Alonix Privacy Policy

Alonix Solutions Ltd ("Alonix", "we", "us", or "our") operates the Alonix mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using Alonix, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our services, we may collect:

• Account information: name, email address, password, profile photo
• Profile details: bio, fitness preferences, activity interests
• Emergency contacts: names and phone numbers of contacts you designate for safety alerts
• Payment information: payment method details when booking services or paying activity entry fees (processed securely via third-party payment processors)
• Communications: messages you send to other users through the App's messaging feature

1.2 Information Collected Automatically

When you use the App, we automatically collect certain information including:

• Device information: device model, operating system version, unique device identifiers, battery level
• Usage data: features accessed, screens viewed, actions taken within the App
• Push notification tokens: for delivering notifications to your device

2. Location Data

2.1 Types of Location Data Collected

We collect the following location-related data:

• Precise GPS location (foreground): Your real-time geographic coordinates when you actively use the App, including when viewing maps, searching for nearby activities, and browsing the Explore screen.
• Precise GPS location (background): Your real-time geographic coordinates while the App is running in the background during an active fitness activity. This enables continuous route tracking and safety monitoring even when your screen is off.
• Route and movement data: Your GPS coordinates are recorded at regular intervals during activities to create a route path, calculate distance traveled, speed, pace, and elevation changes.
• Meeting point and activity locations: Locations you set when creating activities, including meeting points, start points, and finish points.

2.2 How We Use Location Data

Your location data is used for the following purposes:

• Live GPS tracking during activities: To show your real-time position on the map to other activity participants and to display other participants' positions to you.
• Fitness statistics: To calculate distance, speed, pace, elevation gain, and calories burned during your activities.
• Safety and emergency features: To enable SOS alerts that share your precise location with emergency contacts and activity participants when you trigger an emergency alert.
• Nearby activity discovery: To show you activities, clubs, and places near your current location.
• Route recording and replay: To record your activity route for later viewing and sharing.
• Geospatial search: To find activities, hotels, restaurants, and points of interest near specified locations.
• Navigation: To provide directions to activity meeting points.

2.3 Location Data Sharing

Your location data may be shared in the following ways:

• With other activity participants: During a live activity, your real-time location is visible to other participants in the same activity session.
• With emergency contacts: When you trigger an SOS alert, your precise location is shared with your designated emergency contacts via SMS and push notification.
• With activity organizers: Organizers can view participant locations during activities they manage for safety monitoring purposes.
• With mapping service providers: We use Mapbox for map rendering and geocoding. Your approximate location may be transmitted to Mapbox. See Mapbox's privacy policy.

2.4 Location Data Controls

You have control over your location data:

• You can grant or revoke location permissions at any time through your device's system settings.
• Location tracking during activities only occurs when you actively start or join an activity session.
• You can stop sharing your location by ending the activity session or closing the App.
• Revoking location permissions will prevent you from using GPS tracking features but will not affect other App functionality.

2.5 Location Data Retention

• Activity route data (GPS traces) is stored for the duration of your account to allow you to review past activities.
• Real-time location data during live activities is transient and is not permanently stored after the activity session ends, except as part of the recorded route.
• You may request deletion of your activity history and associated location data by contacting us or deleting your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and its features
• Create and manage your user account
• Connect you with other users for activities and social interactions
• Track and display your fitness activities and statistics
• Send push notifications about activity updates, messages, and safety alerts
• Process payments for activity entry fees and bookings
• Provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Sharing Your Information

4.1 With Other Users

Your profile information (name, photo, bio, activity statistics) is visible to other users of the App. Your activity participation and club memberships may also be visible. During live activities, your location and fitness statistics are shared with other participants.

4.2 With Service Providers

We share information with third-party service providers who assist us in operating the App:

• Mapbox: Map rendering, geocoding, and location search services
• MongoDB/Azure Cosmos DB: Database hosting and storage
• Microsoft Azure: Cloud hosting and computing infrastructure
• Stripe: Payment processing
• Twilio: SMS delivery for emergency SOS alerts
• Expo: Push notification delivery
• Cloudinary/Azure Blob Storage: Image storage and delivery

4.3 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information, including location data, to third parties for marketing or advertising purposes.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court order or government agency).

5. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of passwords using bcrypt hashing
• JWT-based authentication with token expiration
• HTTPS encryption for all data in transit
• Rate limiting to prevent abuse
• Input validation and sanitization
• CORS restrictions on API access

However, no method of electronic storage or transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request account deletion at any time, after which we will delete or anonymize your data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Data portability: Request your data in a structured, machine-readable format
• Withdraw consent: Withdraw consent for data processing at any time
• Restrict processing: Request restriction of processing of your personal data

To exercise any of these rights, contact us at the details provided below.

8. Children's Privacy

Alonix is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence, including in regions where data protection laws may differ. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the "Last updated" date. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us: