Privacy Policy

Effective: April 19, 2026

Company (Controller): Immortal Company, Inc., 11273 COLINWARD AVE, LAS VEGAS, NV 89135, USA ("Immortal," "we," "us," or "our")

Contact: privacy@a-list.com

This Privacy Policy explains how we collect, use, disclose, and protect information in connection with A-LIST (the "Service"), a wellness and social application available at a-list.com and via our mobile apps.

Important: A-LIST is not a medical device and does not provide medical advice. The Service is intended only for individuals located in the United States and aged 18 or older.

Not a contract. This Policy is for transparency and compliance; it is not a contract. Your use of the Service is governed by our Terms of Use.

1. Scope & Eligibility

This Policy applies to all Services operated by Immortal that link to it.

  • U.S. only. Data is processed in the United States.
  • Age 18+. We do not knowingly collect data from individuals under 18.

2. Notice at Collection (U.S. State Privacy Laws)

We collect the following categories of personal information:

Identifiers

Phone number, email, account handle, IP, device identifiers

Sources: You, your device, service providers

Purposes: Authentication, security, analytics

Disclosure: Service providers, legal

Account & Profile

Name, bio, photos

Disclosure: May be public depending on settings

User Content

Posts, messages, photos, videos, comments, reactions, follower graph

Disclosure: Public or private depending on feature

Wellness & Health Inputs (Sensitive)

Diet, exercise, supplements, routines, goals

Health Integrations (Sensitive)

Apple HealthKit data (only what you authorize)

Biometric-Adjacent Image Processing (Sensitive)

We may offer features that analyze photos or videos you provide (e.g., skin-related analysis or classification).

  • Used solely to provide requested features
  • May process visible characteristics such as skin tone or appearance
  • Not used to identify you or verify identity

We do NOT:

  • Use facial recognition
  • Create or store biometric identifiers (e.g., faceprints)
  • Identify individuals across sessions

Retention:

  • Processed transiently where possible
  • Deleted when no longer needed or upon user deletion

Consent: Use of these features constitutes your explicit consent.

Geolocation (Sensitive)

GPS (if enabled), IP-based location

Contacts Matching

Hashed (SHA-256) contacts for friend discovery

Internet / Technical Data

Usage events, logs, device information

Communications

Email, SMS, push notifications

Voice Data (Sensitive)

Audio captured during AI interactions

  • May be processed in real time
  • May involve streaming sessions
  • Retained only as necessary to provide functionality

AI Interaction Data

Inputs, outputs, prompts, and interaction metadata

Screen Context Data

Visible UI elements and app state when using AI navigation features (e.g., Guardian)

Authentication Data

Passkeys (FIDO2/WebAuthn), OTP credentials

Subscription & Entitlement Data

StoreKit transaction metadata, subscription status, internal overrides

Inferences

Content ranking and personalization signals

No Selling / Sharing: We do not sell or share personal information for cross-context behavioral advertising.

3. Information We Collect

We collect information directly from you, from your device, and from integrations you authorize.

Includes:

  • Account information
  • Content and media
  • Wellness data
  • AI interactions
  • Voice and real-time session data
  • Subscription data
  • Technical diagnostics
  • On-device data (e.g., SQLite databases, cached content, and preferences stored locally on your device)

4. Sources of Information

  • You
  • Your device and OS
  • Integrations (e.g., HealthKit)
  • Service providers
  • Public content

5. How We Use Information

We use information to:

  • Operate and authenticate accounts
  • Provide AI-powered features (including real-time voice and Guardian navigation)
  • Process images and media for analysis
  • Provide subscriptions and entitlements
  • Enable messaging and social features
  • Improve product performance and reliability
  • Conduct analytics and research
  • Communicate with users
  • Ensure safety and prevent abuse
  • Comply with legal obligations

Automated systems: We do not use automated decision-making with legal or similarly significant effects.

6. Public Content & Messaging

  • Content may be public depending on settings
  • Direct messages (DMs) are private but may be processed for safety, moderation, and feature functionality
  • Absolute confidentiality cannot be guaranteed

7. How We Disclose Information

Service Providers / Sub-processors

We use providers including:

  • Infrastructure: Render, Google Cloud Platform
  • Analytics: Mixpanel, BigQuery
  • AI: OpenAI, Anthropic, Google Gemini, and third-party AI model providers
  • Speech processing: Whisper or equivalent
  • Diagnostics: Sentry, Shake
  • Messaging: Twilio, Firebase
  • Authentication: Supabase
  • Payments: Apple (StoreKit), Stripe
  • Experimentation: Statsig

AI Processing

Data may be processed by AI providers to fulfill requests. We configure providers to restrict training where supported.

Legal / Compliance

To comply with law or protect rights

Business Transfers

In mergers or acquisitions

Public Content

Visible to others as shared

8. Health Integrations (Apple HealthKit)

  • Access only with permission
  • Used only for requested features
  • Not used for advertising or sold

9. Your Choices & Controls

  • Location permissions
  • Contacts access
  • Health data permissions
  • Marketing opt-outs
  • Content deletion
  • Account deletion

10. Cookies, SDKs & Tracking

We use:

  • Cookies and SDKs
  • Analytics (Mixpanel, BigQuery)
  • Diagnostics (Sentry, Shake)
  • Communications (Twilio, Firebase)

11. Data Retention

  • Account data: retained while active
  • Logs: retained for limited periods
  • Audio: not retained beyond processing unless stated
  • AI data: retained as needed for functionality and safety
  • Legal retention as required

12. Security

We use:

  • Encryption in transit and at rest
  • Access controls
  • Monitoring and logging

No system is fully secure.

13. U.S. Privacy Rights

You may request:

  • Access
  • Deletion
  • Correction
  • Portability

Contact: privacy@a-list.com

14. International Transfers

Data is processed in the United States.

15. Children

We do not knowingly collect data from users under 18.

16. Third-Party Links

We are not responsible for third-party services.

17. Changes

We may update this Policy and provide notice where required.

18. Contact

Immortal Company, Inc.

11273 COLINWARD AVE

Las Vegas, NV 89135

privacy@a-list.com

Short Disclaimers

No medical advice. Not a healthcare provider.

AI Systems. Outputs may be inaccurate.

Not a contract. See Terms of Use.

© 2026 The Immortal Company. All rights reserved.