Altys Privacy Policy

Effective Date: January 27, 2026

Altys.app and the Altys App are owned and operated by Great AI LLC. At Great AI LLC, we are committed to providing a secure and safe learning environment. This policy explains how we collect, use, and protect the data of users and parents within the Altys platform, specifically for our users in the United States.

1. Our Commitment to Privacy by Design

Altys is built with the "best interests of children" as our primary design consideration.

  • Zero-Knowledge Age Verification: We prioritize the use of App Store APIs (like Apple's PermissionKit) to verify age without storing sensitive government identifiers.
  • Anonymization-as-a-Service: We use a "De-identification by Default" protocol. All identifying information is stripped from children prompts before they are processed by our AI models to prevent profiling.
  • No Data Sales: Great AI LLC does not sell personal information to third parties or data brokers.

2. Information We Collect

We distinguish between the data needed to manage your account and the data generated during tutoring sessions.

  • Administrative Data: Parent's email address, the user's name, birth year, and verification signals from the App Store.
  • Conversational & Educational Data: We collect chat history and progress metrics to provide personalized tutoring experience. This data is anchored in a verified database to ensure accuracy.
  • Voice Data: Altys offers voice-to-text features. In compliance with federal updates, we obtain Verifiable Parental Consent (VPC) before any voice data is processed by our cloud servers.
  • Verification Data: If we collect a full date of birth or ID for verification, that data is immediately deleted once the age category is confirmed.

3. Third-Party Service Providers

Altys uses the following third-party services to operate. None of these services are used for advertising or tracking purposes.

  • OpenAI: Powers conversational tutoring. Children's prompts are de-identified before processing.
  • Cartesia: Provides voice synthesis for the Luma companion character.
  • Firebase (Google): Used for parent account authentication (Firebase Auth), app data storage (Firestore), push notifications (Firebase Messaging), and crash diagnostics (Crashlytics). No user-identifiable data is included in crash reports.
  • RevenueCat: Manages subscription billing and purchase verification. Uses anonymous user identifiers only. No personal information is transmitted.
  • Amplitude: Product analytics to improve the app experience. Uses anonymous device identifiers. No advertising identifiers (IDFA) are collected. No data is shared with advertisers.
  • Contractual Protections: All third-party partners are contractually prohibited from using Altys user data for their own purposes, including model training.

4. How We Use Artificial Intelligence

Altys uses generative AI to provide Socratic tutoring.

  • AI Providers: We utilize Large Language Models (LLMs) from OpenAI, with voice synthesis by Cartesia.
  • Contractual Protections: All our AI partners are contractually prohibited from using Altys user logs for "General Model Training".
  • AI Disclosure: Users are notified at launch that they are interacting with an AI system that may occasionally make mistakes or "hallucinate".

5. COPPA Compliance

Altys is designed to comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. Parents may review, request deletion of, or refuse further collection of their child's data at any time.

6. Verifiable Parental Consent (VPC)

We use a tiered approach to ensure parents are in control:

  • Store-Level Signals: For users in Texas and other regulated states, we use the "Affiliated Parent Account" signal provided by your device's app store.
  • Credit Card Verification: When applicable we use a $0.99 credit card transaction to confirm the account holder is an adult.
  • Revocation: If a parent revokes consent via the app store dashboard, we receive an immediate digital signal and will restrict the minor's access to Altys instantly.

7. Data Retention & Deletion

  • Sunset Clause: If an account is inactive for more than 12 months, all conversational logs are purged or fully anonymized.
  • Parental Rights: Parents can request the deletion of their child's data at any time via the app parental control settings or by contacting us at privacy@altys.app.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS) and at rest, access controls, and regular security reviews. In the event of a data breach that affects personal information, we will notify affected parents promptly in accordance with applicable law.

9. International Users

For users in the European Union, we process data in accordance with the General Data Protection Regulation (GDPR). For users in the United Kingdom, we comply with the UK Age Appropriate Design Code (AADC), including high privacy defaults and age-appropriate design. Parents and guardians in these regions have the right to access, rectify, or erase their child's personal data by contacting us at privacy@altys.app.

10. Significant Changes

We will notify you and obtain new consent before making "Significant Changes," such as changing our AI model provider, altering our age rating, or collecting new categories of sensitive data (like geolocation).

11. Contact Us

For questions regarding your privacy, please contact our Privacy Officer:

Great AI LLC
Email: privacy@altys.app