Privacy Policy

Effective: May 12, 2026 · Last updated: June 6, 2026

Rebuild ("we", "us", or "our") operates the goal management service "Abstria" (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

1. Information We Collect

1.1 Account Information

  • Email address (via email sign-up or Google OAuth)
  • Display name and profile picture (if provided via Google OAuth)
  • Account creation date and last login timestamp

1.2 Service Usage Data

  • Goals, tasks, notes, and other content you create
  • Feature usage and activity logs
  • User preferences (language, display settings, etc.)

1.3 Payment Information

  • Subscription plan and billing status
  • Note: Credit card details are processed directly by Stripe. We do not store your card information.

1.4 Technical Information

  • IP address, browser type, and operating system
  • Cookies and session data
  • Page views and interaction logs via Google Analytics
  • In-product interaction events and funnel analytics via PostHog
  • Error logs and performance data

2. How We Use Your Information

PurposeData Used
Providing and authenticating the ServiceAccount information, usage data
Payment processing and plan managementPayment information
Service improvement and analyticsUsage logs, technical information
Security and fraud detectionIP address, activity logs
Responding to inquiriesEmail address

3. Third-Party Services

We share or process data with the following third-party services. We do not sell your personal information to any third party.

ServicePurposePrivacy Policy
Supabase (Supabase Inc.)Data storage and authenticationsupabase.com/privacy
Stripe (Stripe, Inc.)Payment processingstripe.com/privacy
Google Analytics (Google LLC)Access analytics and cookiespolicies.google.com/privacy
PostHog (PostHog, Inc.)Product analytics and funnel measurementposthog.com/privacy
Cloudflare (Cloudflare, Inc.)CDN and hostingcloudflare.com/privacypolicy/

4. Cookies and Tracking

We use the following cookies. By clicking "Accept" on the cookie banner shown on your first visit, you consent to the use of these cookies.

CookiePurposeDuration
Session cookieAuthentication and login persistenceUntil browser close (or token expiry)
GA4 cookies (_ga, _ga_*)Access analytics2 years
PostHog cookies (ph_*)Product analytics and funnel measurement1 year
Consent cookieStoring your cookie consent state1 year

You can disable cookies in your browser settings, but some features may not work as expected.

5. Data Retention

DataRetention Period
Account information and usage dataDeleted within 30 days after account deletion
Payment history7 years (as required by applicable law)
Access logs90 days
Cookie consent records1 year

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

AccessRequest a copy of the personal data we hold about you
RectificationRequest correction of inaccurate or incomplete data
ErasureRequest deletion of your personal data
Data PortabilityRequest your data in a machine-readable format (GDPR users)

To exercise these rights, contact us at the address below. You can also delete your account directly from the Settings page.

7. Children's Privacy

The Service is not directed to individuals under the age of 16. If we become aware that a user under 16 has registered, we will promptly delete their account and associated data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via an in-app notice. For significant changes affecting how we handle your personal data, we will also send an email notification.

9. Contact Us

If you have any questions or requests regarding this Privacy Policy, please reach us through our contact form: