PRIVACY POLICY

Privacy Policy

How Aleneapp ApS processes personal data in connection with the AleneApp website and planned mobile service.

Effective date: 21 August 2026 · Version: 1.0

In brief. We use personal data to provide and secure the website and, when released, the AleneApp service. We do not sell personal data, use it for third-party advertising or share it with trusted contacts unless the user has chosen to involve them. AleneApp is not an emergency or medical service.

1. Who is responsible for your data?

Aleneapp ApS is the data controller for the processing described in this Privacy Policy.

Controller
Aleneapp ApS

CVR number
46118847

Address
Strandtoften 50, 8250 Egå, Denmark

Telephone
+45 23 23 39 57

Privacy email
[email protected]

2. Scope of this policy

This policy applies when you:

visit the AleneApp website;
contact us by email or telephone;
use, test or are invited to the AleneApp mobile service when it becomes available; or
act as a trusted contact for another user.

The public app is still in development. Before beta testing or public release, we will update this policy where necessary to identify the actual technology providers, app permissions, retention settings and data flows used in the released version.

3. Roles used in this policy

Member: an adult who uses AleneApp to complete check-ins and share relevant status information.
Trusted Contact: an adult invited by a Member to receive selected status information and notifications.
Visitor: a person who uses the public website or contacts us.
Service: the website and, when available, the AleneApp mobile application and related systems.

4. Personal data we process

4.1 Website and communications

Technical and security data
IP address, date and time, requested page, browser and device type, referral information, server events and security logs generated by the hosting environment.

Inquiry data
Your name, email address, telephone number, organisation and the content of messages you choose to send us.

The minimum viable website is intended to operate without behavioural advertising, third-party tracking, embedded social-media tools or non-essential cookies. If that changes, we will update this policy and request consent where required.

4.2 AleneApp mobile service

When the app becomes available, the data needed will depend on the features you use. It may include:

Account and profile data
Name, email address, login identifier, user role, language, settings and authentication records.

Trusted-circle data
Invitations, invited contact details, relationship labels, acceptance status and the members of a private trusted circle.

Check-in and wellbeing data
Scheduled check-in times, completed or missed check-ins, confirmation that everything is okay, a request to be contacted and optional information voluntarily entered by the Member.

Notification and interaction data
Reminder settings, push-notification token, notification status, acknowledgement and resolution records.

Subscription and transaction data
Plan, subscription status, purchase or receipt identifier and transaction history. We do not need to receive full payment-card details for App Store purchases.

Device, diagnostics and security data
App version, operating-system version, device type, crash reports, performance events, fraud-prevention signals and security logs.

Support and preference data
Support correspondence, feedback, consent records and communication preferences.

Possible health-related information. A check-in or optional message may, depending on its content, reveal information about health or wellbeing. Where information qualifies as special-category health data under the GDPR, we will process it only with an appropriate Article 9 condition, normally the user's explicit consent. Users should not enter medical details unless the app clearly asks for them and explains why they are needed.

5. Why we use personal data and our legal bases

Provide the website and answer inquiries

Typical data: Technical data and inquiry data

Legal basis: Legitimate interests in operating our website and communicating with interested persons; steps requested before a possible contract where relevant.

Create and administer accounts

Typical data: Account, profile and authentication data

Legal basis: Necessary to perform the user agreement.

Provide check-ins, trusted circles, reminders and notifications

Typical data: Trusted-circle, check-in, notification and device data

Legal basis: Necessary to perform the user agreement. Explicit consent where the processing involves special-category health data.

Send an invitation requested by a Member

Typical data: Invited person's contact details and invitation status

Legal basis: Our legitimate interests and those of the Member in establishing the requested private circle. Invitations are service messages, not marketing.

Secure, troubleshoot and improve the Service

Typical data: Technical, diagnostic, security and limited usage data

Legal basis: Our legitimate interests in security, reliability, fraud prevention and service improvement.

Manage subscriptions and comply with accounting or other legal duties

Typical data: Subscription, transaction and account data

Legal basis: Performance of the user agreement and compliance with legal obligations.

Send optional news or marketing

Typical data: Email and communication preferences

Legal basis: Your consent. You may withdraw it at any time.

Establish, exercise or defend legal claims

Typical data: Relevant account, communication and security records

Legal basis: Our legitimate interests and, where applicable, legal claims under Article 9(2)(f) GDPR.

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against the rights and reasonable expectations of the people affected.

6. How information is shared

We may share personal data only as needed with:

People selected by the Member. A Member chooses the Trusted Contacts who may receive status information and notifications within the private circle.
Service providers acting for us. These may include website and cloud hosting, authentication, notification delivery, email, customer support, security, diagnostics, subscription administration and professional advisers. They are bound by appropriate confidentiality and data-processing obligations.
Apple and other platform providers. App distribution, device notifications and App Store purchases are also subject to the platform provider's own terms and privacy practices.
Authorities or other parties where legally required. We may disclose information to comply with law, protect rights and security, investigate misuse or respond to a valid legal request.
A successor in a corporate transaction. Information may be transferred as part of a merger, financing, reorganisation or sale, subject to applicable data-protection requirements.

We do not sell personal data, disclose it to data brokers or use it for third-party behavioural advertising.

7. International transfers

We aim to use providers that process data in the European Economic Area. If personal data is transferred outside the EEA, we will use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and supplementary safeguards where required.

You may contact us for information about the applicable safeguards.

8. How long we keep information

We retain personal data only for as long as needed for the purposes described above, taking account of legal duties, security needs and the possibility of disputes.

Website security logs
Kept for a short operational period set by the hosting provider, unless longer retention is necessary to investigate a security incident or comply with law.

General inquiries
Normally deleted or anonymised within 12 months after the inquiry is closed, unless further retention is reasonably necessary.

Unaccepted invitations
Deleted after the invitation has expired and is no longer needed, subject to limited security records.

Active account and trusted-circle data
Kept while the account is active and needed to provide the Service.

Check-in history
Kept for the period needed to provide the feature and shown in the app's settings or service information before launch. It will not be retained indefinitely by default.

Closed accounts
Deleted or anonymised without undue delay, subject to a limited technical period for secure deletion from backups and any records we must keep by law.

Transaction and legal records
Kept for the period required by accounting, tax, consumer-protection or limitation rules.

9. Your choices and data-protection rights

Subject to the conditions in applicable law, you may have the right to:

receive information about and access your personal data;
correct inaccurate or incomplete data;
request deletion of data;
restrict processing;
receive data you provided in a structured, commonly used and machine-readable format, and request transfer where applicable;
object to processing based on legitimate interests;
withdraw consent at any time, without affecting earlier lawful processing; and
complain to a data-protection supervisory authority.

Send requests to [email protected].

We may need to verify your identity. We will respond within the period required by applicable law.

10. Account deletion

When the app supports account creation, users will be able to initiate deletion of their account through an accessible account setting or another direct deletion flow.

Deletion will cover the account and associated personal data unless retention is legally required.

Cancelling an App Store subscription and deleting an AleneApp account are separate actions.

11. Security

We use appropriate technical and organisational measures designed to protect personal data, including access control, secure development, encryption where appropriate, logging, backup controls and supplier due diligence.

No system can be guaranteed completely secure, so users should protect their devices and account credentials and contact us if they suspect unauthorised access.

12. Children

AleneApp accounts are intended for adults aged 18 or older.

The Service is not directed to children, and we do not knowingly create accounts for children.

Please contact us if you believe a child has provided personal data to us.

13. Automated decision-making

We do not use personal data to make solely automated decisions that produce legal effects or similarly significant effects for users.

Service reminders and status notifications are rule-based features intended to support human follow-up, not automated medical or safety assessments.

14. External services and links

The Service may link to or depend on third-party platforms.

Their processing is governed by their own privacy notices when they act as independent controllers.

We encourage users to review those notices.

15. Changes to this policy

We may update this Privacy Policy as the Service develops or legal requirements change.

The current version and effective date will be published on this page.

We will provide additional notice of material changes where appropriate.

16. Contact and complaints

Questions or requests should be sent to [email protected] or to:

Aleneapp ApS
Strandtoften 50, 8250 Egå, Denmark

You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Telephone: +45 33 19 32 00
Email: [email protected]

You may also complain to the supervisory authority in the EEA country where you live or work.

AleneApp is a product of Aleneapp ApS · CVR 46118847 · Strandtoften 50, 8250 Egå, Denmark · +45 23 23 39 57 · 21 August 2026