Privacy Policy

Effective date: 22 August 2026

Aleto is operated by Laconic Tech, an eenmanszaak registered in the Netherlands. This Privacy Policy explains what information we collect, why we process it, how it may be used or shared, and how you can exercise your privacy rights.

1. Who we are

Laconic Tech operates Aleto and is the controller responsible for the processing of personal information described in this Privacy Policy.

2. Minimum age

Aleto is intended only for users aged 18 and older. Do not create an account or use Aleto if you are under 18.

By creating an account, confirming the current legal terms, or continuing to use Aleto after a legal-policy update, you confirm that you are at least 18 years old.

Existing users may be required to confirm that they are at least 18 years old and acknowledge or accept the current Terms of Use, Community Guidelines, and Privacy Policy before continuing to use Aleto.

3. Information we collect

Depending on how you use Aleto, we may collect and process:

• Account information, including your email address, Firebase user ID, username, profile information, email-verification status, account-creation information, authentication data, and records of legal acceptance such as the version of the Terms, Community Guidelines, and Privacy Policy acknowledged or accepted, your minimum-age confirmation, the acceptance source, and the related acceptance timestamp.
• User-generated content, including uploaded videos, thumbnails, captions, tags, comments, reports, moderation-review requests, suspension appeals, and information you provide when asking us to review a moderation decision.
• Engagement information, including likes, dislikes, favorites, views, comment votes, followed cities, and related interaction records.
• City and country choices that you select in the app. Aleto does not collect precise GPS location for this feature.
• Notification information, including notification-permission status, Firebase Cloud Messaging tokens, city-topic subscriptions, notification preferences, and local digest/inbox data.
• Security and moderation information, including post, account, and comment reports; report reasons; reporter and target user identifiers; reported-content or comment evidence and snapshots; block and unblock records; safety-case records; moderation decisions; suspension and reinstatement records; review and appeal records; moderation timestamps; audit logs; rate-limit records; App Check and integrity information; and other abuse-prevention records.
• Technical and security information that may be processed by Firebase or Google Cloud services, including IP addresses, Firebase installation or app-instance identifiers, device and app metadata, app version information, integrity or attestation tokens, function-invocation metadata, and related service logs.
• Analytics and diagnostic information through Firebase Analytics and Firebase Crashlytics, including app interactions, crash reports, crash stack traces, relevant application state, device and app diagnostics, technical logs, installation or session identifiers used by those services, and stability information.

4. How we use information

We use information to:

• Create, authenticate, secure, and manage user accounts.
• Upload, store, display, share, and deliver videos and comments.
• Provide local city feeds and city-based notifications.
• Operate favorites, reactions, comments, blocking, account deletion, post deletion, reporting, moderation, appeals, account suspensions, reinstatements, and abuse-prevention systems.
• Receive and review reports, investigate suspected abuse, maintain moderation history, protect platform integrity, and enforce our Terms and Community Guidelines.
• Respond to serious safety concerns, including child-safety concerns, and make reports to competent authorities or designated child-safety reporting bodies where required or appropriate under applicable law.
• Improve app performance, reliability, safety, and user experience.
• Diagnose crashes, defects, and technical issues.
• Comply with legal obligations, lawful requests, security requirements, and platform rules.

5. Legal bases for processing

Where the General Data Protection Regulation or similar law applies, we process personal information on one or more of the following legal bases:

• Performance of a contract: where processing is needed to provide your Aleto account and the app’s core functionality.
• Legitimate interests: where processing is needed to operate, secure, improve, moderate, and protect Aleto, its users, and the public.
• Consent: where you make an optional choice, grant a device permission, or where consent is otherwise legally required.
• Legal obligations: where processing is needed to comply with applicable law, lawful requests, or regulatory duties.

6. Firebase, Google Cloud, and service providers

Aleto uses Firebase and Google Cloud services, including Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging, Firebase App Check, Firebase Analytics, and Firebase Crashlytics.

These services help us authenticate users, store and deliver content, process backend functions, deliver notifications, protect the app, analyze usage, and diagnose crashes and technical issues.

Depending on the Firebase service and how Aleto uses it, these services may process technical information such as IP addresses, Firebase installation identifiers, device and app metadata, Firebase Cloud Messaging tokens, integrity tokens, crash stack traces, and related diagnostic or service information. Some information is generated automatically by the relevant Firebase SDK or service.

7. Sharing and disclosure

Aleto does not sell personal information.

We may share or disclose information only where reasonably necessary:

• With service providers such as Firebase and Google Cloud that process information on our behalf.
• To comply with applicable law, a lawful request, court order, regulatory requirement, or legal process.
• To investigate abuse, enforce our rules, protect users, preserve platform security, or prevent harm.
• With competent authorities, regulators, or designated child-safety reporting bodies, including NCMEC or a relevant regional authority where applicable, when required or appropriate under applicable law for serious safety or child-exploitation matters.
• In connection with a merger, acquisition, financing, restructuring, sale, or transfer of all or part of the business, where legally permitted and subject to appropriate safeguards.

8. Public content

Videos, thumbnails, captions, tags, usernames shown on posts, city labels, comments, and engagement counts may be visible to other users or through shared Aleto links.

Do not upload personal information or content that you do not want other people to see or share.

9. Location and city data

Aleto uses city and country information selected by users to organize local feeds, followed places, local inbox items, and city-based notifications.

Aleto does not use precise GPS location for this feature.

10. Notifications

If you allow notifications, Aleto may send city-based local digest notifications and other app notifications.

Notification delivery is not guaranteed. You can disable notifications in your device settings or change local-digest preferences in Aleto settings.

11. Safety, blocking, reports, and moderation

Aleto processes safety and moderation information so that users can report content or conduct, block other accounts, request review, and so that authorized moderators can investigate and act on potential violations.

Reports may include the reporter's user ID, the reported account or content identifier, the selected report reason, timestamps, and trusted evidence needed to understand the report. For comment reports, this may include a snapshot of the reported comment and related post or account information. Aleto may combine reports into a safety case for moderation review.

Block records identify the account that initiated the block and the account that was blocked. These records are used to hide relevant content or interactions and to enforce interaction restrictions.

Moderation records may include decisions to dismiss a report, remove content, suspend an account, reinstate an account, or take other proportionate action. We may retain the original report and moderation history after a later reinstatement so that we can maintain safety, auditability, abuse prevention, and legal compliance.

If you submit an account-suspension appeal, we may process the account email address or username, the approximate suspension date, your explanation, relevant correspondence, and the outcome of the human review. See the Account Suspension Appeal page.

12. Account and post deletion

You can request deletion of your account in the Aleto app under Settings → Account → Delete account.

If you cannot access the app, you can submit a deletion request using the instructions on our Account Deletion page.

When your account is deleted, your account and profile information is deleted or anonymized where supported. Some public content may remain visible in anonymized form where needed to preserve public conversations, moderation integrity, platform safety, legal records, or the rights of other users.

Deleting an account does not necessarily delete every video or record associated with that account. Individual posts can be deleted separately through the app where that functionality is available.

Safety, moderation, fraud-prevention, legal, audit, or abuse-prevention records may be retained after account deletion where reasonably necessary and legally permitted. A username reservation record may also remain after deletion to prevent reuse, impersonation, or abuse.

13. Data retention

We retain information for as long as reasonably necessary to provide Aleto, maintain platform security and moderation systems, resolve disputes, enforce our rules, and comply with legal obligations.

Retention periods may vary depending on the type of information, why it was collected, whether an account remains active, and whether information is needed for security, moderation, dispute, appeal, fraud prevention, backup, child safety, or legal purposes. A suspension may later be reversed without deleting the underlying moderation history.

Service providers such as Firebase and Google Cloud may apply their own service-specific retention periods to technical, diagnostic, security, authentication, or infrastructure data.

Uploaded media that is not connected to a completed post may be removed through automated cleanup processes.

14. Security

We use technical and organizational measures designed to protect user information, including access controls, encrypted transport where applicable, Firebase App Check, rate limits, abuse-prevention systems, authentication controls, and security monitoring.

No internet service, storage system, or transmission method can guarantee complete security.

15. International processing

Some service providers used by Aleto may process information in countries outside the Netherlands or the European Economic Area. Where required, such processing is subject to applicable legal safeguards and contractual protections.

16. Your choices and privacy rights

You can edit certain profile information, choose followed cities, disable local digests, delete posts, and delete your account through the app where those options are available.

Depending on applicable law, you may have the right to request:

• Access to your personal information.
• Correction of inaccurate personal information.
• Deletion of personal information.
• Restriction of certain processing.
• Portability of certain information.
• Objection to certain processing.
• Withdrawal of consent where processing is based on consent.

To make a privacy request, contact privacy@aleto.video. We may need to verify your identity or account before processing the request.

If you are in the European Economic Area, you may also have the right to lodge a complaint with your local data-protection authority.

17. GeoNames attribution

City and geographic data may include information from GeoNames (geonames.org), used under the Creative Commons Attribution license.

18. Contact

Operator and controller: Laconic Tech
KVK number: 42123064
VAT ID: NL005512114B48

Privacy requests: privacy@aleto.video
Support: support@aleto.video
Legal notices: legal@aleto.video

19. Changes to this policy

We may update this Privacy Policy when Aleto, our processing practices, or applicable requirements change.

The current version will remain available at aleto.video/privacy. Where appropriate, we may provide additional notice of material changes.