Privacy Policy

Effective date: 10/19/2026

This Privacy Policy explains how Sttar Inc. ("we," "us," "our"), doing business as Sttar, collects, uses, shares, and safeguards personal information when you use the Sttar mobile app and the sttar.com website (together, the "Services").

Plain-English TL;DR: We collect what you give us (your account info and the photos you post), plus some device, location, and usage data so the app works and keeps getting better. We don't sell your data, and you can delete your account at any time.

1) Who we are & scope

• Controller: Sttar Inc.
• Contact: hello@sttar.com
• Scope: This policy applies to the Sttar app and sttar.com. It does not cover third-party sites or services.

2) Information we collect

a) Information you provide

• Account information, such as your name, username, email address, and profile photo
• Content you post, such as photos, captions, comments, and albums
• Community information, such as the groups, schools, or organizations you join
• Messages you send us, such as support requests or feedback

b) Information collected automatically

• Location information, when you allow it, used for location-based features like stamps
• Device information, such as device type, operating system, app version, and push notification tokens
• Usage information, such as features you use and how you interact with the app
• Basic log data, such as IP address and crash reports, for security and reliability

3) How we use information

• Provide the Services: create and run your account, show your content to the people you share it with, and power features like stamps, albums, and groups
• Communications: send account emails, product updates, marketing emails, invites from your friends, and push notifications
• Improve the Services: understand how the app is used, fix bugs, and build new features
• Marketing: promote Sttar, including through content posted to the Services as described in our Terms of Service
• Safety & operations: respond to inquiries, prevent abuse, and keep the Services secure
• Legal compliance: meet recordkeeping or regulatory requirements where applicable

Legal bases (EEA/UK):

(i) Contract (to provide the Services you sign up for)

(ii) Consent (for location access, push notifications, and marketing emails)

(iii) Legitimate interests (improving the Services, security, and operations)

(iv) Legal obligation (where required)

4) How we share information

We do not sell your personal information. We share it only:

• With other users: your profile and the content you post are visible to the people and groups you share them with
• With service providers: companies that help us with hosting, storage, email, push notifications, analytics, and app attribution. They process data on our behalf under contract.
• For legal & safety reasons: to comply with law or protect rights, safety, and security
• In corporate events: a merger, acquisition, or financing (with appropriate safeguards)

5) Data retention

We keep your information while your account is active.

If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we need to keep it for legal, security, or fraud-prevention reasons.

6) Your privacy rights

Depending on your location, you may request to access, correct, delete, or export your personal information, or object to/limit certain processing.

You can turn off location access and push notifications in your device settings, unsubscribe from emails using the link at the bottom of any email, or contact us at hello@sttar.com.

California/CPRA and similar laws: We do not sell your personal information.

7) Cookies & tracking

• The website uses strictly necessary technologies for basic functionality and security.
• The app uses analytics and attribution tools to understand usage and how people find Sttar.

8) Security

We employ reasonable technical and organizational measures (e.g., TLS encryption in transit, access controls).

No method is 100% secure.

9) International transfers

Your information may be processed in the United States and other countries where we and our providers operate.

Where required, we use lawful transfer mechanisms (e.g., Standard Contractual Clauses).

10) Children's privacy

The Services are not intended for children under 13 (or under 16 in the EEA/UK).

If you believe a child provided data, contact us to delete it.

11) Changes to this policy

We may update this Policy. We'll post the revised version with an updated Effective date above.

12) Contact us

Questions or requests about this Policy? Email hello@sttar.com.