Privacy Policy

1. Who we are

Aletheron Pte. Ltd. is the data controller for the personal data described in this policy. You can reach us at contact@aletheron.com for any privacy question or request.

2. Information we collect

We collect the following categories of personal data, depending on how you use the Services:

• Account information: name, email address, password (stored hashed) and, if you sign in with Apple, Google or Facebook, the identifier and basic profile information those services share with us.
• Subscription and payment information: subscription status, plan and transaction identifiers. Payment card details are handled by our payment processors and app stores; we do not store full card numbers.
• Content you provide: questions you ask our agents, watchlists, preferences and messages you send to support.
• Usage information: pages and features used, timestamps, approximate location derived from IP address, device type, operating system, browser and language.
• Technical logs: IP address, request logs and error reports needed to operate and secure the Services.

We do not knowingly collect special categories of personal data (such as health or biometric data) and ask that you do not provide them.

3. How we use information

We use personal data to:

• Provide, operate and improve the Services, including answering your questions and maintaining your account.
• Process subscriptions and payments and send transactional messages such as receipts and service notices.
• Personalise features such as watchlists and alerts you have set up.
• Monitor performance, prevent fraud and abuse, and keep the Services secure.
• Comply with legal obligations and enforce our Terms of Service.
• With your consent, send product news; you can opt out at any time.

Where the GDPR applies, our legal bases are performance of a contract, our legitimate interests (operating and securing the Services), compliance with legal obligations, and your consent where we ask for it.

4. AI and automated processing

Our products use AI models and autonomous agents to analyse data and answer questions. Questions you submit may be processed by third-party model providers under contracts that prohibit them from using your data to train their models. We do not make decisions with legal or similarly significant effects on you solely by automated means.

5. How we share information

We do not sell personal data. We share it only with:

• Service providers who process data on our behalf, such as cloud hosting, content delivery, email delivery, payment processing, analytics and AI model providers, each bound by contractual confidentiality and data-protection obligations.
• App stores and platforms (for example Apple and Google) when you purchase through them, in accordance with their own privacy policies.
• Authorities, courts or other parties when required by law, to protect our rights or the safety of users, or to investigate fraud.
• A successor entity in the event of a merger, acquisition or asset sale, subject to this policy.

6. International transfers

We operate globally. Your data may be stored and processed in Singapore and in other countries where our service providers operate, including the United States and the European Union. Where required, we use appropriate safeguards such as standard contractual clauses or transfer mechanisms recognised under the PDPA.

7. Retention

We keep personal data only as long as necessary for the purposes described above. Account data is retained while your account is active and deleted within 30 days of a deletion request, except where we must keep it longer to comply with legal, tax or accounting obligations, resolve disputes or enforce our agreements. Technical logs are retained for a limited period for security purposes.

8. Security

We protect personal data with encryption in transit, access controls, hashed credentials and monitoring. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the relevant authorities as required by law.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy in a portable format.
• Correct inaccurate or incomplete data.
• Delete your data (see “Delete your account” on our Support page).
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority, such as the Personal Data Protection Commission of Singapore or your local data protection authority.

To exercise these rights, email contact@aletheron.com from the address associated with your account. We will respond within the time required by applicable law and may ask you to verify your identity.

10. Sign in with Apple, Google and Facebook

If you create an account using a third-party sign-in provider, we receive a unique identifier and the profile information you authorise (typically name and email). If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address only. We do not receive your password for those services.

11. Cookies and analytics

Our websites use strictly necessary cookies (for example to keep you signed in) and privacy-preserving analytics that do not track you across other sites. We do not use advertising cookies or third-party advertising networks.

12. Children

The Services are not directed to children under 18 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Third-party links

Our Services may link to third-party websites or services. Their privacy practices are governed by their own policies, which we encourage you to read.

14. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date and, for material changes, notify you through the Services or by email.

15. Contact

Aletheron Pte. Ltd., Singapore. Email: contact@aletheron.com.