Effective Date: January 1, 2026  |  Last updated: January 17, 2026

Tab Out — Privacy Policy

Effective Date: January 1, 2026

Last updated: January 17, 2026

Thank you for using Tab Out (“the App”). This Privacy Policy explains how Starc Labs LLC (“we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use Tab Out, our website starclabs.com, and any related services (“Services”). By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are & How to Contact Us

• **Company/Developer:** Starc Labs LLC
• **Contact Email:** info@starclabs.com
• **Privacy Contact:** Same as above
• **Business Address:** *Not published*

2. Scope

This Privacy Policy applies to the Tab Out mobile application, pages under starclabs.com, and our support channels (email or in‑app). It does not apply to third‑party websites, apps, or services that we do not control.

3. Information We Collect

A) Information You Provide

• **Account Information** — name, email, profile details.
• **Authentication** — Apple/Google Sign‑In identifiers; we do not store your passwords.
• **Support Communications** — messages, attachments, and issue reports.
• **Payments** — processed securely by **Stripe**; we do **not** receive full card numbers.

B) Information Collected Automatically

• **App Activity & Usage** — features used, session duration, interactions with tabs.
• **Device Information** — device model, OS version, language/locale, time zone, device identifiers.
• **Diagnostics & Crash Logs** — to improve performance and stability.

C) Device Permissions (Only If You Enable Them)

• **Camera** — capture receipt images for AI itemization.
• **Photos** — upload stored receipt images.
• **Contacts** — invite friends or group members.
• **Notifications** — updates about shared tabs and activity.

We do **not** collect **location data** (neither precise nor approximate).

D) Information from Third Parties

• **Sign in with Apple / Google** — basic profile identifiers and email (if you choose to share).
• **Stripe** — limited payment identifiers and status.
• **Anthropic API** — Receipt images and text are sent to Anthropic solely to extract line items, totals, tax, and tip. **No personal data** (such as your name, email, contacts, account identifiers, or device identifiers) is sent to Anthropic — receipt content is processed as an anonymous payload tied to no user identity on Anthropic's side. Anthropic processes this data as our sub‑processor under its Data Processing Addendum.

4. Why We Use Your Information (Purposes & Legal Bases)

Contract Necessity — provide the Services, create/manage accounts, enable receipt scanning & itemization, splitting, groups, invitations, and settlements.

Legitimate Interests — improve performance, ensure security/fraud prevention, and analyze anonymized usage patterns.

Legal Obligations — maintain required financial records and comply with applicable laws.

Consent — access to Contacts/Camera/Photos/Notifications when you opt in.

We do **not** send marketing or promotional communications.

5. How We Share Information

We share data only as necessary to operate the Services:

• **Service Providers/Processors** — hosting, storage, analytics, support.
• **Anthropic** — AI receipt extraction limited to the inputs required for the requested feature. We do **not** share any personal data (name, email, contacts, account identifiers, or device identifiers) with Anthropic; only receipt image and text content is sent, and it is not linked to a user identity on Anthropic's side. Anthropic does **not** use API inputs or outputs to train its models, and automatically deletes API inputs and outputs from its backend within 30 days, subject to limited exceptions for legal compliance and abuse enforcement.
• **Stripe** — secure payment processing.
• **Apple & Google** — authentication and account linking.
• **Business Transfers** — as part of a merger, acquisition, or asset sale.
• **Legal/Compliance** — to comply with law, protect rights, and enforce policies.



We do not sell personal information.

6. International Data Transfers

Where data is processed outside your region, we use appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

7. Third‑Party SDKs & Service Providers

• **Anthropic API** — AI processing (server‑to‑server; called from our backend, not from your device)
• **Stripe** — payments
• **Sign in with Apple** — authentication
• **Google Sign‑In** — authentication

Each third party processes data under its own privacy policy.

8. Data Retention

We retain personal data only as long as necessary to provide the Services, resolve disputes, and meet legal requirements. Where possible, we anonymize or aggregate data.

9. Your Rights & Choices

Subject to your jurisdiction, you may request: (a) access, (b) correction, (c) deletion, (d) restriction or objection, and (e) portability. Use in‑app controls or contact info@starclabs.com. We may need to verify your identity.

10. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children.

11. Security

We use administrative, technical, and physical safeguards (e.g., encryption in transit, access controls, least‑privilege). No method of transmission or storage is 100% secure.

12. Cookies & Similar Technologies

Our site may use cookies for authentication, security, and performance analytics. Manage preferences in your browser/device settings.

13. Do Not Track

Our Services do not currently respond to DNT browser signals.

14. Delete Your Account & Data

You can delete your Tab Out account any time directly from the App.

In‑App Path: Settings > Delete My Account

Upon confirmation:

• Your account and associated personal data are removed from active systems, subject to legal obligations to retain certain records (e.g., payment transactions).
• Content already shared with other users may remain visible to them but will no longer be associated with your identity.
• You may also request deletion via **info@starclabs.com** (verification required).

15. Region‑Specific Disclosures

California (CCPA/CPRA): Access, deletion, and correction rights apply. We do not sell or share personal information for cross‑context behavioral advertising.

EEA/UK (GDPR): Legal bases appear in Section 4; you may lodge a complaint with your supervisory authority.

16. Changes to This Policy

We may update this Policy. We will post updates with a new Effective Date. Your continued use of the Services constitutes acceptance of changes.

17. Contact

Starc Labs LLC

Email: info@starclabs.com