The data controller is Lars Sommer, jegerlars.dk, hej@jegerlars.dk. The server is hosted by a Danish provider and data does not leave the EU, except for push notifications delivered by Apple (see below).
You don't create an account. The app receives a random key that is stored in your phone's keychain. We don't know your e-mail or Apple ID. You enter a name so the people you share with know who you are, and you may enter a phone number so they can call you from the app. Both are optional.
What matters is your privacy level in the app. The server enforces it: what may not be shared is not stored. If you switch to a stricter level, the old data is deleted immediately.
| Level | Stored | Not stored |
|---|---|---|
| Only my answers | When you last answered, and when the phone last reported in. | Position, battery, steps — not even on alarms. |
| Position only on alarm (default) | Battery and whether the phone has moved. Last known position for at most 3 hours, attached only to an alarm. A reserve position a few minutes before a check-in expires — deleted if you answer. | A trail. Position cannot be seen without an alarm. |
| Everything, always | Position with every heartbeat for 7 days. Battery, movement. | — |
Only the people you have invited yourself with a code. They see what your level allows, and they can see on the app's home screen what you share. You can remove a person at any time; then they see nothing. There is no administrator or "organisation" that can see your data.
Notifications are delivered through Apple's push service (APNs). Apple receives your device's push token and the text of the notification (e.g. "Inger · Didn't answer at 8:00"). The position is not sent in the push; it is fetched in the app.
alene.jegerlars.dk counts visits without cookies and without storing anything on your device. A fingerprint of IP and browser is made that lives for one day and cannot be recreated afterwards. That is why there is no cookie banner.
Settings → Delete account and data deletes you, your rules, your relations, alarms and heartbeats immediately. There is no backup copy with us beyond the hosting provider's ordinary, time-limited backups.
You can access, correct and delete your data. Write to hej@jegerlars.dk. You may complain to the Danish Data Protection Agency (Datatilsynet).
If you set up Alene on someone else's phone — a parent, say — it is your responsibility that they know and agree. The app always shows on the home screen who gets told and what is shared, precisely so it cannot happen in secret.