Privacy Policy
Last updated: October 28, 2026
This policy explains what information Codelab collects when you use codelab.app, the builder at app.codelab.app, and the Codelab iOS app, how it is used, and who processes it.
Who we are
Codelab operates these services. For any question or request about your data, email privacy@codelab.app.
Information we collect
Your account
Accounts are managed by Clerk. You can sign in with your email address or with a third-party account such as Google. When you sign in with a third-party account, Codelab receives your name, email address, and profile picture — only what that provider shares with us.
What you build
The apps, pages, components, styles, and data you create are stored in our database so the builder can load and publish them. Files and images you upload are stored in file storage.
Payments
Paid plans and credit top-ups are processed by Stripe. Your card details go to Stripe, not to Codelab; we receive the result of the payment so we can apply it to your account.
The AI assistant
When you use the AI assistant, image generation, or voice input, the prompts, app content, and recordings you send are passed to the AI providers listed below to produce a response.
Connected services
If you connect a Supabase project to an app, Codelab reads that project's public keys and then revokes its access grant; we keep no standing access to your Supabase account.
Logs
Our servers record application logs and traces, which can include your account ID, so we can run, secure, and debug the service.
How we use it
We use this information to provide Codelab: to sign you in, save and publish your work, process payments, answer AI requests, and keep the service running and secure.
We do not sell your personal data.
Who processes it
Codelab relies on these service providers:
- Clerk — accounts and sign-in.
- Neon — database for your account and app content.
- Railway — application hosting.
- Cloudflare — DNS and storage for uploaded files and images.
- Axiom — application logs and traces.
- Stripe — payments for paid plans and credits.
- AI providers — the AI assistant reaches its models through OpenRouter, which routes your request to the model's provider: currently OpenAI, Anthropic, Google, xAI, Moonshot AI, or Z.ai. Its web search also runs through OpenRouter. Image generation uses OpenAI, Google (Gemini), or QuiverAI, and voice input is transcribed by OpenAI.
Cookies and local storage
Codelab uses no third-party analytics or advertising trackers. The builder uses the cookies Clerk needs to keep you signed in, and keeps interface preferences, such as panel layout, in your browser's local storage.
Apps you publish
Apps built with Codelab are published by their creators. If you have a question about data collected by a published app, contact its creator, or email privacy@codelab.app if you can't reach them.
Your choices
To ask for a copy of your data, a correction, or the deletion of your account and its content, email privacy@codelab.app. Ask there too about how long we keep data.
Changes to this policy
When this policy changes, we update it on this page and change the date at the top.
Contact
Email privacy@codelab.app about privacy or your data.