Privacy Policy

Last updated: June 3, 2026

This Privacy Policy explains how ImpulseAlly ("we", "us", "our") collects, uses, and protects your information when you use our application and services (the "Service").

1. Information we collect

Account info: email address, display name, and an optional profile photo you upload.
Ally connections: the user IDs of people you link with via invite codes.
Purchase requests: item name, price, store URL, reason, and the approval/decline response — all shared between you and your linked ally.
Notification preferences: quiet hours and push subscription tokens for the devices on which you enable notifications.
Technical data: user-agent string for each registered device, and standard request logs (IP address, timestamp).

2. How we use it

To provide the core ally / accountability features of the app.
To send you push notifications about requests you sent or received.
To secure your account and prevent abuse.
To debug and improve the Service.

We do not sell your personal data. We do not use it for advertising.

3. Sharing

Your display name, profile photo, and the contents of any purchase request you create are visible to the ally(s) you have linked with. Nothing else about your account is shared with other users.

We use third-party processors to run the Service: Supabase (database, authentication, file storage) and a web-push delivery network (Apple, Google, Mozilla) to relay notifications to your device. They process data on our behalf under their own privacy terms.

4. Data retention

We keep your account data for as long as your account exists. You can permanently delete your account at any time from Settings. Deletion removes your profile, ally links, requests, notifications, push subscriptions, and uploaded avatar from our systems within 30 days.

5. Your rights

You can access, correct, export, or delete your data at any time. For access or export requests, contact us at the email below.

6. Children

ImpulseAlly is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children.

7. Security

All traffic is encrypted in transit (HTTPS). Data at rest is stored on our hosted database provider with industry-standard protections. No system is 100% secure; please use a strong, unique password.

8. Changes

We may update this policy. Material changes will be communicated in-app or by email.

9. Contact

Questions or requests: privacy@impulseally.com