Privacy Policy

Last updated & effective: July 6, 2026

Alion (“Alion,” “we,” “us”) operates the Alion mobile app, a social and local-events app. This policy explains what we collect, why, who we share it with, and your rights.

Who we are: Alion is an independent app operated from Missouri, USA. Contact: riseuptutoring100@gmail.com.

1. Minimum age

You must be at least 18 years old to use Alion. This is enforced at signup — a date of birth is required, and users under 18 cannot create a profile. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

2. What we collect and why

You provide:

• Account & profile: email, name, username, date of birth, gender, relationship/intent preference, bio, and profile photos. Used to create and display your profile and to age-gate 21+ (alcohol-related) events.
• College verification (optional): if you verify a .edu email, we store that address and your school to unlock student pricing.
• Content: events you host, messages you send, RSVPs, “plan to visit” entries, and AI-assistant conversations.
• Safety actions: users you block (visible only to you) and reports you submit (used only for moderation; never shown to other users).

Collected automatically:

• Location: with your permission, we access your device’s precise location while you use the app to show nearby events and distances. If you enable location sharing, we store your latitude/longitude to power nearby and compatibility features. We also derive your approximate city from your IP address (via ipapi.co) — only the resolved city is stored.
• Usage analytics: we use PostHog to record app events (screens viewed, features used) tied to your user ID. We do not send your name, email, or message contents to analytics, and we do not record your screen.
• Crash reports: the app may send crash and error diagnostics to Sentry so we can fix bugs. Crash reporting is configured to exclude personal information.
• Payment status: when you buy Alion Pro (via Apple) or event tickets (via Stripe), we store subscription/transaction status — not your card number.

3. Photos are public

Profile and event photos are stored in publicly accessible storage. Anyone with the image URL can view them. Do not upload photos you don’t want to be public.

4. Who we share data with

We do not sell your personal data. We share it with service providers that make Alion work:

• Supabase — hosting, database, authentication, storage.
• Apple / Google — sign-in; Apple — Alion Pro purchases.
• Stripe — event-ticket payments.
• Resend — sending your .edu verification code.
• Groq — our AI assistant sends your chat messages to Groq’s large language model to generate replies. Do not share sensitive information in AI chats.
• PostHog — analytics (no direct identifiers, as above).
• Sentry — crash and error diagnostics (no personal information).
• Other users — your profile, hosted events, and activity are visible to others according to your privacy settings and follow relationships.

Event listings shown in Alion are sourced from third-party providers (Ticketmaster, Eventbrite, SeatGeek, Yelp, Google Places) using city coordinates — we do not send these providers your personal data.

5. Cookies & tracking

Alion does not use cookies. The app contains no web views, no advertising SDKs, and does not access your device’s advertising identifier (IDFA) or track you across other companies’ apps or websites. This website is a static page and sets no cookies either.

6. Legal basis (EEA/UK users)

Where applicable, we process data to perform our contract with you (providing the app), with your consent (precise location, optional .edu verification), and for legitimate interests (security, analytics, preventing abuse).

7. Retention

We keep your data until you delete your account. Email verification codes expire in 15 minutes. Analytics are retained per PostHog’s retention settings.

8. Your rights & account deletion

You can access and edit your profile in the app, and delete your account and associated data at any time via Settings → Delete Account. Deletion permanently removes your profile, photos, messages, follows, RSVPs, and hosted events from our systems. It does not retroactively remove data already processed by third parties (e.g., analytics aggregates, payment records, AI inference logs). Depending on your location you may have additional rights (access, correction, portability, objection) — contact riseuptutoring100@gmail.com.

9. Security

Data is encrypted in transit (HTTPS/TLS on all endpoints). Access to your data is restricted by row-level security so other users cannot read data they aren’t entitled to. Session tokens are stored in the device Keychain.

10. Changes

We’ll update this policy as the app changes and revise the “Last updated” date above.

11. Contact

Alion · Missouri, USA · riseuptutoring100@gmail.com