Privacy Policy

Alfcode is a private workspace where our clients and our team run projects together. It is not a consumer product, there is no advertising in it, and we do not sell or share anyone's data.

Who this covers

This policy covers the Alfcode app and the web portal at portal.alfcode.com. Most accounts are created by Alfcode for a named client company or for a member of our team. You can also create a client account yourself when you send us a project enquiry from our website, in which case we store the name, email address and password you chose along with the enquiry.

What we store

• Your account: name, email address, the company you belong to, and a securely hashed password. We never store a password in a readable form.
• Your project work: projects, milestones, tasks, requests, approvals, invoices, and any files you upload.
• Messages: what you write in the project chat, including voice notes and attachments.
• Notifications: if you turn on push notifications, a device token so your phone can receive them. It identifies the device, not you personally, and it is deleted when you sign out.
• An activity record: who changed what and when, so a project has a reliable history.

What we do not do

• No advertising, and no advertising or tracking SDKs in the app.
• No selling or renting of personal data, ever.
• No location tracking, no contacts, no browsing history.
• No profiling or automated decisions that affect you.

Permissions the app asks for

• Notifications — so you hear about an approval, a reply or a new project. Declining costs you nothing else.
• Microphone — only while you hold the record button to send a voice note. Nothing is recorded at any other time.
• Camera and photos — only when you choose to attach a photo or file.

Who else sees it

Your project data is visible to your own company's users and to the Alfcode team members working on it. Clients cannot see other clients. We use two service providers to run the product: our hosting provider, which stores the database and uploaded files, and Expo's push notification service, which delivers notifications to your device. Push messages carry only a short title and body — never a file, an invoice, or the contents of a message thread.

Keeping it

We keep your project data for as long as we work with you and for a reasonable period afterwards for our records and legal obligations. Ask us and we will delete your account and its personal data.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to privacy@alfcode.com and we will respond.

Security

Traffic is encrypted in transit with HTTPS, passwords are stored only as bcrypt hashes, and access is limited to the people who need it. No system is perfect, and we will tell affected users promptly if something goes wrong.

Children

Alfcode is a business tool and is not directed at children under 13. We do not knowingly create accounts for them.

Changes

If this policy changes we will update the date at the top, and tell you in the app when the change is significant.