Alonify
Get the app

Privacy Policy

Last updated: 6 June 2026

Alonify (“we”, “us”) takes your privacy seriously. This page explains what information we collect, why we collect it, who we share it with, and the rights you have over your data.

Who we are

Maximilian Rechenauer (private individual), Am Stadtrand 43, 8600 Dübendorf, Switzerland. Contact: privacy@alonify.com.

What we collect

  • Anonymous account ID. When you open the app, we create an anonymous Firebase Authentication user. No name, email, or phone number is required.
  • Your display name & emergency contacts.Whatever you enter in the app — your first name, your contacts' names, their email addresses.
  • Check-in timestamps and reminder schedule. So we can know when to alert your contacts.
  • Subscription state. Whether you have a Pro entitlement, managed by Apple and RevenueCat. We do not see your payment details.
  • Email delivery logs. Each time we send an alert, we record success/failure for debugging.

We do not collect: location data, contacts list (beyond what you manually enter), microphone/camera, advertising identifiers, browsing history.

Why we collect it

  • To deliver the core service (notify your contacts if you miss a check-in).
  • To verify your Pro subscription and unlock paid features.
  • To respond to support requests.
  • To prevent abuse (rate limiting, content moderation of custom alert messages).

Where it's stored

Your data is stored on Google Firebase infrastructure (Firestore, Cloud Functions, Auth) in the United States. Email delivery is handled by Resend (United States). Subscription state is managed by RevenueCat (United States) and Apple. Transfers are covered by EU/Swiss Standard Contractual Clauses where applicable.

Third parties

  • Google Firebase — backend (Auth, Firestore, Cloud Functions, App Check). Privacy
  • Apple — distribution, in-app purchases, push notifications. Privacy
  • RevenueCat — subscription management. Privacy
  • Resend — email delivery to your emergency contacts. Privacy

This website (alonify.com)

The marketing website you're reading is a separate concern from the iOS app. It uses only the strictly necessary technologies to deliver the page, plus a single consent-gated analytics service:

  • Firebase Analytics (Google Analytics 4) — page views, visitor counts, and event funnels, used to decide which content is working. Firebase Analytics is part of the same Google Analytics 4 property that the iOS app reports into, so we can see the visitor → install → subscriber funnel end-to-end. This loads only after you click “Allow analytics” in the consent banner; if you reject or ignore the banner, no analytics scripts, cookies, or network requests are issued. When enabled, Google sets a small number of first-party analytics cookies (_ga, _gid, _gat) and processes pseudonymous data (anonymized IP, browser, referrer, screen size, coarse geo) on Google servers in the United States. Transfers to the US are covered by Google's Standard Contractual Clauses. Firebase privacy · Google privacy policy.
  • Google Fonts (Geist, Geist Mono)— when you load a page, your browser fetches the typeface files from Google's CDN. Google logs the request (IP, user-agent, referrer) for delivery and security purposes. This is needed for the site to render legibly and is treated as a strictly necessary technology under FADP / DSGVO. Google privacy policy.
  • Firebase Hosting — the static files (HTML, JS, CSS, images) are served from Google Firebase Hosting. Standard server logs (IP, timestamp, requested URL) are retained briefly by Google for abuse-prevention. No application-level tracking happens on the website server side.
  • localStorage— we store your language preference and your analytics consent decision in your browser's local storage so the site remembers your choice. You can clear them via your browser's site-data settings at any time.
  • Consent log— when you click “Allow” or “Reject” in the cookie banner, we also record that decision in our backend (Firebase Firestore, EU region) so we can demonstrate a valid opt-in as required by Art. 7(1) GDPR / revFADP. Each entry holds a random consent ID (generated in your browser, not linked to your identity), your choice, the policy version, your language, your browser's user-agent string, a timestamp, and a salted, irreversible hash of your IP address (never the raw IP). We keep these records for 12 months, after which they are deleted automatically. Legal basis: Art. 6(1)(c) GDPR (legal obligation to be able to demonstrate consent) and our legitimate interest in accountability (Art. 6(1)(f)).

We do not use third-party advertising cookies, retargeting pixels, session-recording tools, or social-media trackers on the website.

How long we keep it

We keep your data while your account is active. If your account is inactive for more than 12 months, we delete it automatically. You can delete your account at any time from inside the app (Settings → Delete account); this removes all your data immediately and cannot be undone.

Your rights

Under the Swiss Federal Act on Data Protection (revFADP, in force since 1 September 2023) and the EU General Data Protection Regulation (GDPR), you have the right to:

  • access the personal data we hold about you (Art. 25 FADP, Art. 15 GDPR);
  • have inaccurate data corrected (Art. 32 FADP, Art. 16 GDPR);
  • have your data deleted (Art. 32 FADP, Art. 17 GDPR);
  • receive your data in a portable format (Art. 28 FADP, Art. 20 GDPR);
  • object to processing based on legitimate interest (Art. 30 FADP, Art. 21 GDPR);
  • withdraw any consent you previously gave (e.g. analytics) at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, email privacy@alonify.com. We respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority:

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
  • EU: the data protection authority in your country of residence.

Children

Alonify is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has used the app, contact us and we'll delete the account.

Changes to this policy

We'll post the new version here and update the “last updated” date. Material changes will be announced inside the app.