Privacy Policy

1. Who is responsible for the data

Product: Alkateia

Personal data controller: XOSSI INOVA SIMPLES (I.S)

Trade name: XOSSI

CNPJ: 69.356.405/0001-63

Privacy contact: suporte.alkateia@gmail.com

XOSSI INOVA SIMPLES (I.S), as controller, is responsible for decisions related to personal data processing carried out directly to operate Alkateia, without prejudice to the separate responsibilities of suppliers and service providers used by the app.

2. Account data

We may process names or display names, email addresses, internal account identifiers, profile photos, and authentication information necessary for the service to operate.

Passwords are handled through the authentication system and are not stored by Alkateia in readable form.

3. Family data

We may process the family name and photo, member identifiers, assigned roles, primary and additional guardians, invitations, entry requests, and approvals.

There is no public search mechanism for families or members.

4. Messages and communication

Alkateia may process text messages and audio files necessary to deliver requested communications.

Sender identifiers, conversation identifiers, dates and times, delivery status, and information required for read receipts may also be processed.

Chat does not provide ordinary photo sharing. Photos may be used for user or family profiles.

5. Status and presence

When enabled, online status, last access, and read receipts may be processed. Temporary activity states such as “Typing...” and “Recording audio...” are also processed and shown to conversation participants. These describe activity in the app and do not represent continuous microphone recording.

Certain features may have their own privacy controls.

6. Location data

Location is used in features that depend on it, such as voluntary sharing and SOS.

Depending on the user's choice, data may include current location, location shared for 15 minutes, live location until canceled, last update time, and end time.

This information is made available according to the activated feature and to authorized family members.

7. SOS-related data

When SOS is activated, data may include the user's identifier and name, family, authorized recipients, start and end times, alert status, location, and confirmations made by members.

The alert may trigger notifications, alarms, and vibration on compatible devices.

8. Microphone and voice messages

The app may request microphone access when a user wants to record a voice message.

The microphone is not intended for continuous recording outside the features presented to the user.

9. Photos

Alkateia may access images selected by the user to set a profile or family photo.

10. Device and notifications

We may process push notification tokens, device platform, language, notification status, and settings necessary for delivery.

This allows notifications about messages, invitations, family changes, and SOS alerts.

11. Preferences

Preferences such as language, theme, sound, vibration, notifications, privacy, pinned conversations, and muted conversations may be stored.

Some may remain only on the device; others may be synchronized when necessary for service operation.

12. Subscriptions

We may process plan type, product identifier, subscription status, and access validity.

Purchases may be processed by Google Play, Apple App Store, and RevenueCat.

Alkateia does not receive full card numbers, security codes, or complete banking credentials.

13. Security and abuse prevention

We may process technical information necessary to protect accounts, prevent unauthorized access, detect abuse, verify app integrity, investigate errors, prevent fraud, and protect infrastructure.

14. Purposes of processing

Data is used to maintain accounts, manage families, deliver text and voice messages, operate location and SOS, send notifications, provide privacy controls, manage subscriptions, offer support, prevent fraud, maintain security, and comply with legal obligations.

Alkateia does not use conversation content or users' location for behavioral or targeted advertising.

15. Children and teenagers

Alkateia is primarily intended for adults responsible for a family and does not operate as a public social network for children.

A parent or guardian may allow a child or teenager in the family to use certain features.

Processing must respect the minor's protection, privacy, and best interests.

Alkateia does not sell children's or teenagers' data or use it for targeted advertising.

16. Legal bases

Depending on the context, processing may rely on applicable legal bases, including service performance, consent where required, legal obligations, protection of life or physical safety, the regular exercise of rights, and legitimate interests compatible with data subjects' rights.

17. Service providers

Google/Firebase: authentication, databases, storage, functions, security, and infrastructure.

Expo: app-related features and notifications.

RevenueCat: subscription management and validation.

Google Play and Apple App Store: purchases and subscriptions, where applicable.

18. Data sales and sharing

Alkateia does not sell users' personal data.

We also do not sell message content, audio files, or location data.

Data may be made available to authorized family members when necessary, to technology providers used to operate the service, or to authorities under a valid legal obligation.

19. International transfers

Some technology providers may operate infrastructure outside Brazil.

When international transfers occur, we seek to use mechanisms and providers compatible with applicable legal requirements.

20. Security

We use technical and administrative measures designed to reduce risks of unauthorized access, alteration, loss, or improper exposure.

These may include authentication, authorization rules, family-based separation, access controls, app integrity checks, and infrastructure protections.

No internet-connected system can guarantee absolute security.

21. Data retention

Data remains stored while necessary to maintain the account and provide requested features.

When an account is deleted, Alkateia begins removing directly associated data according to this Policy and the service's technical structure.

Records strictly necessary for legal obligations, fraud prevention, security, or the regular exercise of rights may remain for the period required for that purpose.

22. Account and data deletion

Deletion can be initiated in the app under Settings → Delete my account.

We also provide the public page Delete account.

Deletion may remove authentication, profile, photo, preferences, devices, notifications, invitations, sent messages, audio files, SOS data, access and subscription information held by Alkateia, and other data directly linked to the account.

A direct conversation that no longer has enough participants may be removed.

If the primary guardian deletes their account and other members remain, family administration may be transferred to another family member. If the account being deleted belongs to the primary guardian, contact support for guidance on continuing administration under a responsible adult.

Deleting an account does not automatically cancel a recurring Google Play or App Store subscription.

23. Data subject rights

Within the terms and limits of applicable law, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary, excessive, or unlawfully processed data, portability as regulated, information about sharing, and withdrawal of consent. Where processing relies on consent, you may request information about refusing consent and its consequences. Withdrawal may affect features that depend on that processing.

Users may exercise rights under applicable law, including requests for access, correction, processing information, and deletion where appropriate.

We may request identity verification to prevent unauthorized access to other people's data.

Contact: suporte.alkateia@gmail.com

24. Changes to this Policy

This Policy may be updated when Alkateia, legislation, or the services used change.

25. Privacy contact

Product: Alkateia

Controller: XOSSI INOVA SIMPLES (I.S)

Trade name: XOSSI

CNPJ: 69.356.405/0001-63

Email: suporte.alkateia@gmail.com

Requests concerning privacy and the exercise of rights under applicable law may be sent to the channel above.

Browsing this website

The site's informational pages do not use advertising pixels. The site has launch notification and feedback forms. When users choose to submit a form, information they provide may be processed, such as email address, optional name, message type, and message content.

The forms currently use FormSubmit to forward information to Alkateia's support email. The hosting provider and services involved in form delivery may process technical data necessary for operation and security under their own terms and policies.

Guide search works in the browser itself. Links to other websites and email contact are also subject to the respective services' terms.