Privacy Policy

Section 1

Master Privacy Policy

Alamix LLC is an independent software publisher based in Sioux City, Iowa. We design, develop, and publish mobile applications and web services under our own name. This Master Privacy Policy governs all software, web platforms, and applications published by Alamix LLC.

Data We Collect

We collect only information strictly necessary to provide, maintain, and secure our software:

• Account Credentials: Basic user-provided identity details (such as full name and email address) required for account registration, authentication, and administrative communication.
• Technical & Device Identifiers: Operational telemetry, anonymized crash logs, and device push notification tokens (Apple APNs and Google FCM) necessary to deliver direct service alerts.
• User Communications: Inquiries, technical support requests, and bug reports sent directly to our studio channels.

We do not collect precise GPS location tracking, biometric data, or credit card payment information. Purchases or subscriptions, when offered, are processed directly by platform providers (Apple App Store or Google Play).

How We Use Information

Information collected is used solely to authenticate users, deliver direct application features, provide technical support, detect and prevent security incidents, and maintain software reliability. We do not use personal data for automated profiling or commercial credit scoring.

Non-Sale of Data & Zero Targeted Ads Pledge

Our pledge is unequivocal: we never sell, rent, or trade personal data. We do not partner with data brokers, do not display commercial third-party advertisements, and do not track users across third-party applications or websites.

Cookies & Website Analytics

Our studio website (alamix.org) does not use tracking cookies, advertising pixels, or third-party behavioral analytics trackers. Standard server logs may record routine network request metadata (IP address, user agent, timestamp) solely to deliver static assets, monitor service health, and protect against malicious traffic or denial-of-service attempts.

User Privacy Rights (CCPA, GDPR, & State Laws)

Depending on your jurisdiction—including California (CCPA/CPRA), the European Economic Area (GDPR), and US states with applicable consumer privacy legislation—you have specific rights regarding your personal information:

• Right to Know & Access: You may request disclosure of what personal data we process and how it is used.
• Right to Correction: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal data, subject to legal and regulatory retention obligations.
• Right to Data Portability: You may request a copy of your personal data in a standard, machine-readable format.
• Non-Discrimination: We will never deny services, charge different prices, or alter service quality for exercising your privacy rights.

To exercise any of these rights, contact our Privacy Officer at privacy@alamix.org.

Data Security & Storage

We employ administrative, physical, and technical safeguards to protect personal data against unauthorized access, loss, alteration, or disclosure. All network communications are encrypted in transit using Transport Layer Security (TLS 1.3). Data at rest is encrypted using AES-256 standards in secure United States cloud facilities with strict role-based access control.

Infrastructure Subprocessors

Alamix LLC relies on limited infrastructure subprocessors bound by strict data protection and confidentiality agreements:

• Supabase Inc.: Database infrastructure, authentication services, and encrypted storage hosted in United States data centers.
• Apple Push Notification service (APNs) & Google Firebase Cloud Messaging (FCM): Operational delivery of transactional mobile push notifications.
• Google Cloud Identity: Single Sign-On (OAuth 2.0) authentication verification for authorized domains.
• Expo / EAS (650 Industries, Inc.): Mobile application build, compilation, and runtime update distribution infrastructure.

Contacting the Privacy Officer

For privacy inquiries, audit questions, or rights verification, contact our studio directly:

Section 2

Schedule A — Career Academy (SCCA) Educational Addendum

This addendum governs data handling for the Career Academy mobile application (com.alamix.scca), serving students, instructors, and employer mentors across the Sioux City Career Academy and its regional consortium of 15 partner sending high schools throughout Iowa, Nebraska, and South Dakota.

Scope & 15 Regional Partner High Schools

The Career Academy platform coordinates Career & Technical Education (CTE), work-based learning internships, and Career and Technical Student Organizations (CTSOs) across 15 regional partner school districts. All institutional records processed originate under the educational authority of participating public school districts.

FERPA Compliance & School Official Designation

Alamix LLC acts as an authorized contractor under the Family Educational Rights and Privacy Act (FERPA) "School Official" exception (34 CFR § 99.31(a)(1)(i)(B)). All student education records remain the exclusive property of the participating home school districts. Alamix LLC maintains and processes such data under the direct control and instruction of school authorities and uses it solely for authorized educational interests.

Complete SCCA Student Data Inventory

The application processes specific categories of data necessary for CTE cohort management and work-based learning accreditation:

• Student & Staff Profiles: Full name, school district email, sending high school, grade level, and assigned pathway or CTSO role.
• Single Sign-On (Google Workspace for Education): When authenticating via Google, we access only the verified profile name and email address. We do not access Google Drive files, Google Classroom materials, personal contacts, or external account data. Our usage strictly adheres to the Google API Services User Data Policy.
• Work-Based Learning & Internship Records: Clocked internship hours, employer evaluation notes, skill competencies, and CTSO chapter memberships.
• Showcase Media & Communications: Optional profile avatars, approved student showcase project photos, story submissions, and academic group messages between students and certified coordinators.
• Operational Telemetry: Device tokens for time-sensitive internship shift reminders and anonymized crash telemetry.

Strict Prohibition on AI Training & Commercial Use

Alamix LLC makes an express non-commercial pledge: No student education records, coursework, internship reflections, showcase submissions, or user-generated content will ever be sold, rented, monetized, or used for behavioral marketing. Furthermore, student data will never be ingested, analyzed, or processed to train, fine-tune, or evaluate commercial artificial intelligence (AI) or machine learning (ML) models.

Institutional Data Ownership & Archival Retention

All educational records belong to the student's home school district. Verified work-based learning hours and internship logs are maintained in an archival format strictly to satisfy applicable state departments of education (including Iowa, Nebraska, and South Dakota) CTE audit standards, federal Perkins V reporting, and district graduation verification rules.

Minors, Parental Rights, & Account Deletion

Our educational platform is intended for high school students enrolled in Career Academy pathways. We do not knowingly collect personal data from children under 13 without school or parental authorization. Parents and legal guardians may inspect, review, or request corrections to student records by contacting their school administration or by writing to privacy@alamix.org.

Students or staff may delete their account at any time in the mobile app via Settings > Account Settings > Delete Account, or by submitting a request through our Account Deletion Portal. Deletion immediately revokes login credentials, clears active sessions, and removes non-archival personal identifiers.

Section 3

App Store & Play Store Data Safety Nutrition Labels

The following table outlines data practices for the Career Academy (SCCA) mobile application (com.alamix.scca) in accordance with Apple App Store Privacy Nutrition Labels and Google Play Data Safety requirements.