Privacy Policy

1. Who we are

Allium Project LLC ("Allium", "we", "us") provides performance management software for last mile delivery companies. That includes Ally, the mobile app by Allium that drivers use to see their schedule, request changes, report incidents and reach their managers. This policy explains how we handle personal information in connection with our website, the Allium platform and the Ally app.

You can reach us at [email protected].

2. Two different relationships

How we handle your information depends on how you came to us.

• If you use Allium or Ally because your employer does. Your employer decides what information goes into Allium and what it is used for. We process it on their instructions, under our agreement with them. Requests to see, correct or delete that information should go to your employer first; we will help them respond.
• If you contact us directly — by email or through this website — we handle that information ourselves, as described below.

3. Information we collect

• Account information. Name, work contact details, job role and the identifiers your employer uses for you, and the email address and password you use to sign in to Ally.
• Work information. Schedules, availability, time-off and shift requests, qualifications and training records, performance measures, and coaching or incident records — the operational record your employer keeps.
• Content you submit. Messages, requests, tickets and anything else you enter into the platform or the Ally app.
• Incident reports. When you file an incident report in Ally, what you write, any injury and health details you include, and any photos or videos you attach.
• Information about other people in an incident report. An incident report can include details you enter about other people involved — for example another driver's name, phone number, insurance and licence plate, a property owner's contact details, or a witness's name and phone number. These become part of your employer's incident record and are handled the same way as the rest of it.
• Location. Ally collects your precise location only when you choose to add it to an incident report, and only with your device's permission. Ally does not track your location otherwise. Photos you attach may also carry location data that your camera recorded when the photo was taken.
• Device push tokens. If you allow notifications, your device gives Ally a push token: an identifier for the app on that device. We use it only to deliver Ally's notifications to that device, through Google Firebase (Android) or Apple (iPhone). We do not use it to track you or for advertising. Turning notifications off in your device settings stops them, and the token is revoked when you delete your account.
• Technical information. Sign-in and session data, device and browser type, the Ally app version, IP address, and logs of actions taken in the platform. We keep these to run the service, keep it secure, and investigate problems.

We do not sell personal information, and we do not use it for advertising.

4. Why we use it

• To provide the platform, the Ally app and the features you and your employer use.
• To keep accounts secure, prevent misuse, and maintain an audit record of changes.
• To provide support, and to diagnose and fix faults.
• To improve reliability and performance.
• To meet legal obligations.

5. Ally's assistant

Ally includes an assistant that answers questions about your work. It uses Claude, an AI model made by Anthropic. Ally asks your permission before you use the assistant for the first time. To answer you, it sends Anthropic your name, your building, your messages to the assistant, your own schedule and shift details, and your own streaks and ranks. It does not send other drivers' information. If the assistant cannot help, your conversation can be passed to your manager as a ticket.

6. When we share it

We share personal information only in these circumstances:

• With your employer, where they are the customer whose data it is.
• With other drivers at your company, on Ally's Summit leaderboards: they see your first name, the initial of your last name, your building and your place on the board, and nothing else about you.
• With service providers who help us run the platform, under contracts that limit them to that purpose: hosting and storage (AWS), email delivery (Postmark), push notifications (Google Firebase and Apple), and Ally's assistant (Anthropic).
• Where the law requires it, or to protect the rights and safety of people using the service.
• In a business transfer, if Allium is ever acquired or reorganised. We would tell you before your information became subject to a different policy.

7. How long we keep it

We keep information for as long as our customer's account is active, and afterwards for as long as we need it to meet legal, accounting or dispute-resolution obligations. Our customers may set shorter retention for their own records.

8. Security

We use encryption in transit, access controls, and audit logging, and we limit access to personal information to those who need it. No system is perfectly secure, and we will not claim otherwise — but we take this seriously and treat it as ongoing work rather than a box that has been ticked.

9. Your choices

Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to certain uses. If your information is in Allium because of your employer, start with them. Otherwise write to [email protected] and we will respond as the law requires.

10. Deleting your Ally account

You can delete your Ally account in the app: open the ⋮ menu, choose Delete my account and confirm. If you no longer have the app, see how to delete your account without it.

When you delete your account, we delete your sign-in email and your password, delete the text of your chats with Ally's assistant, end your signed-in sessions, revoke your device push tokens, and you are signed out everywhere. We send a short confirmation to your old email address. Your employer is told, so they can follow up, and can restore your access if you come back. Your work records — schedules, requests, tickets, incident reports and performance records — belong to your employer and stay under their retention policy. To ask for more of that information to be deleted or exported, contact your employer.

11. Children

Allium is workplace software and is not directed at children. We do not knowingly collect personal information from anyone under 16.

12. Changes to this policy

We may update this policy as the platform changes. When we do, we will update the date at the top of this page, and for significant changes we will give notice through the platform or to our customers.

13. Contact

Questions about this policy or how we handle personal information can be sent to [email protected].