Privacy Policy

Last Updated: March 1, 2026

Our Privacy Philosophy

At Ally, we believe your family's digital life should stay private. We minimize the data we collect and only use it to operate the service for your family. We do not sell your data or share it for advertising.

What This Means in Plain English

We collect a small amount of information to run your account, sync your family's data across devices, and enforce the rules you set. We never sell it, and we never share it with advertisers.

1. Information We Collect

We collect the following categories of data, all of which are necessary to deliver the service:

Parent Account Information

  • Email address and name (used to create and manage your account)
  • Authentication credentials (managed securely via Supabase Auth or Sign in with Apple)
  • Subscription status (managed via RevenueCat to verify your active plan)

Child Profile Information

  • Child's first name and selected avatar/mascot (set by the parent)
  • Grade level (used to match quiz questions to the appropriate difficulty)
  • XP and level progress (to power the in-app reward system)
  • App usage data — which apps are active and for how long (used solely to enforce the screen time rules you configure)

Device Information

  • Device name, type (iOS or Android), and a unique device identifier (required for pairing the parent and child devices and delivering enforcement)
  • Push notification tokens (used to send alerts, such as task completions or unlock requests)

Task Completion Photos

  • When a child submits a photo to verify a completed task, that photo is stored securely and is visible only to the parents in that family. Photos are not used for any other purpose.

What we do not collect: Location data, browsing history, messages, call logs, or the content of any apps on the device.

2. App Permissions

Ally requests the following device permissions, each for a specific purpose:

  • Camera: To allow children to photograph completed tasks for parent review.
  • Photo Library: To allow children to submit existing photos as task proof.
  • Screen Time / Family Controls (iOS): To block selected apps during Smart Routines and other scheduled periods. This uses Apple's native Screen Time framework.
  • Usage Access (Android): To detect which app is currently active so Ally can enforce the rules you set.
  • VPN Access (Android): To enable network-level restrictions for blocked apps when required.
  • Display Over Other Apps (Android): To show the blocking overlay when restricted apps are opened.
  • App List Access (Android): To show installed apps during setup so families can choose which apps to manage.
  • Push Notifications: To alert parents when a child completes a task or requests an unlock.

3. COPPA Compliance & Children's Data

Ally is a parental control tool. Child accounts are created and managed entirely by a parent or legal guardian. We do not knowingly collect personal information directly from children, and we do not use child data for advertising, profiling, or any purpose other than delivering the app's parental control features.

4. Third-Party Services

We use the following third-party services to operate Ally. Each receives only the data necessary for its specific function:

  • Supabase — Database, authentication, and real-time sync.
  • Firebase & Google Crashlytics — Crash reporting and stability monitoring.
  • RevenueCat — Subscription and billing management.
  • Expo Push Notification Service — Delivery of push notifications to supported devices.
  • Apple Push Notification Service (APNs) / Firebase Cloud Messaging (FCM) — Used to deliver push notifications.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

admin@tryally.app