Altimist
Privacy notice
Version 1.1 · Effective 8 October 2026
1. Who is responsible
Altimist is the controller for the personal data described here. Our data protection lead is Fabio. You can reach us through Help.
2. What we do with your data, and why we are allowed to
| What we do | What it involves | Our lawful basis |
|---|---|---|
| Run the concierge | Answering your questions about the estate, and the messages between you and our AI agent | Performing our contract with you. This is the service you asked for; we cannot provide it without processing what you send |
| Personalise your answers | Remembering interests and preferences from your conversations, so suggestions fit you better | Your consent. This is an optional setting. Altimist works normally with it off, and you can turn it off at any time |
| Produce business insights | Contributing your questions, as part of grouped totals, to reports we give businesses in the estate | Your consent. This is a separate optional choice, and you can withdraw it. Businesses never see your conversations or identify you; totals covering fewer than 10 people are not shown |
| Support you | Handling your reports, questions and complaints, and the evidence you choose to attach | Performing our contract with you |
| Check your age | Confirming you are over 18 before we create your account | Complying with a legal obligation. The Online Safety Act 2023 requires us to keep under-18s off an adults-only service. This is not consent — there is no way to use Altimist without the check, so it would not be a free choice, and we do not present it as one |
| Verify your phone | Sending a code by SMS to confirm the number is yours | Performing our contract with you, and our legitimate interest in preventing fraudulent and automated sign-ups |
| Send you messages on iMessage or WhatsApp | Delivering answers and updates to a phone you have paired | Your consent, given separately when you pair the number. Verifying a number does not pair it |
| Keep the service safe and working | Rate limits, abuse prevention, audit records, security | Our legitimate interests in running a secure service, balanced against your interests |
A note about what you type. You can ask Altimist anything, and some questions say something personal — where to find halal food, the nearest pharmacy, a gift for your husband, whether a venue is step-free. We process what you send in order to answer it, and for nothing else. We do not examine your messages to work out your religion, your health, your sexuality or anything of that kind, and we never record that sort of detail in what Altimist remembers about you. Your conversations are kept for 30 days and then deleted.
3. The age check, in detail
We use Yoti to estimate your age from a photo.
- The photo goes straight to Yoti. It never reaches Altimist. We never see it, never store it, and never learn your age.
- Yoti tells us only whether you passed.
- Yoti deletes the photo once the check is done.
- We keep a record that the check happened and what it concluded — not your age, and no image.
- You cannot type your date of birth instead. We do not accept that as proof.
- The check is automated. If it does not confirm you are over 18, you can try again, up to three times a day. If you already have an account, you can also ask a person at Altimist to review the result from the age check page. They either confirm you’re an adult or keep the result, and their decision stays on your account until you close it. If you want to understand why a check might not confirm an adult, see Why didn’t my age check work?
4. Who else processes your data
Yoti (age checks), Twilio (SMS verification), Cloudflare (hosting, storage and the route to our AI model provider), Neon (our database), LoopMessage (iMessage delivery), our AI model provider, and Meta if you choose to use WhatsApp. They act on our instructions. Our processor list records what each one does.
4a. Where your data goes
Some of your data is processed outside the United Kingdom. Your phone number is processed in the United States when we send and check your verification code — the company that runs that check does not offer it in the UK or Europe. We keep only a scrambled version of your number ourselves. Your age-check photo is processed by Yoti on servers in the UK, or in the US or the EU. Your messages are processed by our AI model provider through Cloudflare. You can ask us for details of the protections that apply to these transfers through Help.
5. How long we keep things
| Your conversations, and the inputs to business insights | 30 days |
| Operational records — logs, rate limits, audit | 90 days |
| Grouped business totals | 12 months |
| Your profile, preferences, uploads and notes | Until you remove them, or close your account |
| A record of a failed or abandoned age check | 30 days |
6. Your rights
You can ask for a copy of your data, correct it, delete it, withdraw a consent you gave, or object to processing based on our legitimate interests. Export is a file you can download, requested from Settings and provided within 30 days. Deletion completes within 30 days, and backups expire within 35 days.
Two honest limits: a message already delivered to iMessage or WhatsApp cannot be recalled from your phone, and totals that no longer identify anyone are not removed from past business reports.
7. Reporting content
You can report content from the item itself. If content on Altimist shares an intimate image of you without your consent, you can tell us so directly and we will take it down as soon as we can and no later than 48 hours. You do not need an Altimist account to report content that is about you.
8. Complaints
Complain through Help. You can complain if you think content is illegal, if we have taken your content down or restricted your account, or if you think we are not doing something we said we would. We will tell you what we decided and why. If a complaint is about an intimate image you reported, we deal with it ahead of the queue.
If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk, or, about online safety, to Ofcom.
9. Changes
We will publish a new version with a new effective date and tell you what changed.