1. Who we are
Aliens.ID is the universal identity layer for the Aliens ecosystem, operated by Aliens LTD (India) and Aliens Incorporation (rest of world). It is the identity provider for every Aliens app — Foundation, School, University, Academy, Company, MyApp, and every future product.
2. What we collect
- Identity: First + last name, display name, Aliens.ID alias (e.g.
you@aliens.id), profile picture if uploaded.
- Contact: Email, phone (for 2FA + recovery only).
- Security: Password hash (Argon2id), passkey public keys, 2FA secrets, recovery codes (hashed).
- Sessions: Active device list (browser, OS, IP-hash, last-seen), permission grants per Aliens app.
- Audit log: Sign-in events, permission grants + revocations, password / 2FA changes, sensitive setting toggles. Append-only.
3. What we do NOT collect
- Browsing history outside Aliens.ID.
- Other Aliens apps' app-specific data (those live in each app's DB, not here).
- Biometric data (passkeys store cryptographic keys, not biometrics — biometrics never leave your device).
- Children under 16 — signup blocks that age band.
- Anything you didn't give us.
4. Permissions to other Aliens apps
Every Aliens app requests OAuth scopes. We surface every grant on the Permissions screen. You can revoke any grant in one click; the app loses your data within 7 days.
Apps see only what their scope allows. No app ever sees your password, 2FA secrets, or recovery codes.
5. Your DPDP rights
Access · correct · erase · withdraw consent · nominate · grievance redressal. Email privacy@aliens.id; we acknowledge within 48 hours, fulfil within 30 days.
Data export available any time from Settings — DPDP Act 2023 § 11. Free, unlimited, machine-readable JSON.
6. Security posture
- TLS 1.3 everywhere.
- Passwords hashed with Argon2id (memory-hard, side-channel resistant).
- Passkeys are WebAuthn FIDO2 — private key never leaves the device.
- 2FA recommended for every account, mandatory for accounts that connect ≥ 3 apps.
- Annual penetration test by a CERT-In empanelled vendor; summary published.