Privacy Policy
Effective Date: January 1, 2026
1. Introduction
Welcome to Alami ("we," "us," "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App") and our website (the "Website").
Alami is a gamified cleanup platform that rewards users for collecting trash and contributing to environmental sustainability.
By using Alami, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use Alami.
2. Adults Only (18+)
Alami is intended for adults aged 18 or older. We do not knowingly collect personal data from children.
Important: You stated there is no age verification currently implemented. If you are under 18, you must not use Alami. If we learn that a minor has provided personal data, we will delete it where required and feasible.
3. Information We Collect
We collect several types of information from and about users, including:
3.1 Personal Information
- Account Information: username, email address, phone number (optional), date of birth (if you provide it or if the App requires it for age confirmation).
- Profile Information: profile picture (optional), bio, preferred language, location (city/region).
- Payment Information (Donations/Support): donations/support contributions are processed via Stripe and/or PayPal. We do not store full credit card numbers on our systems.
3.2 Location Data
- Precise Location: GPS coordinates when you participate in cleanups, create reports/tags, or use map-based features (e.g., heat maps).
- Approximate Location: city/region for displaying nearby events, partners, and leaderboards.
- Location History: locations related to your submitted cleanups/reports may be stored for impact tracking and map features.
You can disable location services in your device settings, but this may limit functionality.
3.3 Photo & Camera Data
- Trash Photos: photos you upload for verification and community features.
- Metadata: EXIF data (such as location and timestamp) may be processed to verify authenticity and prevent fraud (depending on your device and settings).
- Face Blur: if you use face blurring or privacy protection features, faces may be blurred.
No facial recognition: We do not use facial recognition to identify individuals. Any face detection is used only for privacy protection (e.g., blurring) and not for identification.
3.4 Usage & Activity Data
- Gamification/Impact Data: trash collected (e.g., kg), TrashCoins earned, missions completed, leaderboard rankings, event participation.
- App Interactions: screens visited, features used, time spent, button clicks.
- Device Information: device type, OS version, app version, device identifiers, IP address, language settings.
- Crash & Performance Data: error logs and crash reports.
3.5 Communications
- Support Requests: messages you send to support.
- Push Notifications: device tokens to send notifications.
- Email/SMS (if used): account verification, security alerts, and important updates (depending on features enabled).
3.6 Social & Community Data
- Community Content: posts, impact messages, comments, likes, shares.
- Event Participation: events you join or organize.
- Partner Interactions: rewards redeemed, partner location interactions (as needed to deliver the reward flow).
4. How We Use Your Information
We use the information we collect for:
4.1 Core App Functionality
- cleanup/report verification (including AI/photo-based checks)
- awarding TrashCoins and enabling reward redemption
- leaderboards, rankings, achievements
- heat maps and impact visualization
- missions/challenges and progress tracking
- community events (discovery, participation, organizing)
4.2 Account Management
- authentication and account administration
- verification (email/phone OTP if implemented)
- password recovery and security
- saving preferences and settings
4.3 Payments & Donations (Support)
- processing in-app support/donations via Stripe/PayPal
- fraud prevention and payment security checks
- accounting/recordkeeping where required by law
4.4 Communication
- push notifications (missions, events, achievements, rewards)
- service messages and important updates
- customer support responses
4.5 Improvement & Analytics
- monitoring performance and fixing bugs
- understanding feature usage and improving UX
- A/B testing where applicable
- improving AI verification accuracy
4.6 Safety & Security
- preventing fraud and manipulation (e.g., fake cleanups, TrashCoin abuse)
- content moderation and enforcing community rules
- legal compliance and responding to lawful requests
5. Legal Bases (GDPR/EEA)
Where GDPR applies, we process personal data based on one or more of:
- Consent (e.g., optional permissions, marketing/analytics cookies where required)
- Contract / pre-contract steps (providing app features you request)
- Legitimate interests (security, fraud prevention, service improvement)
- Legal obligation (compliance obligations, recordkeeping where required)
6. How We Share Your Information
We do not sell your personal information.
We may share information in these circumstances:
6.1 Service Providers
We use trusted service providers to operate Alami (hosting, infrastructure, analytics, customer support tooling). Providers are expected to protect data and process it only as instructed.
6.2 Partner Businesses
When you redeem rewards:
- we may share your username and reward redemption details with the partner to fulfill the redemption.
- we do not share sensitive data like payment details, full location history, or your original photos with partners unless required for the specific redemption flow.
6.3 Payments
Stripe and PayPal process payments/donations. They receive the data necessary to complete the transaction and may process it under their own policies.
6.4 Legal Requirements
We may disclose information if required by law, regulation, or legal process, or to protect safety, prevent illegal activity, or enforce our policies.
6.5 Business Transfers
If Alami is acquired, merged, or reorganized, your data may be transferred to the new owner (you will be notified where required).
7. Data Retention
We retain data only as long as needed for the purposes described:
- Active accounts: retained while your account is active.
- Inactive accounts: after 12 months of inactivity, we may send a warning; after 15 months, account and associated data may be deleted.
- Deleted accounts: deleted within 30 days of request (unless legal obligations require longer).
- Backups: may be retained up to 90 days for recovery.
- Legal requirements: we may retain data longer if required by law.
8. Data Security
We implement reasonable technical and organizational measures to protect your data.
Examples (may evolve):
- encryption in transit (TLS)
- access controls and authentication for administrators
- monitoring and security practices
- incident response procedures
No system is perfectly secure. You are responsible for keeping your device and login details secure.
9. Your Rights & Choices
Depending on your location (including GDPR jurisdictions), you may have rights including:
- access and portability
- correction
- deletion ("right to be forgotten")
- restriction and objection
- withdrawing consent (e.g., permissions for location/camera/notifications)
You can also lodge a complaint with your local data protection authority if applicable.
To exercise rights, contact: info@alami.app
10. International Data Transfers
Alami operates globally. Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers.
11. Cookies & Tracking Technologies (Website)
The Website uses cookies and similar technologies:
- Essential (site functionality/security)
- Analytics: Google Analytics (GA4)
- Marketing: Meta Pixel, TikTok Pixel
Deployed via Google Tag Manager (GTM).
Where legally required, we request consent before enabling non-essential analytics/marketing technologies. You can manage preferences in cookie settings (if provided) and via browser controls.
For more detailed information, please see our Cookie Policy.
12. Third-Party Links
Alami may link to third-party websites (partners, social media). We are not responsible for their privacy practices. Please review their policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy. We will update the "Last Updated" date and may provide additional notice for material changes.
14. Contact Us
Roghmal Alami
Erkrather Strasse 401, 40231 Düsseldorf, Germany
Email: info@alami.app
15. Jurisdiction
This Privacy Policy is intended to comply with applicable privacy laws depending on where you live and where processing occurs (including GDPR where applicable). Disputes will be handled under applicable law.