Effective date: October 12, 2026
Altega is made by Tessix LLC ("we", "us"). This policy explains what information Altega handles, why, and what control you have over it. We wrote it to be readable, because you deserve to actually understand it.
The short version: your tasks and goals are yours. We collect the minimum needed to run the app, we don't run ads, we don't sell or share your data for advertising, and we don't use analytics trackers. Deleting your account deletes your data.
This policy covers the Altega app distributed through the Apple App Store, and will cover Google Play if we ship Altega for Android.
Account information. Your email address, your name (if you share it via Sign in with Apple or Google), and an account identifier. Used to sign you in and keep your data attached to you across devices.
Your content. The tasks, goals, clusters (groups of tasks inside a project), subtasks, supply lists, the categories you name, rewards, your display name, which of your goals and pods you have pinned to the top of your lists (a private preference that nobody else in a pod sees), and related details you create. This is the heart of the app and it syncs to our cloud database so it survives reinstalls and reaches your other devices.
Things you own. When you check off a tool or piece of equipment on a project's supply list, Altega keeps a record of it (the item's name, when you checked it off, and which project it was for) in a "Things you own" list tied to your account, so Lyra can remind you that you already have it before you buy it again. You can mark items gone or remove them at any time from Me → Things you own.
Pods (shared projects). When you turn a project into a pod or join one with an invite code, the pod's plan (its clusters and tasks, each task's steps, effort level and date, and for a repeating task how often it repeats, until when, any paused, skipped or moved days, and the days it was done and by whom; who claimed what, which task each member has moved to Now, and when they completed them), the pod's group chat, its activity history, and a copy of your display name and Traveler look are stored with the pod and are visible to everyone in it for as long as they are members. Reactions to a chat message (who reacted, with which emoji) and replies (which keep a copy of a line of the message they quote) are stored with the message and are visible to everyone in the pod. Anyone in a pod can invite others by sharing its code or link; whoever holds the code sees a preview of the pod (its name, its members' names and Traveler looks, and its clusters' names with their task counts). Joining is a request that the pod's owner approves: to decide, the owner sees the name you enter and the email address on your account. That is the only time your email address is shown to another person. A pod's owner can also remove a member, which works like leaving. If you decline an invitation to a pod, the name you show is shared with that pod (in its activity) and with the person who invited you, and nothing else about you is. One member holds a repeating pod task at a time: its days are added to that member's own task list, including when the pod's owner gives it to them, and leave it again (except the days they completed) when it is given to someone else or handed back. If you leave, the tasks you had claimed (a repeating one with all its days ahead) go back to unclaimed, the tasks and days you completed stay credited to you, and your past messages and activity stay in the pod under the name you used there (or "Someone who left" if you delete your account).
Your notifications. When something happens in a pod you're in (someone joins or can't join, asks to join a pod you own, lets you in or not, claims or completes a task, gives you one, adds a cluster, or pauses or stops a repeating task), we keep a copy of that line in a notification history tied to your account, so the Notifications tab shows it on any of your devices: the pod's name, the name of the person who did it, the task or cluster it was about, when it happened, and whether you've read it. The people in your pods get the same kind of line about what you do there. We also keep which pods you've muted in that tab and when you last opened it. Lyra's check-ins and her nudges about unfinished tasks, and invitations you opened but haven't answered, stay on your phone and aren't sent to us. Chat messages aren't copied here.
Feature votes. When you vote for an upcoming feature on the in-app roadmap, we store which features you voted for, tied to your account, so your votes persist and sync across your devices. Your stated feature preferences, nothing more.
Stars and explorer customization. As you complete tasks you collect stars (an in-app count), which you can spend to customize your character ("the Traveler"). We store your star balance, a ledger of the stars you have earned and spent, and which cosmetic options you own and have equipped, tied to your account, so they persist and sync across your devices. These are in-app values only — not money, and not shared with anyone. Cosmetic items marked premium are unlocked with an Altega Plus subscription (handled by our billing subprocessor, below); we do not sell individual items.
Things you share into Altega. When you share a screenshot, some selected text or a link into Altega from another app (the share sheet's "Altega" or "Add to Altega"), or say or send something to "Capture with Altega" (Siri, Shortcuts, Back Tap, the Action button), it goes to our server, which saves it as a task in your Altega and asks Lyra to write the task up. That can include other people's words, such as an email or a message you chose to share. We keep the task Lyra writes (its title, steps, duration and any deadline she found, and which app a screenshot showed), a short excerpt of shared text or a link (up to 500 characters, so you can find the original again), and never the screenshot itself. To let the share sheet and Siri add to your account without signing in again, Altega keeps a random, per-device capture key on your phone; our server stores only a one-way fingerprint of it with your account identifier and a random device identifier.
AI feature input. When you use Lyra's features (sorting typed text into tasks, breaking tasks into steps, chatting to create a goal), the text you provide is sent to our AI provider to generate the response. See "How AI features handle your text" below.
Usage counters. Small counters of how many AI features you've used (for the free plan's limits). Numbers only, not content.
Purchase status. If you subscribe to Altega Plus, our payments partner processes the purchase and tells us whether your subscription is active. We never see your card details; Apple handles payment.
Notification token. A device token so we can deliver the reminders you've turned on.
Crash reports. If the app crashes, a diagnostic report (device model, OS version, what the code was doing, and your account identifier) goes to Google's Crashlytics service so we can find and fix the bug. Crash reports never include your tasks, goals, or messages.
What we don't collect: no advertising identifiers, no location, no contacts, no analytics or behavioral tracking SDKs, and nothing from other apps except what you choose to share into Altega. Altega does not "track" you as defined by Apple's App Tracking Transparency, which is why it never asks for that permission.
We use a small set of service providers, bound by their own data processing agreements:
| Provider | What they do | What they handle |
|---|---|---|
| Google (Firebase / Google Cloud) | Sign-in, database, notifications, app configuration, abuse protection, crash reporting | Account info, your content, feature votes, usage counters, notification token, crash reports |
| Anthropic | AI processing (Claude, via our server gateway) | AI feature input (the text you give AI features and the conversation needed to answer it, and the screenshots, text and links you share into Altega for Lyra to write a task from) |
| RevenueCat | Subscription management and receipt validation | Account identifier, purchase history |
| Apple | App distribution, payment processing, Sign in with Apple | Payment details (never visible to us), Apple ID sign-in |
We will update this list before adding any new provider. We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
Your data is kept while your account exists. You can delete your account inside the app (Settings → Account → Delete account). Deletion removes your sign-in and erases your content from our database immediately. Purchase records held by our payments partner are deleted through their process within 30 days of your deletion. Apple retains its own payment records under its policies (we can't delete Apple's records of your purchases, and they're needed for things like refunds). Pods you were in keep their plan and chat for the other members; your name there becomes "Someone who left".
Things you share into Altega: the screenshot is never kept by us (a copy waiting on your phone for Lyra is deleted once she has read it, after seven days, or when you sign out); the task and its short excerpt of shared text are kept like any task until you delete them or your account. The capture key's fingerprint is deleted when you sign out on that phone, turn capture off, or delete your account.
Your notification history keeps each item for 30 days and then deletes it automatically. Leaving a pod (or being removed from it) deletes that pod's items from your history right away, clearing an item deletes it, and deleting your account deletes them all. A line about you in another member's history follows their 30 days.
Want a copy of your data first? Email us before deleting and we'll send you an export.
Depending on where you live (including the EU/EEA, UK, and California), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. The in-app deletion and the export-by-email process above cover the common cases; for anything else, contact us and we'll respond within 30 days. We don't sell personal information, so there's nothing to opt out of selling. We will never treat you differently for exercising your rights.
Our lawful bases for processing (for GDPR folks): performing our contract with you (running the app), and our legitimate interest in keeping the service safe and abuse-free.
Data travels over encrypted connections (TLS) and is stored in Google Cloud infrastructure. Access is locked to your account by server-side security rules, and our backend only accepts requests from genuine copies of the app (Firebase App Check).
Handing off your device. Your sign-in is stored in the device's keychain, which survives deleting the app — that's how a reinstall picks your account back up without asking you to sign in again. Before you sell or hand off a device, sign out of Altega (or delete your account) so the next owner can't reopen your data.
Altega is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has created an account, contact us and we'll delete it.
Altega is a planning tool. It is not a medical device, medical treatment, or therapy, and it doesn't provide medical advice. If you're struggling, please reach out to a healthcare professional — and if you're in crisis in the US, you can call or text 988.
If we change this policy, we'll update it here with a new effective date, and for meaningful changes we'll tell you in the app. The history of this document is version-controlled.
Tessix LLC
Email: support@altega.app