1. Data Controller
The data controller is the Stelled development team (hereinafter "we" or "Stelled"). For any privacy-related request, you can contact us at: privacy@stelled.com
2. Data Collected
2.1 Data provided by the user
- Registration data: email address, name, password (stored encrypted)
- Birth data: date, time, and place of birth, geographic coordinates, gender
- Profile image: avatar uploaded by the user
- Preferences: language, time format, notification preferences
2.2 Social login data
If you sign in via Google, Apple, or Facebook, we receive: account identifier, email address, name, and profile picture from the provider used.
2.3 Additional profiles
You can create astrological profiles for other people by entering their birth data. You are responsible for obtaining consent from the people whose data you enter. Additional profiles can be deleted at any time.
2.4 Connection data
When using the "Find Friends" feature, you may share email addresses from your contacts or Facebook IDs to search for other users. This data is used exclusively for searching and is not stored.
2.5 Payment data
Payments for subscriptions and in-app purchases are handled entirely by Apple App Store and Google Play Store. We do not collect or store credit card data or banking information. We store: plan type, subscription status, start and end dates, transaction identifier.
2.6 Usage statistics
To understand which parts of the app are used and improve them, the app counts how many times per day you open a section or screen and a few actions (for example a search, a share, listening to the narration, opening a notification). We record only the event name and how many times it happened that day, together with the platform (Android/iOS) and the app version.
We do not record times, navigation sequences, text, typed searches, profiles or public figures viewed, or your location. Statistics stay on our servers, are not shared with third parties or used for advertising or profiling, and are only viewed in aggregate form.
You can turn them off at any time in Account → Privacy → Usage statistics: from then on we record nothing and delete those already collected for your account.
3. Purposes and Legal Basis
| Purpose | Legal basis |
|---|---|
| Account creation and management | Contract performance |
| Birth chart and influence calculations | Contract performance |
| Personalized AI content generation | Contract performance |
| Push notification delivery | User consent |
| Subscription management | Contract performance |
| User connections | User consent |
| Spotify integration (playlist creation) | User consent |
| Usage statistics to improve the app | Legitimate interest (you can object at any time in the settings) |
4. Third-Party Services
We use the following third-party services:
- Supabase (database and storage) — servers in EU (Ireland, AWS EU-West-1)
- Firebase Cloud Messaging (push notifications) — Google
- RevenueCat (subscription management) — intermediary between app and stores
- Google Gemini AI (daily content generation) — receives birth data and daily transits to generate personalized horoscopes
- Spotify (playlist creation) — only if user connects their account
- Deezer (music search) — music metadata only, no personal data
5. Data Retention
- Account data: retained until account deletion
- Daily AI content: retained for 365 days, then automatically deleted
- Spotify tokens: retained until Spotify disconnection or account deletion
- Notification logs: retained for technical support purposes
- Usage statistics: counts linked to your account are retained for 400 days (about 13 months); after that only anonymous daily totals remain, which cannot be linked to any user
6. User Rights
Under the GDPR (EU Regulation 2016/679), you have the right to:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data ("right to be forgotten")
- Portability: receive your data in a machine-readable format
- Objection: object to the processing of your data
- Restriction: restrict processing in certain cases
- Withdraw consent: withdraw consent at any time
To exercise these rights, contact us at: privacy@stelled.com
You also have the right to lodge a complaint with the relevant Data Protection Authority.
7. Account Deletion
You can delete your account at any time from the app (Settings → Account → Delete Account). Deletion results in the immediate and irreversible removal of all your data, including: profile, birth chart, connections, additional profiles, purchase history, AI-generated content, usage statistics, and images.
You can also find information about deletion on the dedicated web page.
8. Security
We implement technical and organizational measures to protect your data: password encryption, HTTPS connections, restricted database access, hosting in certified European data centers.
9. Cookies and Tracking
The Stelled mobile app does not use cookies, advertising trackers, or third-party analytics SDKs, and we do not monitor user behavior for advertising purposes. The only usage statistics are the counts described in section 2.6, which are collected by our own servers and can be turned off in the settings.
10. Minimum Age
Stelled is intended for users aged 16 and older. We do not knowingly collect data from minors under 16. If we discover that a minor has created an account, we will promptly delete it.
11. Data Transfers
Data is primarily stored in the European Union (Ireland). Some third-party services (Firebase, Google Gemini) may process data outside the EU, always in compliance with GDPR safeguards (adequacy decisions, standard contractual clauses).
12. Changes to This Policy
We reserve the right to update this policy. In case of substantial changes, we will notify users through the app. The date of the last update is indicated at the top of this document.