Privacy Policy
Current support and privacy contact: coderman1818@gmail.com. Current child-safety contact: coderman1818@gmail.com. The dated policy text below records the contact details at publication.
Effective date: September 27, 2026 · Version 2026-09-27
Aloha Service Network (ASN) is currently operated by Charles Cody Dana, sole proprietor. ASN is a free community-service platform intended for U.S. users age 13 and older who meet applicable local requirements. Contact coderman1818@gmail.com for privacy, support, or child-safety questions. We do not sell personal information or use it for cross-context behavioral advertising.
1. Information and purposes
- Account information: name, username, email, password credentials, eligibility and terms acceptance, profile settings, and sessions support registration, authentication, account management, and safety. Passwords are stored as salted one-way hashes, not as recoverable passwords.
- Profile and community content: skills, resources, knowledge, interests, groups and memberships, posts, comments, direct messages, votes, likes, and reports support matching, communication, and moderation.
- Locations: addresses and coordinates you select for posts or events are stored with that content and shared with its intended audience. Optional device location access helps choose a map point. Denying location access does not prevent manual selection.
- Notifications: push tokens, Firebase installation identifiers on Android, account association, platform, delivery preferences, and notification events enable alerts. Private-message push alerts use generic text rather than the message body. Your device can show notifications on its lock screen according to its settings.
- Region requests: requested area names, descriptions, your account association, and review decisions let administrators organize community groups and respond to your request. Please do not include a private home address. Approved region names and descriptions become public. Completed request records are cleaned up after 90 days; deleting your account removes requests linked to it, while approved public regions may remain.
- Download interest: we count clicks on ASN’s Android and iOS download links in aggregate by platform and day. These counters do not store account identifiers, IP addresses, or a visitor identifier. Repeat clicks count separately; a click does not confirm an installation. Non-identifying aggregate counts may be retained to understand interest over time.
- Support and safety: contact details, reports, suggestions, and their handling records let us respond and investigate concerns.
- Technical/security information: IP addresses, device/browser information, session records, login attempts, limited diagnostic events, and administrator actions support security and operation. We do not intentionally log passwords, session tokens, private-message bodies, or AI prompts.
2. Optional AI Assist
When you explicitly agree to an AI Assist request, ASN forwards the text described in that request to OpenAI: either your AI profile answers about skills/resources/knowledge/interests, or a post's title, description, type, and connector options. OpenAI returns suggested connectors. ASN does not automatically include your account password or private-message history. You can decline and enter connectors manually.
Do not provide confidential or unauthorized personal information. We request that generated responses not be stored as retrievable responses by the provider; provider security/abuse-monitoring retention can still apply under our service arrangement. We do not represent this as zero retention. You can report generated suggestions in the app; the report includes the output you choose to report, not automatically the original AI input. OpenAI privacy information.
3. Who receives information
- Other users: public posts/groups can be visible to visitors; private groups are limited to authorized members. Private profile settings limit discovery, but other users may recognize your contributions or messages. Blocking limits supported future interactions and cannot retrieve copies already held by another person.
- Operators and moderators: authorized personnel can access records needed for support, safety, security, or legal obligations. ASN messages are not end-to-end encrypted.
- Service providers: hosting/database services operate ASN; Apple/APNs and Google/Firebase deliver notifications; OpenAI processes consented AI requests. Map features use Apple mapping services on iOS and OpenStreetMap/Leaflet or Esri/ArcGIS resources on other surfaces. Loading external map/CDN resources can disclose IP/device information and the map area or address queried to the relevant provider. ASN does not send visitor IP addresses to an external geolocation lookup service.
- Legal and safety recipients: we may share necessary information to meet legal obligations, investigate abuse, or protect rights and safety. Any future transfer to a separate ASN entity will be handled with required notices and protections.
4. Cookies, local storage, and security
Essential cookies and local/app storage maintain sessions, preferences, read state, and notifications. Clearing them may sign you out or reset preferences. Mobile/web service traffic and external AI/push requests use encrypted transport. iOS sessions and push tokens use device-only Keychain storage, and retained iOS notification content is encrypted using a device-only key. Android session cookies are encrypted using a device-held key and excluded from backup; device-specific push state is excluded from backup/transfer. Encryption does not eliminate access by an authorized operator, replace deletion, or guarantee that every storage layer is encrypted. Access controls, password hashing, and limited logging provide additional safeguards.
ASN does not use browser Do Not Track signals to change its essential service processing. We do not use behavioral advertising or cross-site advertising tracking. Third-party maps and resources receive the limited requests described above and have their own practices; we do not authorize them to use ASN information for advertising.
5. Retention and deletion
Account and community content are kept while needed to provide your account and chosen interactions. Operational/security activity records expire after 30 days through routine cleanup. Records needed for a specific investigation or legal obligation may require separate, access-restricted preservation. Support and moderation records are retained according to the work needed to resolve the request, an associated safety investigation, and applicable legal obligations; you may request their deletion.
Deleting your account removes it and associated content that can be reliably linked to it from active storage. Some older records may require support to verify ownership before deletion. We create a follow-up request and notify you when this applies. Other people's independently authored content and community groups with other participants may remain without identifying you as their creator. Where a retained record is justified by a legal or safety obligation, its scope and retention depend on that obligation. Removing an author label alone is not treated as deletion of personally identifying content.
We make encrypted database backups on our hosting server and copy them to an operator-controlled Mac when it is available. Backup cleanup is scheduled on a 30-day retention cycle. Backups are restricted to recovery use; deleting an account does not immediately rewrite existing encrypted backup files. Recovery requires reconciling later deletion requests before the restored service is reopened. Restricted deletion receipts contain an account identifier, deletion time, review status, and identifiers of specific older records erased during verified review to support that work; they do not contain the erased text. Server infrastructure logs and providers' retained records are managed separately; contact us for the timing and any justified exception that applies to your request. Encryption alone is not a reason to retain information indefinitely. We do not promise immediate erasure of independent copies held by recipients.
When a specific legal or safety obligation requires preserving a reported record, an authorized administrator must record the reason and an expiry date. These separate snapshots are encrypted, access-restricted, and scheduled for removal after expiry or release. Such preservation does not automatically prevent deletion of the rest of an account. The applicable obligation determines the scope and duration; there is no blanket preservation of every reported account.
6. Your choices and requests
You can change profile settings, block users, manage supported content, disable notifications or location access, decline AI Assist, and delete your account. Use Account → Delete Account or the public account-deletion request page. We verify ownership before acting on an external request and explain any additional information reasonably needed. Do not email your password.
For access, correction, deletion, or other applicable privacy rights, email coderman1818@gmail.com. We respond under applicable law and explain relevant exceptions. Rights and obligations under state privacy laws depend on their coverage; this policy does not claim that every statute applies or that ASN is exempt from all of them.
7. Children and teenagers
ASN is not intended for children under 13. If a parent or another person informs us that an account belongs to a child under 13, contact us promptly so we can restrict access and address the information according to applicable law. Users ages 13–17 must meet applicable age and parental-permission requirements. See our Child Safety Standards.
8. Changes and contact
Material changes or a change of operator will be communicated as required, and additional consent obtained where necessary. Published versions have a fixed effective date. Charles Cody Dana operates ASN; contact coderman1818@gmail.com or the contact page.