Privacy Policy — alter.zone

This Privacy Policy describes how Filli S.r.l. (“Filli”, “we”, “us”, or “our”) collects, uses, shares, and stores personal data when you use the alter.zonemobile application and related services (the “App”).

alter.zone is an AI-assisted roleplay and storytelling app. Characters reply using third-party language models. The App is intended only for users who are 18 years of age or older.

By creating an account or using the App, you acknowledge this Privacy Policy. If you do not agree, do not use the App.

1. Data controller

Filli S.r.l.
Viale Gian Galeazzo 7, 20136 Milano (MI), Italy

Contact for privacy requests:tech@filli.it
Support / company site:filli.it

Where European data-protection law applies (including the GDPR), Filli S.r.l. is the controller of the personal data processed through the App.

2. What we collect

We collect only what is needed to run the App. Categories depend on how you use it.

2.1 Account and profile

• Display name you choose
• Email address
• Profile photo, if you add one
• Sign-in identifiers from Sign in with Apple or Google Sign-In(for example, a stable account id and, depending on the provider and your choices, email or name)

2.2 Content you create in the App

• Messages you send to characters (and the replies generated for those chats)
• Photos or other media you upload in chat, when that feature is available
• Episode / story progress and listening state
• In-app reports or blocks you submit about content or characters

2.3 Purchases and entitlements

• Whether Plus is active and your energy balance
• Purchase and subscription status needed to unlock features

Payments are processed by Apple. We do not receive your full payment card number. Apple and RevenueCat provide the purchase / entitlement signals we need to credit Plus and energy.

2.4 Device and notifications

• Push notification device token / installation id, if you allow notifications
• Basic technical data required to operate the App (for example, app version, device OS, and crash or diagnostic information generated by Apple or Firebase infrastructure)

2.5 What we do not intentionally collect

• We do not ask for your precise location
• We do not sell your personal data
• We do not use the content of your chats for third-party advertising

3. How we use the data

We use personal data to:

1. Provide the service — create and maintain your account, run stories and chats, sync progress, show energy and Plus status, and send the notifications you allow.
2. Generate character replies — send the conversation context needed for a reply to our AI routing provider (OpenRouter), which forwards it to the language-model provider that produces the reply.
3. Process purchases — confirm what you bought through Apple and unlock Plus or energy via RevenueCat and our servers.
4. Safety and integrity — enforce the 18+ audience, moderate uploaded media where that pipeline is active, handle reports and blocks, prevent abuse or fraud, and comply with law.
5. Operate and improve the App — keep the service reliable (hosting, authentication, storage, messaging). We do not use your chat content to train our own foundation models. We do not authorize OpenRouter or model providers to use your conversation data to train their models for their own purposes, beyond generating the reply you requested under their service terms with us.

Legal bases under the GDPR (where it applies) typically include: performance of a contract (providing the App you signed up for), legitimate interests (security, abuse prevention, basic service analytics), consent where required (for example, optional notifications), and legal obligation where we must retain or disclose information.

4. Who else handles the data

We use service providers that process data only to deliver the App, under contracts that require appropriate protection:

These providers may process data in the European Economic Area, the United Kingdom, and/or the United States. Where data leaves the EEA/UK, we rely on appropriate safeguards available under applicable law (for example, Standard Contractual Clauses or an adequacy decision), together with the providers’ own commitments.

We may also disclose data if required by law, court order, or to protect the rights, safety, or property of Filli, our users, or others; or in connection with a merger, acquisition, or sale of assets, subject to continuity of protection.

5. Retention

• Account, profile, messages, progress, photos, and entitlements stay on the account while it exists.
• Delete account (in Profile) removes your sign-in and the profile and related app data we store for that account on our systems, subject to short technical backup windows and any records we must keep by law.
• Purchases: Apple keeps its own record of what you bought. Deleting the App account does not cancel an App Store subscription; manage or cancel subscriptions iniOS Settings → Apple ID → Subscriptions.
• Notifications: you can turn them off in iOS Settings at any time; we then stop using the token for pushes.
• Security / legal logs may be kept for a limited period after deletion where needed to investigate abuse or meet legal duties.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent.

• In the App: update profile details where available; turn off notifications in iOS Settings; use Delete account in Profile.
• By email: write totech@filli.it. We may need to verify that the request comes from the account holder.
• EEA/UK: you may lodge a complaint with your local supervisory authority. In Italy, that is the Garante per la protezione dei dati personali (https://www.garanteprivacy.it).

If you are a California consumer, you may have rights under the CCPA/CPRA to know, delete, and correct personal information, and to opt out of “sale” or “sharing” as those terms are defined by California law. We do not sell personal information for money. To exercise California rights, contact tech@filli.it.

7. Children

The App is for adults 18+ only. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contacttech@filli.it and we will take steps to delete it.

8. Security

We use industry-standard technical and organizational measures appropriate to the nature of the data (including encrypted transport, access controls on our cloud project, and authentication via Apple or Google). No method of transmission or storage is completely secure; please use a strong device passcode and keep your Apple or Google account protected.

9. International users

The App may be offered globally. By using it, you understand that your data may be processed in countries other than your own, including as described in section 4. Where local law requires additional notices or consents, we will provide them in the App or at sign-up when applicable.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be highlighted in the App or by other reasonable means. Continued use after an update means you accept the revised policy, except where local law requires a different form of consent.

11. Contact

Questions about this Privacy Policy or your data:

Filli S.r.l.
Viale Gian Galeazzo 7, 20136 Milano (MI), Italy
Email: tech@filli.it
Web: filli.it

Summary (same substance as the in-app Privacy sheet)