Privacy Policy

1. Who we are

Surtidy is a product of Aloia Works LLC ("Aloia", "we"). For any question about this policy or your data, email us at connect@aloiaworks.com.

The app is purchased by a distributor (your employer) for its team. Your employer decides who uses the app and owns the work data recorded in it. Aloia processes that data on your employer's behalf to provide the service.

2. What data is stored

Your account

Name, email, password (stored hashed) and, if you add them: phone number, profile photo and job title.

Your work

• Stores, visits, weekly route, tasks, reported issues, daily reports and, if your company enables them, orders.
• Typed or dictated notes. Dictation is done by your phone's keyboard; the app only receives the text.
• Photos you take for work: shelves, products and finished merchandising.
• Expiration dates and barcodes of products you scan.

Location

• If you are a merchandiser, when you take the photo of your finished work the app reads your location once to confirm the photo was taken at the store.
• If you choose "Use my current location" as the start or end point of your route, that point is saved.
• Only if you turn on "Surty at store arrival and exit" (it is off by default), your phone detects when you arrive at and leave a store on your route, including when the app is closed, to alert you. That detection happens on your phone: your location is not sent to our servers and your company cannot see it. Only what you confirm to record reaches the server. You can turn it off in Settings at any time.
• Other than that, the app does not track your location in the background or throughout the day. You can deny location permission; the app keeps working and the photo is marked "no location".

Technical data

Language, app version and security logs of important actions (for example, role changes). Reminders are local notifications on your phone; we do not use a push notification server.

3. How we use it

• To provide the service: your route, your stores, your notes and your reports.
• To organize notes, review shelf and merchandising photos, and prepare plans and reports with artificial intelligence.
• So your supervisor and those who lead your team can see work progress, according to your role.
• For security, abuse prevention and support.

We do not use your data for advertising, we do not sell it, and we do not share it with third parties for their own purposes.

4. Who can see it

• People in your company, according to role: you see your own work; your supervisor and the sales director see their team's; the owner and administrators see the company's. Prices are visible only to the owner and administrators.
• Service providers that help us run the service, only for that purpose and under their own security measures:
  • Supabase: database, file storage and sign-in (United States).
  • Anthropic: artificial intelligence that organizes notes and reviews photos. Under its commercial terms, it does not use this data to train its models.
  • Google Maps Platform: store search, storefront photos and directions.
  • Resend: email delivery, such as the daily report.
  • Cloudflare: hosting of the web panel.
  • Open Food Facts: when you scan a product that is not in the catalog, only the barcode is looked up.
• Authorities, only when required by law.

5. How long it is kept

While your account is active and your company uses the service. If you delete your account, your email, phone number, profile photo and access are deleted. Work you recorded for the company (visits, notes, photos) stays with the company under your name, because it is part of its records. If you do not belong to any team, everything is deleted.

6. Your choices and rights

• Delete your account in the app: Settings → Account and security → Delete my account.
• View and correct your profile data in the app.
• Request a copy, correction or deletion of your data by emailing connect@aloiaworks.com. If the request concerns data controlled by your company, we handle it together with them.
• Deny or remove camera and location permissions in your phone's settings.

7. Security

Data is encrypted in transit. Each person can only see what their role allows, with rules enforced in the database. Credentials for connecting to other systems are stored encrypted. No system is perfect; if we detect an incident that affects you, we will notify you or your company.

8. Children

Surtidy is a work tool for people 18 and older.

9. Changes to this policy

If we make an important change, we will post it here with a new date and, when appropriate, let you know in the app.