your Choices and Controls

You have control over your information:

• Profile Settings: Update your name, bio, profile picture, and privacy settings in-app
• Private Account: Enable private account mode to require friend request approval before others can see your profile
• Notifications: Control push notifications through in-app settings or device settings
• Location: Disable location services in your device settings (this will limit Moment functionality)
• Block Users: Block specific users to prevent them from seeing your content or contacting you
• Delete Account: Permanently delete your account and data through app settings

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Updating the "Effective Date" at the top of this policy
• Posting an in-app notification
• Sending an email to the address associated with your account

We encourage you to review this Privacy Policy periodically. Your continued use of Align after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your data, please contact us:

Align Social LLC

5943 Red Vest Way

Charlotte, NC 28269

Email: joinalign@gmail.com

We will respond to your inquiry within 30 days.