Privacy Policy
Effective date: April 29, 2026
Overview
ALONA is a centralized learning and management platform for your company's proprietary data. This Privacy Policy explains what information ALONA collects, how it is processed, and which third-party AI subprocessors we use to deliver chat, voice transcription, and document understanding features. It applies to ALONA's web and mobile applications.
We are committed to two principles: your data belongs to you, and your data is never used to train third-party AI models. The sections below describe how we operate within those commitments.
Information We Collect
- Account information. Email address, full name, company affiliation, and a unique user identifier.
- Workspace content. Documents you upload, photos and scans you capture, equipment records and asset specifications, daily logs, project notes, and chat conversations created within your workspace.
- Voice recordings. Audio you record when using voice input. Recordings are sent to our backend for transcription and are not retained after the transcript is returned.
- Product interaction and analytics. Anonymous feature usage and reliability telemetry used to improve product quality.
- Authentication data. Session tokens stored securely on your device (iOS Keychain / Android Keystore).
How We Use Information
- Provide, operate, and secure the ALONA platform — including storing your workspace content, authenticating your sessions, and enforcing access controls.
- Process user-initiated requests through AI subprocessors — including chat answers, voice transcription, document and image understanding, and read-aloud audio generation.
- Improve product reliability and performance through aggregated, anonymous telemetry.
- Support onboarding, troubleshooting, and customer support interactions.
ALONA does not sell personal information, and does not use your data, or permit any subprocessor to use your data, to train AI models.
Third-Party AI Subprocessors
ALONA uses the following third-party services to deliver core functionality. The mobile app routes all AI requests through our backend; the app itself does not communicate directly with any third-party API. We have entered into data processing agreements with each provider that contractually prohibit use of your data for model training and require equivalent data-protection standards to those described in this policy.
OpenAI (Whisper)
Provider privacy policy- Purpose:
- Speech-to-text transcription of voice messages submitted in-app.
- Data shared:
- Audio recordings (m4a) you record when using voice input.
- Jurisdiction:
- United States
- Used to train AI models:
- No.
OpenAI (GPT)
Provider privacy policy- Purpose:
- Generating answers to chat questions, enhancing document transcripts, and powering retrieval-augmented responses over your workspace documents.
- Data shared:
- Chat messages, document transcripts, equipment metadata, and the question text you submit.
- Jurisdiction:
- United States
- Used to train AI models:
- No.
Google (Gemini)
Provider privacy policy- Purpose:
- Image and document understanding — extracting text and structured asset specifications from photos, scans, and PDFs you upload.
- Data shared:
- Photos, scanned images, and PDFs you choose to upload or capture.
- Jurisdiction:
- United States
- Used to train AI models:
- No.
ElevenLabs
Provider privacy policy- Purpose:
- Voice synthesis — generating spoken audio from ALONA's text replies when you enable the read-aloud feature.
- Data shared:
- Response text generated by ALONA in answer to your questions.
- Jurisdiction:
- United States
- Used to train AI models:
- No.
Supabase
Provider privacy policy- Purpose:
- Authentication, database storage, and file hosting for your workspace's documents, conversations, and account data.
- Data shared:
- Email address, hashed credentials, workspace content (documents, photos, conversation history, asset records), and access logs.
- Jurisdiction:
- United States (with regional storage available)
- Used to train AI models:
- No.
Google (Drive & Gmail OAuth)
Provider privacy policy- Purpose:
- Optional integrations — when you choose to connect Drive or Gmail, ALONA reads file metadata or message metadata you select to pull into chat context.
- Data shared:
- Drive file metadata (name, ID, MIME type) and Gmail message metadata (subject, sender, date, snippet) for items you explicitly select.
- Jurisdiction:
- United States
- Used to train AI models:
- No.
Consent
On the first launch of the ALONA mobile app, you are presented with a consent screen that names every AI subprocessor listed above and the data each one processes. You must affirmatively accept this disclosure before any feature that transmits your data to a subprocessor becomes available. Consent is recorded on your device and can be reviewed at any time. iOS system permission prompts (microphone, camera, photo library, speech recognition) name the relevant subprocessors in their usage descriptions.
Data Retention
- Workspace content is retained for as long as your workspace is active. You may request deletion at any time.
- Voice recordings are not retained after the transcript is returned. Each AI subprocessor maintains its own short-term retention for abuse monitoring (typically 30 days at OpenAI, with comparable terms at the others), after which submissions are deleted.
- Authentication session tokens persist on your device until you sign out or revoke the session.
- Anonymous analytics telemetry is retained in aggregate form and is not linked to identifiable workspace content.
Security
Data is encrypted in transit (HTTPS/TLS) and at rest by our primary storage provider (Supabase). Authentication tokens are stored on-device in the iOS Keychain or Android Keystore, never in plain shared preferences. Mobile-app traffic to AI subprocessors is proxied through our authenticated backend; the app itself does not hold third-party API keys.
Your Choices and Requests
You can request access to, correction of, or deletion of your data at any time by contacting support@askalona.ai. Workspace administrators may also manage account and content settings directly in the application. You may withdraw your consent to AI processing at any time by signing out and declining the consent screen on the next launch — features that depend on AI processing will become unavailable until consent is restored.
Changes to This Policy
If we add, remove, or change a third-party AI subprocessor, we will update this policy and bump the effective date above. The ALONA mobile app re-prompts for consent on the next launch after a substantive change.
Contact
For privacy questions, requests, or to exercise any of the rights described above, contact support@askalona.ai.