Privacy Policy

At Altux Academy ("Altux", "we", "us", or "our"), we take your privacy seriously. Please read this Privacy Policy to learn how we handle your personal data. By using or accessing our Services in any way, you acknowledge that you accept the practices and policies described below, and you hereby consent to our collecting, using, and sharing your information as described in this Privacy Policy.

Your use of Altux's Services is at all times subject to our Terms of Service. Terms used herein without definition have the meanings given in the Terms of Service.

1. Scope of this Privacy Policy

This Privacy Policy covers the treatment of Personal Data we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual, and includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don't own or control, or people we don't manage.

You must be at least 13 years old to use the Services. If you are under 18, you confirm that a parent or legal guardian has reviewed and consented to this Privacy Policy on your behalf.

2. Personal Data We Collect

Profile & Account Data

AI Coaching & Content Data

Operational & Security Data

Device / IP Address Data

Web Analytics Data

What We Do NOT Collect

• Payment card data or billing addresses (handled exclusively by LemonSqueezy as Merchant of Record)
• Phone numbers
• Physical addresses
• Passwords (authentication is handled exclusively through Google OAuth)
• Special category data under GDPR (health, biometric, racial/ethnic origin, etc.)

3. Categories of Personal Data Sources

Directly from You

• When you create an account or sign in via Google OAuth
• When you complete onboarding and set your mission, goals, and constraints
• When you interact with the AI coach, create roadmaps, or complete tasks
• When you voluntarily contact us

Automatically When You Use the Services

• Through standard web analytics when you browse altuxacademy.com (PostHog)
• Through Supabase, which logs authentication events and stores your profile, content, and activity data
• Through AI operations: each coaching session, brief, or roadmap generation logs usage against your tier

From Third Parties

• Google — when you sign in via Google OAuth, we receive your name, email address, and unique Google identifier
• OpenRouter API — we send your content to OpenRouter (openrouter.ai), a US-based AI gateway, to generate coaching responses, roadmaps, and briefs; OpenRouter routes requests to AI models under its own privacy policy
• LemonSqueezy — subscription events (tier, status, renewal dates) are received via webhook when you purchase or manage a paid plan

4. Business and Commercial Purposes for Collecting Personal Data

Providing, Personalizing, and Improving the Services

• Creating and managing your account
• Generating personalized AI coaching, roadmaps, and daily briefs based on your mission and goals
• Storing and displaying your goals, roadmaps, tasks, and progress
• Enforcing subscription tier limits
• Enforcing minimum age requirements
• Improving the Services, including testing, research, and product development
• Fraud prevention, security, and debugging

Communicating with You

• Responding to correspondence we receive from you
• Contacting you when necessary or requested
• Sending information about Altux or the Services

Meeting Legal Requirements

• Complying with our legal obligations under applicable law, regulation, or court order
• Protecting the rights, property, or safety of you, Altux, or another party
• Enforcing any agreement with you and resolving disputes

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different purposes without notifying you.

5. How We Share Your Personal Data

We do not sell your Personal Data. We disclose your Personal Data only to the following categories of service providers:

We may also share data when required by law, a court order, or in connection with a merger, acquisition, or other business transaction.

6. Tracking Tools and Opt-Out

The Services use cookies and similar technologies to enable our servers to recognize your browser, inform us about when and how you visit the Services, analyze trends, and operate and improve our Services.

Essential Cookies

Necessary to provide the features or services you have requested. For example, certain cookies maintain your authenticated session after signing in via Google. Disabling them may make certain features unavailable.

Performance / Analytics Cookies

Allow us to understand how visitors use the Services — which pages are visited and for how long. This helps us improve the platform. We use PostHog as our product analytics platform. When you sign in, PostHog receives your email address and user ID to link usage events to your session. PostHog acts as a data subprocessor under its own Privacy Policy.

You can choose whether to accept cookies through your browser settings.

7. Data Security and Retention

Altux uses Supabase for data storage, which provides industry-level security including encryption at rest and in transit (TLS). Authentication is handled via Google OAuth — we never receive or store your Google password. Row-level security (RLS) policies ensure each user can only access their own data.

Data Retention

• We retain Personal Data while your account is active or as needed to provide the Services
• When you delete your account — via Settings → Delete Account or by emailing hello@altuxacademy.com — all your data is permanently deleted within 30 days, including goals, roadmaps, tasks, chat history, audit logs, and AI usage records
• We may retain information in anonymous or aggregated form where it does not personally identify you

Data Breach Notification

In the event of a personal data breach, Altux will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where required by applicable law). If the breach poses a high risk to your rights and freedoms, we will also notify you directly without undue delay.

8. AI Subprocessors

To provide AI coaching, roadmap generation, and daily briefs, Altux sends your content to the following AI provider. This includes your mission, goals, task context, and chat messages:

OpenRouter processes your content pursuant to its own privacy policy and terms of use. Altux does not use your content to train AI models, and does not permit OpenRouter to use your content for model training on our behalf.

9. U.S. State Privacy Rights

California Residents

Under California Civil Code Sections 1798.83–1798.84, California residents have the right to contact us to prevent the disclosure of Personal Data to third parties for their direct marketing purposes. To submit such a request, contact us at hello@altuxacademy.com.

Nevada Residents

Altux does not sell Personal Data. To confirm or make a request, contact us at hello@altuxacademy.com with the subject "Nevada Do Not Sell Request".

10. EU Data Subject Rights

If you are a resident of the European Union, United Kingdom, Liechtenstein, Norway, or Iceland, you may have additional rights under GDPR with respect to your Personal Data.

Legal Bases for Processing

• Contractual Necessity: We process Profile/Account Data, AI Coaching Data, and Device/IP Data as necessary to fulfill our Terms of Service.
• Legitimate Interest: We process analytics and usage data to improve the platform, ensure security, and communicate with you.
• Consent: In some cases, we process Personal Data based on express consent you provide at the point of collection.

Your Rights

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of some or all of your Personal Data
• Withdrawal of Consent — withdraw consent for processing where consent is the legal basis
• Portability — request a machine-readable copy of your data
• Objection — object to further use of your Personal Data for certain purposes
• Restriction of Processing — ask us to restrict further processing of your data
• Supervisory Authority Complaint — lodge a complaint with your country's supervisory authority

To exercise any of these rights, contact us at hello@altuxacademy.com.

11. Colombian Data Subject Rights

Under Law 1581 of 2012 and Decree 1377 of 2013 of Colombia, if you are a personal data subject residing in Colombia you have the following rights:

• Know — request information about the personal data we process about you.
• Update and Rectify — request correction of inaccurate or incomplete data.
• Delete — request deletion of your personal data when it is no longer necessary for the purpose that motivated its collection, or when you have revoked your authorization.
• Revoke Authorization — withdraw the consent you have given for the processing of your data.
• Access for free — consult your personal data at least once a month at no cost.
• File complaints — before the Superintendencia de Industria y Comercio (SIC) if you believe your data protection right has been violated.

To exercise any of these rights, write to us at hello@altuxacademy.com. We will respond within the timeframes established by Colombian law.

12. Changes to this Privacy Policy

We are constantly working to improve our Services, so we may need to modify this Privacy Policy from time to time. We will alert you to any changes by posting a notice on the Altux website, sending you an email, and/or by other means. If you use the Services after changes have been posted, it means you accept all such changes.

13. Contact Information

If you have questions or comments about this Privacy Policy, about the way we collect and use your Personal Data, or about your choices and rights, please contact us: