Who operates ALTARA
ALTARA is operated by Tomás Nunes, trading as ALTARA.
Contact
If you have privacy questions or requests, email support@altaraapp.com.
What data we collect
Depending on how you use ALTARA, we may collect:
- account information (such as email address and login data)
- profile information (such as display name, avatar, and preferences)
- messages and usage data needed to run core app features
- billing metadata related to subscription status and transactions
- support communications you send to us by email
- device and log data for security, diagnostics, and reliability
Payments
Payment details are handled by Stripe. ALTARA does not store full card numbers.
Service providers
We use trusted providers to operate ALTARA, including:
- Supabase (backend and authentication services)
- Stripe (payments and billing operations)
- Resend or another email provider (transactional/support email delivery)
- hosting and analytics providers, where applicable
Why we use data
We process data to:
- provide and operate the app
- authenticate accounts and maintain access security
- process subscriptions and billing events
- prevent abuse and support platform safety
- respond to support requests
- improve features, performance, and reliability
- comply with legal obligations
Legal bases under GDPR
For users in the EEA, UK, or similar jurisdictions, we rely on one or more of these legal bases:
- contract (to provide the service you request)
- legitimate interests (to secure and improve ALTARA)
- legal obligations (to meet applicable laws and regulations)
- consent, where specifically requested and applicable
Data retention
We retain personal data only as long as needed for account operation, billing and legal compliance, safety, and technical purposes.
Your rights
You may have rights to:
- access your personal data
- correct inaccurate personal data
- request deletion of personal data
- request restriction of processing
- data portability
- object to certain processing
- withdraw consent where processing relies on consent
To exercise these rights, contact support@altaraapp.com.
EU and Portugal complaints
You may complain to your local data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).
International transfers
Some providers may process data outside Portugal or the European Union. When this happens, we use appropriate safeguards required by applicable law.
Community widgets: privacy and security
Widgets are made by independent creators. ALTARA stores publication metadata, fixed release files, account installation records and ratings. Public installations sync across your devices. Data saved through the widget SDK stays on that device, scoped to your account and that installation; it is not synced as chat data.
Widgets run in isolated frames. The widget SDK does not provide your messages, contacts, account credentials, filesystem or desktop app APIs. Camera, microphone, location, clipboard access, popups and downloads are not enabled for widgets. Isolation is not a review of a creator or a guarantee that a widget is trustworthy.
A fixed release stores its HTML and scripts with ALTARA and verifies them before opening. Published code cannot be edited in place: you choose when to install a replacement release. Remote scripts and dynamic code execution are blocked in this format. HTTP API requests are blocked by default. A fixed release needs the network permission to make HTTPS API requests; the installation or update notice shows this access before you approve. Online API responses can still change. Older live website installations are paused until you choose a fixed release, with saved data retained. Public manifest links added for testing save a fixed copy of release.html on this device. Only explicit live previews and localhost development follow changes on their hosts.
Fetching manifests or icons contacts the creator’s host even before a widget runs. External widgets and online services called by a fixed release can receive your IP address, browser request information and anything you enter or choose to upload. Those services apply their own privacy policies. Installing a widget does not give it access to your ALTARA conversations, but it can imitate a login or payment form. Never enter ALTARA passwords, login codes or payment details inside widgets.
Widgets can use CPU, memory, network bandwidth and battery. A name, icon or rating does not verify a creator’s identity. Before previewing or installing a new release, ALTARA shows an access notice. Installation approves running that release on your account’s devices without repeating the notice each time you open Home.
Use Manage widgets to check for updates or uninstall. Uninstalling deactivates the account installation and removes its SDK data on devices when they synchronize; historical installation records can remain for reinstalling and aggregate counts. A creator can remove a listing while keeping existing installations running, or disable that release on connected apps. Uninstalling cannot delete information already sent to another service; contact that service to request deletion.
Use Report widget in its Marketplace page or Manage widgets to send the release, reason and description to ALTARA moderation. Reports are visible to you and ALTARA moderation, not to the widget creator. You can also ask about your data at support@altaraapp.com.
Security
We use reasonable technical and organizational safeguards designed to protect your information. No system is perfectly secure, but we continuously work to improve protection.
Children and minimum age
ALTARA is intended for users aged 13 and over. If you are under 18, you should use ALTARA with permission from a parent or legal guardian. If local law requires parental consent for the processing of your personal data, that consent must be provided or authorised by your parent or legal guardian. If we learn that we have collected personal data from a child in a way that is not allowed by law, we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date on this page and may provide additional notice where appropriate.