Legal

Privacy Policy

Effective date: March 11, 2026Contact: hello@altuxacademy.comOperator: Simon Sequeda Chaves, Bogotá, Colombia

At Altux Academy ("Altux", "we", "us", or "our"), we take your privacy seriously. Please read this Privacy Policy to learn how we handle your personal data. By using or accessing our Services in any way, you acknowledge that you accept the practices and policies described below, and you hereby consent to our collecting, using, and sharing your information as described in this Privacy Policy.

Your use of Altux's Services is at all times subject to our Terms of Service. Terms used herein without definition have the meanings given in the Terms of Service.

Table of Contents
  1. Scope of this Privacy Policy
  2. Personal Data We Collect
  3. Categories of Personal Data Sources
  4. Purposes for Collecting Personal Data
  5. How We Share Your Personal Data
  6. Tracking Tools and Opt-Out
  7. Data Security and Retention
  8. AI Subprocessors
  9. U.S. State Privacy Rights
  10. EU Data Subject Rights
  11. Colombian Data Subject Rights
  12. Changes to this Privacy Policy
  13. Contact Information

1. Scope of this Privacy Policy

This Privacy Policy covers the treatment of Personal Data we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual, and includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don't own or control, or people we don't manage.

2. Personal Data We Collect

Profile or Contact Data

Data We CollectWho We Share It With
Full nameService Providers · Parties you authorize
Email address (via Google OAuth)
Unique Google account identifier (UUID)

AI Interaction Data

Data We CollectWho We Share It With
Selected learning areaService Providers (AI API providers)
Goals and skill level submitted for plan generation
AI-generated learning plan content associated with your account

Device / IP Address Data

Data We CollectWho We Share It With
IP addressService Providers
Device type, operating system, and browser
Domain server

Web Analytics Data

Data We CollectWho We Share It With
Web page interactionsService Providers
Referring page or source through which you accessed the Services
Statistics associated with the interaction between device or browser and the Services

What We Do NOT Currently Collect

3. Categories of Personal Data Sources

Directly from You

Automatically When You Use the Services

From Third Parties

4. Business and Commercial Purposes for Collecting Personal Data

Providing, Personalizing, and Improving the Services

Communicating with You

Meeting Legal Requirements

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different purposes without notifying you.

5. How We Share Your Personal Data

We do not sell your Personal Data. We disclose your Personal Data only to the following categories of service providers:

ProviderPurposePrivacy Policy
SupabaseAuthentication (Google OAuth), database storagesupabase.com/privacy
AnthropicAI learning plan generation (Claude API)anthropic.com/privacy
Google (Gemini)AI learning plan generation (Gemini API)policies.google.com/privacy
VercelWebsite hosting and deploymentvercel.com/legal/privacy-policy
PostHogProduct analytics: receives name, email and user ID for session identification and usage event trackingposthog.com/privacy
LemonSqueezyPayment processing and subscription management — acts as Merchant of Record; receives name, email and billing information to complete transactionslemonsqueezy.com/privacy

We may also share data when required by law, a court order, or in connection with a merger, acquisition, or other business transaction.

6. Tracking Tools and Opt-Out

The Services use cookies and similar technologies to enable our servers to recognize your browser, inform us about when and how you visit the Services, analyze trends, and operate and improve our Services.

Essential Cookies

Necessary to provide the features or services you have requested. For example, certain cookies maintain your authenticated session after signing in via Google. Disabling them may make certain features unavailable.

Performance / Analytics Cookies

Allow us to understand how visitors use the Services — which pages are visited and for how long. This helps us improve the platform. We use PostHog as our product analytics platform. When you sign in, PostHog receives your name, email address, and user ID to link usage events to your session. PostHog acts as a data subprocessor under its own Privacy Policy.

You can choose whether to accept cookies through your browser settings.

7. Data Security and Retention

Altux uses Supabase for data storage, which provides industry-level security including encryption at rest and in transit (TLS). Authentication is handled via Google OAuth — we never receive or store your Google password.

Data Retention

8. AI Subprocessors

To provide the Services, Altux uses the following AI providers as subprocessors. Content you generate and messages you send may be processed by these services to generate responses:

ProviderServicePurposePrivacy Policy
Anthropic, Inc.Claude APIModule coaching and learning content generationanthropic.com/privacy
Google LLCGemini APIPersonalized roadmap generation and onboarding conversationspolicies.google.com/privacy

Anthropic and Google process your content pursuant to their own privacy policies and terms of use. Altux does not use your content to train AI models.

9. U.S. State Privacy Rights

California Residents

Under California Civil Code Sections 1798.83–1798.84, California residents have the right to contact us to prevent the disclosure of Personal Data to third parties for their direct marketing purposes. To submit such a request, contact us at hello@altuxacademy.com.

Nevada Residents

Altux does not sell Personal Data. To confirm or make a request, contact us at hello@altuxacademy.com with the subject "Nevada Do Not Sell Request".

10. EU Data Subject Rights

If you are a resident of the European Union, United Kingdom, Liechtenstein, Norway, or Iceland, you may have additional rights under GDPR with respect to your Personal Data.

Legal Bases for Processing

Your Rights

To exercise any of these rights, contact us at hello@altuxacademy.com.

International Transfers: The Services are hosted primarily in the United States (Supabase, Vercel). For such transfers, where required, we rely on Standard Contractual Clauses (SCCs) enacted by the European Commission.

11. Colombian Data Subject Rights

Under Law 1581 of 2012 and Decree 1377 of 2013 of Colombia, if you are a personal data subject residing in Colombia you have the following rights:

To exercise any of these rights, write to us at hello@altuxacademy.com. We will respond within the timeframes established by Colombian law.

Data Controller: Simon Sequeda Chaves · hello@altuxacademy.com · Bogotá, Colombia

12. Changes to this Privacy Policy

We are constantly working to improve our Services, so we may need to modify this Privacy Policy from time to time. We will alert you to any changes by posting a notice on the Altux website, sending you an email, and/or by other means. If you use the Services after changes have been posted, it means you accept all such changes.

13. Contact Information

If you have questions or comments about this Privacy Policy, about the way we collect and use your Personal Data, or about your choices and rights, please contact us:

Email: hello@altuxacademy.com
Website: altuxacademy.com
Operator: Simon Sequeda Chaves, Bogotá, Colombia