Privacy Policy

We collect: (a) Account information — email address, display name, and encrypted password; (b) Usage data — war results, match outcomes, hero rosters, alliance data, and any spend records and budgets you choose to enter; (c) Uploaded images — roster, board and defense screenshots processed by AI; (d) Technical and diagnostic data — a session cookie, and error reports that include your numeric member ID so a crash can be traced to the account it affected. We do not collect location data, contacts, photos beyond the screenshots you upload, or advertising identifiers.

We use your data to: provide and improve the service; generate personalized performance statistics; power AI-based roster and board analysis; process subscription payments; and maintain account security and diagnose faults. We do not sell your personal data, and we do not use it for advertising or tracking.

Roster, board, and defense screenshots you upload, and the text prompts you send to our AI features, are processed by our third-party AI sub-processor, Anthropic, PBC(the maker of the Claude AI models), to generate the analysis. Anthropic's handling of this data is governed by its own privacy policy and commercial terms. Images and prompts are processed in real time and are not retained by us after analysis.

Your account data is stored in a secure Postgres database hosted on Supabase. We use industry-standard encryption and access controls. Passwords are hashed using PBKDF2-SHA256 and are never stored in plain text.

We do not sell your personal information and we do not share it for advertising. We share only what each provider needs to operate the service:

• Anthropic, PBC — AI analysis of the screenshots and prompts you submit (see section 3).
• Supabase — hosting of the database that holds your account and game data.
• Vercel — application hosting, image storage, and configuration; it processes the requests your device makes to us.
• Sentry — error and performance monitoring. Error reports carry your numeric member ID, never your email address or password.
• Resend — delivery of transactional email such as password resets and receipts; it receives your email address.
• Paddle — payment processing and tax handling for subscriptions purchased on our website. Card details are handled by Paddle and never reach our servers.
• Apple — payment processing for subscriptions purchased inside the iOS app. Apple does not share your payment details with us.

Each of these providers is bound by contract to protect your data to the same standard set out in this policy, to use it only to provide their service to us, and not to sell it or repurpose it. We may also disclose data where required by law.

We keep your account data for as long as your account exists, because the service's purpose is to remember your history. Specifically: account details, hero rosters, war and event records, spend records, saved plans and AI history are retained until you delete them individually or delete your account. Uploaded screenshots are processed and discarded, not stored permanently. Error reports are retained by Sentry for 90 days. Records required for tax and accounting — subscription invoices — are retained for as long as the law requires, typically seven years.

When you delete your account, your personal information is erased immediately, as described in section 7 and on our Delete Account page. Completed alliance war records are retained in de-identified form, no longer linked to your identity, because they belong to your alliance as shared history.

Delete your account.You can delete your account yourself at any time, from inside the app: Account → Settings → Danger zone → Delete account. It takes effect immediately and needs no email or support request. You may also write to support@allios.ai.

Delete individual data. You do not have to delete your whole account to remove data. Individual heroes, logged wars, event scores and spend records can each be deleted from inside the app.

Withdraw your consent. Where we rely on your consent, you can withdraw it at any time. Stop uploading screenshots to stop AI processing; delete a spend record to remove it; delete your account to withdraw consent for everything. If you would rather we stopped a specific processing activity while keeping your account, write to support@allios.ai and we will action it. Withdrawing consent does not affect processing already carried out.

Access and correction. You may request a copy of your data, or ask us to correct it, at support@allios.ai. Depending on where you live you may also have the right to object to processing, to request restriction, or to complain to your local data protection authority.

We use a single session cookie to keep you logged in, and a cookie that remembers your language. We do not use tracking or advertising cookies.

Cogent Analytics is not directed at children under 13. If you believe a child has created an account, contact us immediately.

For privacy concerns or data requests, contact us at support@allios.ai. Allios AI LLC, Lutz, Florida, United States.