Privacy Policy

This is a working draft for review. Final legal language is to be reviewed and finalized by counsel (Todd Nurick) before launch.

This Privacy Policy explains how ALHC (“ALHC,” “we,” “us”) collects, uses, shares, and protects information in connection with Gravitas Universe (the “Service”). It should be read together with our Terms of Service.

1. Information we collect

We collect the following categories of information:

• Account information — the email address and password you use to sign in, your username, first name, and preferred language.
• Profile & contact information — details you choose to add, such as your last name, city/region, role and department, bio, photo, intro video, work history, and an optional contact email and phone number for outreach (which can differ from your login email).
• Gameplay & challenge data — your progress through scenarios and challenges, answers and completions, XP, ranks, streaks, altitude/knowledge/skill scores, leaderboard standing, and reward activity.
• Behavioral & calibration signals — derived signals about how you engage with scenarios (for example, response patterns used to calibrate difficulty, encouragement, and a motivational profile). These are used to personalize your experience and are not sold.
• Consent records — when you accept these documents we record that you consented, along with the version and a timestamp, as described in section 4.
• Technical & usage data — information generated automatically when you use the Service, such as device/browser information, log data, and approximate activity timing, used to operate and secure the Service.

2. How we use your information

• to create and operate your account and provide the Service;
• to run gameplay — scoring, ranks, streaks, leaderboards, and rewards — and to personalize and calibrate your experience;
• where you opt in, to make your profile discoverable to hospitality employers and staffing partners for opportunities;
• to communicate with you about the Service, and — only with your separate consent — to send marketing or outreach messages (including SMS/text or calls to a number you provide);
• to maintain security, prevent fraud and cheating, debug, and comply with legal obligations; and
• to improve the Service and develop new features.

3. Legal bases & how we share

We rely on your consent, the performance of our agreement with you, our legitimate interests in operating and securing the Service, and compliance with law. We do not sell your personal information. We share information only:

• with service providers who process data on our behalf (for example, hosting and database infrastructure) under appropriate confidentiality and security obligations;
• with employers or staffing partners only for profile fields you have made discoverable by opting in;
• where required by law, legal process, or to protect the rights, safety, and security of users, the public, or ALHC; and
• in connection with a corporate transaction (such as a merger or asset sale), subject to this Policy.

4. Consent

When you create an account you are asked to affirmatively agree to the Terms of Service and this Privacy Policy. We record that consent — including the document version and the date and time you accepted — so we can demonstrate it and re-request it when these documents materially change. Consent to optional marketing or SMS outreach is separate and is not a condition of using the Service; you can withdraw any consent at any time (see section 7).

5. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent abuse, and maintain security. You can request deletion as described below.

6. Security

We use administrative, technical, and organizational safeguards designed to protect your information, including authenticated access and row-level access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit most profile data directly in the app, withdraw marketing/SMS consent, and request account deletion by contacting us at legal@gravitasuniverse.com. We will respond consistent with applicable law.

8. Children’s privacy

The Service is intended for adults in the hospitality workforce and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the version and effective date above and, where appropriate, notify you or ask you to re-accept.

10. Contact

For privacy questions or to exercise your rights, contact legal@gravitasuniverse.com.