Privacy policy

Ally Help is an invite-only personal safety demonstration operated by Wodo Teknoloji Anonim Şirketi. Contact bekir@studentally.com for privacy questions and requests. This policy applies to the Ally Help Android and iOS apps and this website.

What we process and why

• Account and pairing data: a demo identifier, display name, paired friend's identifier, consent status and authentication credential hashes. These control access and direct alerts to your paired friend.
• Microphone audio: in version 0.3.0 and later, after you start a 15/30/60-minute timer, nearby English speech is transcribed on your phone. Audio remains in short-lived device memory and is not uploaded. Older versions (0.2.x) send short audio windows over HTTPS to our server for transcription until you update. Capture may continue while the screen is locked or the app is in the background, with the operating system's recording indicators. Stop ends capture. We do not intentionally save raw audio files in the service.
• Transcribed speech: a recent context window is processed by the mswarm Qwen service to assess possible danger. Saying “Ally help” or a supported direct plea can trigger an alert after transcription without waiting for contextual AI. Transcripts may contain sensitive details spoken by you or others nearby.
• Location: with your permission, coordinates, accuracy and time are sent during monitoring and may be included in an alert to your paired friend. We do not continuously track location outside an active listening session. Location can be unavailable or stale.
• Alerts and session information: alert summaries, associated location, timestamps, monitoring health and acknowledgements support delivery and help your friend understand the situation.
• Device and connection information: push notification registration tokens, network addresses and technical connection metadata are used for authentication, delivery, abuse prevention and operation. Google Firebase and Apple process notification-related device identifiers.

Who receives data

Your paired friend receives safety alerts and any attached location. Our Raijin backend receives text from version 0.3.0 and later, and transcribes audio for older versions; mswarm receives transcript context for AI analysis. Cloudflare handles the encrypted public connection and may process network/security metadata. Google Firebase Cloud Messaging and Apple Push Notification service deliver generic notification text and an incident identifier; the detailed alert is retrieved after authentication. Opening a Google Maps link sends the selected coordinates to Google Maps under Google's terms.

We do not sell your personal data or use it for advertising. The app has no advertising SDK or analytics SDK. We do not train an Ally Help model using your conversations. Service providers' own processing and retention policies also apply; we do not promise zero retention by every provider.

Retention

Raw audio is processed transiently in memory. Recent transcript snippets are removed from the active database after approximately 90 seconds, and when a session stops. Alert records and delivery records expire after approximately 24 hours. Completed session records are removed within approximately 24 hours after their scheduled expiry. Cleanup runs while the server is operating. Accounts, pairing and push registrations remain until deletion or replacement. Support emails and provider security/delivery records are separate from these application retention windows.

Your choices and deletion

You can decline microphone, location or notification permission in device settings, stop a session at any time, and use Delete my account in the app. Deletion removes the account, stored speech/session data, device registration and related alerts from our active database and disconnects the friend. An already delivered notification, a recipient's screenshot or provider records cannot be recalled by the app.

You can also request account/data deletion without reinstalling the app using the instructions on our deletion page. Contact us to request access, correction or other applicable privacy rights. We may need reasonable information to verify that a request concerns your account; never email your password, invite code or authentication token.

Security and international processing

Connections use HTTPS, credentials are stored in protected device storage, and authenticated accounts can access only their paired safety data. These measures reduce risk but do not guarantee absolute security. Our service and infrastructure providers may process data in countries other than your location, including Türkiye and countries where providers operate.

Recording others and age

The demo is intended for adults aged 18 and over. It is not designed for covert surveillance, monitoring another person's phone or recording without required consent. Nearby voices may be captured during a session; ensure that your use is appropriate and permitted where you are.

Website and updates

This website does not use advertising or analytics cookies. Hosting providers may process technical request information. We will update this page when practices change and show the updated date above. Material changes affecting in-app collection will be reflected in the app's disclosures.