← Return
The Covenant

Privacy Policy

Effective Date: March 29, 2026

1. Introduction

Welcome to Alter. This Privacy Policy outlines how we collect, use, process, and protect your personal data when you use the Alter iOS application and related services.

Alter is radically different from traditional matchmaking apps. It is built on a private, autonomous agent architecture (the "Digital Soul"). Because your agent learns from you to negotiate matches on your behalf, we process sensitive psychological and behavioral signals.

Some product analytics are optional. Alter does not send in-app product analytics or session replay until you choose to enable them, and you can change that choice later in My Profile.

Our core privacy tenet is this: We do not build a public profile for you to be browsed by others, and we do not monetize your data through advertising. Your data is used exclusively to build, maintain, and refine your private agent representation and find your matches.

2. What We Collect and Why

We collect only what is necessary to operate your agent and deliver matches. Here is every category:

Account Information

  • Your name and email address, collected when you create an account.
  • Used to identify your account and send you service notifications (for example, reveal alerts, sign-in links, and support follow-ups).

Voice Interview

  • Voice inputs made during your onboarding or refresh interview with your agent.
  • These inputs may be streamed or sent to our AI providers to run the interview, transcribe speech, and extract personality signals, communication patterns, transcripts, and the fields that power your agent (attachment style, values, relationship intention, and related profile context).
  • Alter does not maintain a user-browsable raw audio archive. Alter may retain transcripts and structured interview metadata inside your private account state so your agent can improve over time, resume or recover onboarding when needed, and support quality and safety review.

Photos

  • Up to 10 photos you choose to upload during onboarding.
  • Photos are analysed for visual and contextual signals that inform your agent's understanding of you (energy, aesthetic, lifestyle context). They are not displayed in a public gallery. Other users do not browse your photos.

Location

  • Approximate location, including reduced-accuracy coordinates and inferred city/timezone. We do not collect or store precise GPS coordinates.
  • Used exclusively for the soft gravity matching system and related time-zone aware product behavior — to weight matches toward people in a similar location without hard-cutting anyone outside a radius.

Messages & Agent Feedback

  • Chat messages you exchange with your matches inside the app are stored to power the conversation feature and run our automated safety monitoring layer.
  • Sent messages may be processed by AI providers for automated safety analysis. If you explicitly ask for wingman suggestions, recent chat context and related match context may also be processed to generate optional suggestion features.
  • Message content is not used for advertising.
  • Your reactions to matches (ratings, reason chips, Memory Vault entries) are used exclusively to improve your agent's accuracy over time.

Optional Product Analytics

  • Alter only sends in-app product analytics after you opt in. If you decline, or later turn analytics off, future analytics collection from the app stops.
  • If you opt in, Alter may collect privacy-filtered usage events such as screen visits, flow step completion or abandonment, button taps, errors, app version, build number, general onboarding state, and high-level mode or notification settings needed to understand whether the product is working well.
  • Analytics identity is pseudonymous. Alter uses a hashed internal identifier rather than your raw email address or a public profile.
  • Alter offers a separate optional "limited replay" setting. If you enable it, replay is restricted to a small allowlist of low-risk screens. Chat, profile photos, Memory Vault, dossier content, and other sensitive screens stay excluded.

Website Usage Analytics

  • When you visit the Alter website, we may use first-party website analytics to understand aggregate traffic, page visits, and site performance.
  • These website analytics are used only to improve the site and do not change your in-app analytics preferences.

3. What We Do Not Collect

To be explicit:

  • We do not collect your contacts, calendar, or any data from other apps.
  • We do not collect precise GPS coordinates.
  • Alter currently does not offer paid content or in-app purchases in the iOS app.
  • We do not collect health or biometric data.
  • We do not collect browsing history or search history from outside the app.
  • We do not track you across other websites or apps.
  • We do not use product analytics or replay to collect message text, Memory Vault contents, dossier text, interview transcripts, profile photos, or exact location.

4. Your Agent and Your Data

This section is the most important one for understanding how Alter works differently from other services.

Nothing you share is stored as a raw public profile visible to other users. Your agent learns from what you tell it and maintains a private structured summary. That summary is used only to find and evaluate matches on your behalf.

Specifically: your voice interview content, your photos, your Memory Vault entries, and your feedback signals are processed to build and continuously refine your agent's understanding of you. This understanding lives in your agent — not in a profile that other users can browse. When your agent negotiates with another user's agent during the matching process, it does so using a structured representation of your compatibility — not by sharing your raw personal data with the other user.

5. How We Share Your Data

We do not sell your personal data. We do not share your personal data with advertisers. The following are the only circumstances in which your data may be shared:

  • Third-Party AI, Analytics, and Infrastructure Providers: Alter uses third-party services to operate. These providers process your data only as instructed by us and only as necessary to deliver the service (for example, Google Gemini, OpenAI, PostHog, Supabase, AWS, and Vercel). All providers operate under applicable contractual and platform terms.
  • Legal Requirements: We may disclose data if required by law, a valid court order, or to protect the safety of our users.
  • Business Transfers: If Alter is acquired or merges with another company, your data may transfer to the acquiring entity.

6. Data Retention

  • Your account data is retained for as long as your account is active.
  • Your interview transcripts, interview metadata, agent summary, Memory Vault contents, and match history may be retained until you delete your account.
  • If you opt in to product analytics or replay, Alter may retain privacy-filtered analytics records and any eligible replay data for debugging, product improvement, and abuse prevention for as long as reasonably needed under our provider retention settings.
  • Deleting your account removes your sign-in access immediately and starts deletion of personal data associated with your active account from Alter's primary user systems. This process is completed within 30 days and cannot be undone.
  • Limited records may remain only in de-identified or disassociated form where needed for legal compliance, safety, fraud prevention, or system integrity.
  • You can delete your account at any time from My Profile or from the signed-in verification screen.

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Correction — ask us to correct inaccurate data.
  • Deletion — request that we delete your data.
  • Portability — request your data in a machine-readable format.
  • Objection & Withdrawal — object to specific uses of your data, and withdraw consent where applicable.
  • Analytics Preferences — turn optional product analytics and limited replay on or off at any time from My Profile inside the app.

8. Safety and Security

All data in transit between your device and our servers is encrypted using TLS. Data at rest in our database is encrypted. Access to user data internally is restricted to personnel who require it to operate the service.

Alter operates an automated safety layer that monitors messages for harmful, abusive, or threatening content. This system is designed to fail open — meaning that if it encounters an error, it defaults to allowing message delivery rather than blocking it, to prevent false positives from disrupting legitimate conversations.

Where limited replay is enabled, Alter applies additional safeguards: text inputs and images are masked, network telemetry capture is disabled, and replay remains restricted to low-risk allowlisted screens rather than sensitive conversation or profile surfaces.

9. Contact

For any privacy-related questions, requests, or concerns, contact us at:

Email: adidshaft@kyokasuigetsu.xyz
Website: alter.kyokasuigetsu.xyz

a l t e r