Privacy Policy

Ally is designed for parents and caregivers who support a child with routines and emotional regulation. Children may use Ally with adult setup, supervision, or support. This Privacy Policy explains what information we collect, how we use it, and the choices available to families.

By using Ally, you confirm that you are the parent or guardian of each child whose profile you create in the app, or have parental responsibility for them.

You can use Ally without an account. Your family data then stays on your device, apart from the analytics and purchase service data described below. If you create an account, your family data is also stored on our cloud servers.

Ally is provided by Avakodo Sdn Bhd, 7, Jalan Cassia U17/72, Elmina West, 40160 Shah Alam, Malaysia.

On your device: child name, age and gender if you enter them, avatar photo, routines, tasks, task completion, preferences, and your onboarding answers are stored in the app on your device. Onboarding answers, including age and gender entered during onboarding, are not copied to your cloud account or sent to our analytics provider. We only record how many questions were answered.

Account: if you sign in, we collect your email address and create an account ID. We email you a 6-digit code to sign in, so there is no password. Your device keeps you signed in until you sign out.

Agreement records: when you agree to these terms, this policy, and the parent or guardian confirmation, we record which versions you agreed to, when, and your app version and device platform. If you use Ally as a guest, this stays on your device until you sign in. Records are kept with your account and deleted when you delete it.

Cloud sync: when you sign in, the family data on your device is copied to our cloud servers automatically and stays in sync. This covers each child’s name, avatar photo, and any age and gender saved in the child’s profile; routine names and times of day; task titles, descriptions, icons, colors, durations, and order; the days, times, and dates tasks are scheduled or skipped; which tasks were completed on which dates and by which account; and your household’s time zone. If your device and your account hold different data, Ally asks you what to keep.

Messages to parents: at the end of an emotional support session, a child can type a message for their parents, or tap Speak and say it. Saving a message needs an account. The text is saved to private cloud storage with the child’s name and the time, and grown-ups can read it in Reward Wishes in the Grown-up Zone.

Child photos: a grown-up can choose an avatar photo from the device’s photo library in the Grown-up Zone. It stays on the device if you are not signed in. Once you sign in, it is uploaded to private cloud storage and the device copy is removed.

Earlier recordings and drawings: the current version of Ally does not record children’s voices or ask for drawings. If an earlier version saved a voice recording or drawing to your account, you can view or play it and delete it in Reward Wishes in the Grown-up Zone.

Speech recognition: when a child taps Speak, your device turns their words into text using its on-device speech recognition, which needs microphone and speech recognition permission. No audio is recorded or sent to us. If the device cannot do this on-device, Speak is unavailable and the child can type instead.

Emotional support: the choices a child makes in an emotional support session are not saved on our cloud servers and are not sent to our analytics provider. The summary shown at the end of a session is not saved. When a child collects a stamp, it is saved on the device only, and each stamp reflects the feeling the child picked. Stamps are removed by Delete my data or when the child’s profile is removed.

Reminders and widgets: task reminders are scheduled on your device and are not sent through our servers. Reminders can show a task name and your child’s name, including on a lock screen, depending on your device’s notification settings. The “My next thing” widget shows task names, icons and times and how many tasks are done on the screen where you place it, so anyone who can see that screen can read them. The widget does not display your child’s name. You can turn off reminders for a task, turn off notifications in device settings, or remove the widget.

Purchases: if you subscribe to Premium, we receive your subscription details through RevenueCat, including the product, status, store, renewal and expiry dates, and transaction event details. We do not receive your full payment card details.

If you contact support, we collect your email address, your message, your name if you choose to give it, and your app version, build, and device platform and system version so we can help you. If you are signed in, your account email is filled in for you and you can change it before sending.

Ally collects app usage events and crash reports, as explained under Analytics and Tracking.

We use information to provide the app experience, sign you in, back up and sync your family data, let grown-ups read messages from their child and play earlier reward wishes, remember routines and preferences, manage Premium, improve reliability, troubleshoot problems, and communicate with parents or caregivers about Ally when needed.

We process information only where necessary to provide Ally, maintain security, improve functionality, comply with legal obligations, or where consent has been provided.

We do not sell, rent, or trade personal information. We do not use child profile information for advertising.

Information from and about children is the most sensitive information Ally handles. Ally is intended for parent or caregiver-controlled family use and is not designed for independent use by children under the age of 13.

Ally is a family support tool controlled by an adult. We do not knowingly ask children to create accounts or provide contact information directly. Accounts are for adults, and the Grown-up Zone is behind a grown-up check.

Ally treats anyone under 18 as a child. A child’s information is collected only with the consent of a parent, guardian, or person with parental responsibility, who is the person setting up Ally. That consent covers the information described in this policy, including a child’s name and photo.

Depending on where you live, laws such as Malaysia’s Personal Data Protection Act 2010, the Children’s Online Privacy Protection Act in the United States, and the GDPR in the European Union may apply. You can ask to see, correct, or delete your child’s information, or withdraw consent, in the Grown-up Zone or by emailing privacy@avakodo.com from your account email address. We may ask you to confirm a code sent to that address before acting on a request.

Children reach the Speak button during an emotional support session without a separate grown-up check, so please decide with your child whether to allow microphone access.

Parents and caregivers should avoid entering sensitive information that is not needed to use the app, including in typed onboarding answers. A nickname can be used for a child profile.

Ally uses PostHog for product analytics and crash reporting. It starts after you continue past the terms notice during setup, and it runs whether or not you sign in. You can turn it off at any time with App analytics in the Grown-up Zone.

PostHog receives: which screens are opened; app open and close events; which features are used, with counts such as the number of tasks and children; task timing details such as time of day and repeat pattern; error reports and native crash reports; how many questions you answered in onboarding; and app and device details such as app version, device name and model, screen size, operating system, language, and time zone. Events are linked to a random ID. When you sign in, they are linked to your account ID, so we can help with support issues. Your email address is not sent.

PostHog does not receive a child’s name, age, gender, or ID, your onboarding answers, emotional support choices, messages to parents, routine or task titles, voice recordings, or photos. An error report could include text that was on its way through the app when the error happened.

Ally does not use advertising, cross-app tracking, session replay, heatmaps, or touch autocapture. IP-based location lookup is disabled and IP address anonymization is turned on in our PostHog project.

Supabase provides our sign-in, database, file storage, and server functions. It holds your account details, cloud family data, messages to parents, voice recordings, photos, subscription records, and deletion requests, and it handles sign-in code emails, which Mailjet delivers. Mailjet receives your email address and the sign-in code in order to send them.

PostHog processes usage events and crash reports on our behalf.

RevenueCat manages subscriptions. Its software runs in the app and receives purchase information and an app user ID, which is your account ID once you sign in, and a random ID before that.

Apple and Google process in-app purchases as the billing parties, and receive your purchase and payment details directly under their own terms.

Support requests are collected through Tally, a form provider, which processes the details you submit on our behalf.

We use reasonable technical and organizational measures to protect information from unauthorized access, disclosure, alteration, or destruction. Data is sent to our service providers over encrypted connections. Voice recordings and photos are kept in private storage, access is limited to signed-in members of your household, and files open through temporary links.

No method of electronic storage or internet transmission is completely secure, and we cannot guarantee absolute security.

Our service providers may process information in countries outside your place of residence. Our Supabase project is hosted in the Singapore region and our PostHog project uses PostHog’s US cloud. RevenueCat runs on Amazon Web Services and uses infrastructure providers in the United States. Tally and Mailjet store data in Europe. Where the law requires a safeguard for sending personal data to another country, we rely on the protections in each provider’s data processing terms, such as standard contractual clauses. We take reasonable steps to ensure information is handled securely and according to this policy.

Local app data remains on your device until you clear it in the app, reset the app, or uninstall the app. Signing out does not remove it from your device or from your account.

Cloud family data is kept until you delete your account. Messages to parents and earlier voice recordings stay until a grown-up deletes them in Reward Wishes or the account is deleted. Each household can keep up to 50 messages and 20 recordings. An avatar photo stays until it is replaced or removed, or the account is deleted.

Items you remove, such as a task or routine, are permanently deleted from our cloud servers 90 days after you remove them. Task completion history is deleted after 365 days. Account deletion requests are deleted 90 days after we resolve them. A scheduled job does this every night.

Delete my data in the Grown-up Zone clears your family data from this device. It is not account deletion and you should not rely on it to remove recordings, photos, or your account from our cloud servers.

To delete your account and cloud data, choose Delete account under Account & Plan in the Grown-up Zone. If you cannot sign in, use the form at https://www.myally.my/delete-account/ or email privacy@avakodo.com from your account email address, and we will handle it manually. Deletion removes your account, household, child profiles, routines, task history, voice recordings, shared items, and photos from our cloud servers and clears this device, and asks RevenueCat and PostHog to delete your records.

Some records remain after deletion. Subscription billing is handled by Apple or Google and RevenueCat, which keep their records under their own policies. We keep a copy of subscription events for finance, fraud, and tax purposes, with your identity removed. PostHog keeps usage events for at least one year, unless your account is deleted first or you ask us to delete them. We keep support messages in Tally for as long as we need them to help you. They are not removed automatically, but you can ask us to delete them. Deleted data can remain in server backups for up to 7 days. Deleting your account does not cancel an Apple or Google subscription.

You may contact us to request access, correction, or deletion of information associated with your use of Ally.

For privacy questions or requests, contact us at privacy@avakodo.com.

We may update this Privacy Policy as Ally changes. The latest version will be available at this URL. If a change needs your agreement, Ally will ask a grown-up to agree again before the app can be used.