Last updated: 5 September 2026. Back to the app
Information under §5 E-Commerce-Gesetz (ECG), §25 Mediengesetz and §14 Unternehmensgesetzbuch.
This policy explains what Alleex does with your data under the General Data Protection Regulation (GDPR / DSGVO) and the Austrian Datenschutzgesetz. It describes what the software actually does, not what it might do one day.
Alexander Burger, [postal address, Salzburg, Austria], [contact email]. There is no data protection officer; the service is too small to require one under Art 37 GDPR.
An account is an 8-character code and, if you choose one, a passphrase. The passphrase is stored only as a scrypt hash, never in plain text. We do not ask for an email address, a phone number, a real name or a date of birth. The name you type is free text and does not have to be your real one.
| Data | Why | Legal basis |
|---|---|---|
| Code, display name, language, emoji, optional profile photo, optional profile text | To run the account and show you to the people you talk to | Art 6(1)(b), performance of the contract you enter into by creating an account |
| Passphrase hash and session tokens | Sign-in on further devices | Art 6(1)(b) |
| Messages, translations, group memberships, group names | To deliver and display your conversations | Art 6(1)(b) |
| Posts on the shared board, prices, photos and video attached to them | To show them to other signed-in users | Art 6(1)(b) |
| Uploaded files and pictures | To pass them on inside a conversation | Art 6(1)(b) |
| Location, only if you switch sharing on | To show your pin on the map to other signed-in users | Art 6(1)(a), consent given by turning sharing on and withdrawable at any time |
| Translation rules and glossary | To shape how your text is translated | Art 6(1)(b) |
Web server request logs may contain your IP address for a short time as a technical by-product of running the server (Art 6(1)(f), legitimate interest in operating and securing the service).
There is no end-to-end encryption. Messages, group content, posts, profile photos and uploaded files are
stored in clear text in a database file (data.json) and a folder of pictures and files on the
operator's own server. The operator has the technical ability to read them. Traffic between your browser and the server
is protected by HTTPS in transit only. Do not use Alleex for anything confidential, and in particular not for health
data, financial secrets or anything else you would not want a server administrator to be able to read.
Alleex only works by sending your content to external services. There is no way to use translation, the assistant or voice features without that. These are processors and, for the transfers outside the EU, are covered by the EU Standard Contractual Clauses and the respective provider's terms.
| Recipient | What is sent | What for |
|---|---|---|
| Google (Gemini API) Google Ireland Ltd / Google LLC, US |
The text of messages you send or receive, text you dictate, images and audio you attach, and the questions you ask the assistant | Translation, assistant answers, understanding images and audio, and web-grounded fact checks. A fact check also causes a web search query to be run. |
| ElevenLabs ElevenLabs Inc., US |
Recorded audio, and text to be read aloud | Speech-to-text and text-to-speech, only when the operator has enabled that pipeline in the admin settings. Otherwise your browser's own speech engine is used and no audio leaves your device for this. |
| Mapbox Mapbox Inc., US |
Map tile requests and place-search terms, including your browser's IP address | Map background and place search. If no Mapbox token is configured, tiles come from the OpenStreetMap Foundation instead. |
| OSRM public router.project-osrm.org service |
Start and end coordinates of a route you ask for | Walking directions |
| Google Maps | Only if you follow an "open in Google Maps" link, which sends the coordinates | Opening a place in Google Maps |
Files you attach for the assistant to look at may be uploaded to Google's file store, where they expire automatically after 30 minutes. Nothing is sold, and there is no advertising, tracking pixel or analytics service in Alleex.
Sharing your location is off unless you turn it on. You can share a live pin, which the server discards after 30 minutes without a fresh update, or a fixed pin, which stays until you remove it. A shared pin is visible to any signed-in Alleex user, not only to your contacts. You can stop sharing at any time; withdrawing consent does not affect the lawfulness of what happened before.
Account data, messages, posts and files are kept until you delete them or delete your account. There is no automatic expiry except for live location pins (30 minutes) and files uploaded to Google for the assistant (30 minutes). Deleting your account from Settings removes your account record, your messages, your profile photo and your group memberships from the server. Copies that other people already received in their own conversations, and any backup snapshots the operator holds, may persist for a short time afterwards.
To exercise a right, write to [contact email] and include your 8-character code. Because accounts have no verified email address, we may be unable to identify you beyond that code (Art 11 GDPR); knowledge of the code and passphrase is the only proof of ownership that exists.
Alleex sets no tracking cookies. Your account token, contacts and preferences are kept in your browser's
localStorage so you stay signed in. This is strictly necessary for the service you asked for and needs no
consent banner under §165 Abs 3 TKG 2021.
Alleex is not intended for children under 14 (the age of digital consent in Austria, §4 Abs 4 DSG).
This policy can change as the app changes. The date at the top says when it was last revised.
Alleex is provided by Alexander Burger, [postal address, Salzburg, Austria]. By creating an account you accept these terms and confirm you have read the Privacy Policy above.
A web app for messaging with automatic translation, an assistant, shared posts and a map. It is offered free of charge and is an early, experimental service.
Your account is your 8-character code plus, optionally, a passphrase. If you set no passphrase and lose your browser storage, the account cannot be recovered, by you or by us. There is no email reset, because there is no email address. Keep your code, passphrase and recovery token to yourself; anyone who holds them controls the account.
You are responsible for what you send, post and upload. The operator may remove content and suspend or delete an account that breaks these rules.
Translations, assistant answers and fact checks are produced by machine models. They are frequently wrong, incomplete or misleading, and fact checks can cite bad sources. Do not rely on them for medical, legal, financial or any other consequential decision, and check anything that matters with a human.
The service is provided "as is". There is no uptime guarantee, no guarantee that your data will not be lost, and no obligation to keep the service running. It may be changed or discontinued at any time. Keep your own copy of anything you would miss.
For a free service, liability is limited to intent and gross negligence. Liability under the Austrian Produkthaftungsgesetz and for injury to life, body or health remains unaffected. Nothing here limits the mandatory rights of consumers under Austrian law.
Alleex is free, so no contract for payment is concluded and the consumer right of withdrawal under the FAGG does not apply. You may stop using the service and delete your account at any time from Settings.
You can delete your account at any time in Settings. The operator may terminate an account that breaches section 4 or endangers the service.
Austrian law applies, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. For consumers, the mandatory protections and the courts of the consumer's place of residence in the EU remain available. For all others, the competent court in Salzburg, Austria has jurisdiction.
[contact email]