Altab Privacy Policy

Effective: October 1, 2026 · Version: 1.7

This Privacy Policy explains how IDK Studios, Inc., a Texas corporation doing business as Altab ("Altab," "we," "us," "our"), collects, uses, and shares information when you use Altab. IDK Studios, Inc. is the controller of the personal information described here. By using Altab you agree to this Policy.

1. Who this applies to

Altab is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.

2. Information we collect

Account information. When you sign in (for example, with Google), we receive your email address and a provider account identifier. You may start using Altab anonymously before signing in; anonymous sessions are identified by a random identifier, not by you personally.
Learning and usage data. Your progress, answers, XP, streaks, league standing, spaced-review schedule, and settings, the data needed to run the product and save your place.
Onboarding responses. What you tell us when you start: where you are in your learning, what you have already tried, whether you can build on your own yet, how you found us, the track and the goal you pick, what is holding you back most, and how much you want to do each day.
Project check-ins. If you use check-ins on a project you build, we collect what you submit: your written answers, the address of the public code repository you name, and the address of the site where your project is live. To give feedback we read public information from that repository (such as its file names, its README, recent commit messages, and one file you choose) and from that site (such as its title and text). We keep a record of what we checked, such as commit identifiers, file names, and whether your verification code was found. We do not store the contents of your files or pages. Before storing or sending your answers, we remove text that looks like a password or access key.
Your plan (Module 0). If you ask for a plan, we collect your answers to its questions (your year in school, when you graduate, what you are aiming for, what you have built so far, what you are drawn to, and the hours you have each week) and the text of the resume you paste. From them we store your answers, a score of your resume, and your week-by-week plan. We use your resume only to score it and to build your plan, and for nothing else.
Your certificate. When you complete every lesson of the framework, we create a certificate of completion for you. It records your display name (the name on the account you signed in with, or "Altab reader" if it has none), the date it was issued, and a code of its own. The certificate has a public page that anyone with its link can see, without signing in; it shows that name, that date, and what you completed.
Billing information. If you subscribe, our payment processor (Stripe) collects and processes your payment details. We receive subscription status and limited billing metadata, not your full card number.
Product analytics and device data. We collect usage events (for example, lessons started/completed) and standard technical data (such as device/browser type and approximate location from IP) to understand and improve the product.
Communications. If you email us or set notification preferences, we keep what's needed to respond and to send the messages you've opted into.

3. How we use information

We use information to: provide and personalize the Service (your roadmap, reviews, leagues, streaks); read your project check-ins and write feedback on them; score your resume and build your plan; issue your certificate of completion; process subscriptions and prevent abuse; send transactional and (with your settings) reminder emails; measure and improve the product; provide support; and comply with legal obligations. We do not sell your personal information, and we do not use it for third-party advertising.

Feedback on a check-in is written by an AI model and is advice only. Whether you complete a stage is decided from things we can check, such as your verification code appearing in your repository, never from the model's opinion.

We share information with service providers ("subprocessors") who process it on our behalf under contract, only as needed to run Altab. These currently include:

Supabase, database, authentication, and hosting of your account and learning data.
Stripe, subscription billing and payment processing.
Google, sign-in (OAuth), if you choose it.
Resend, transactional and notification email delivery.
PostHog, product analytics.
Vercel, application hosting and delivery.
Inngest, scheduled and background jobs (for example, weekly league resets, reminders, processing project check-ins, and building your plan).
Anthropic, an AI model provider, which processes the text of a project check-in, together with the public repository and site content it points to, to write feedback on it. We send it only what a check-in needs. It also processes the text of the resume you paste, to score it, and your answers to the plan's questions, to build your plan. We send it only what the score and the plan need.

What is public. Your certificate's page (see section 2) shows your display name, the date it was issued, and what you completed to anyone who has its link. We do not list it anywhere and we ask search engines not to index it, but anyone you share the link with, or who is given it, can see it. If you choose "Add to LinkedIn", LinkedIn receives the certificate's code and link.

We may also share information to comply with law, enforce our Terms, protect rights and safety, or in a merger, acquisition, or asset sale (with notice where required). Aggregated or de-identified data that cannot reasonably identify you is not treated as personal information.

5. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser; some features may not work without them.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or security needs. Project check-ins (your answers, the addresses you gave, the record of what we checked, and the feedback) are kept for as long as your account is active and are deleted with it.

Your plan (your answers to its questions, your resume score, and your plan) is kept for as long as your account exists and is deleted with it. The text of the resume you paste is removed once your plan is built, or at once if it is not a resume; if the build fails for another reason, it is kept until you try again or ask for a new plan, so you do not have to paste it twice. Your certificate (the name and date on it, and its code) is kept for as long as your account exists and is deleted with it; its public page stops working then.

Anonymous sessions that are never upgraded to an account may be purged after a period of inactivity.

7. Your choices and rights

You can update your profile and notification settings in the app, cancel your subscription at any time, and unsubscribe from non-essential emails. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing (for example, under California's CCPA/CPRA or the EU/UK GDPR). To make a request, contact us at the address below; we may need to verify your identity first. We will not discriminate against you for exercising these rights.

8. Security

We use reasonable technical and organizational measures (including access controls and row-level security on our database) to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International users

We operate the Service from the United States. If you use Altab from outside the U.S., you understand your information may be processed in the U.S. and other countries where our subprocessors operate.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The "Effective" date reflects the latest version.

11. Contact

Questions or privacy requests: support@altab.ai.