StarMeow Privacy Policy
Version 3.0 · Updated 2026-09-25
StarMeow Privacy Policy
Version 3.0 — Effective September 25, 2026
StarMeow (the "App") is operated by 星喵语（StarMeow）运营方 ("we", "us" or "our"). We know that what you write here is deeply personal. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have.
This Policy applies whenever you use our services through the iOS or Android versions of the App. Please read it together with the StarMeow Terms of Service.
1. Data Controller and Applicable Law
1.1 For the processing described in this Policy, 星喵语（StarMeow）运营方 is the data controller (or the equivalent role under applicable law).
1.2 The App is distributed in many countries and regions. We process personal information on the basis of the laws of 运营主体注册地法律, where we are established, while respecting the mandatory rights granted to you by the laws of your place of residence. The additional provisions in Section 10 for users in the European Economic Area, the United Kingdom, California and elsewhere apply only where those laws apply to you.
2. Information We Collect
We collect only what is needed to provide the Service. Specifically:
2.1 Sign-in identifiers
| Sign-in method | What we receive |
|---|---|
| Sign in with Apple | Apple's unique user identifier (sub); and, if you choose to share them, your name and (possibly relay-hidden) email |
| Sign in with Google | Google's unique user identifier (sub); and, if you authorise it, your name, email and profile photo |
| Guest mode | An anonymous device identifier: on Android, a hash of the app-scoped identifier provided by the operating system (ANDROID_ID); on iOS, a random ID the App stores in the system Keychain |
We never receive your Apple or Google password. The guest device identifier is not a hardware serial number and cannot identify you across other apps; it may survive reinstalling the App so that welcome rewards are granted once per device. It is discarded when you delete your account, except for a de-identified marker that prevents repeated welcome rewards.
2.2 Profile you provide
- Nickname and avatar;
- Gender (optional);
- Optional details such as birthday. If you give a birthday, it is used only for companionship lines such as days together — not to predict the future.
We read your location only if you tap "Use current location", once, while the App is in use, to save a place you chose. We never track your location in the background.
2.3 What you write while using the App
- Conversations with your cat;
- Concerns you write during onboarding;
- Sentences you ask the cat to remember, and later replies;
- Words you seal in a Future Capsule;
- Choices and sentences you leave in StarMeow House;
- Anonymous Observatory posts;
- Feedback and reports, including any screenshot you attach.
This content is used to generate the cat's replies and forms your "Cat Memory" (see Section 5). You can view, edit and delete individual Cat Memory entries, or clear all of them, from within the App.
2.4 Purchases and virtual items
- Orders completed through Apple or Google: item, amount, time, store order number and receipt;
- Stardust balance and ledger, membership dates, adopted cats and unlocked House chapters;
- Invite codes and rewards.
We never receive your card number or payment-account details. Apple and Google handle those.
2.5 Device information and usage events
- Platform (iOS/Android), OS version, app version, language and timezone;
- In-app product events such as opening the App, visiting a screen or completing a payment, plus a random session ID.
These events are for statistics and product improvement. Event parameters never include the text you wrote.
2.6 Notifications
Reminders (cat letters, check-ins) are scheduled locally on your device. We do not operate a remote push service and do not collect a push token. You can turn notifications off in system settings at any time.
2.7 What we do not collect
We do not collect your contacts, your photo library (other than a screenshot you attach to feedback), background location, call or SMS records, and we do not track you in other apps through advertising SDKs. Your avatar comes from Apple / Google or a built-in default; the App does not upload custom avatars.
3. How we use information
| Purpose | Information used | Legal basis (where it applies) |
|---|---|---|
| Create and keep your account, sign in on other devices | Sign-in identifiers, nickname, avatar | Contract |
| Let the cat speak in its own voice and write story letters | What you write, Cat Memory | Contract |
| Complete purchases, grant Stardust and benefits, handle refund requests | Purchase records | Contract, legal obligation |
| Local reminders | Notification permission (on device only) | Your consent |
| Run the anonymous community, handle reports and blocks | Community posts, report records | Contract, legitimate interests (safety) |
| Understand usage, find bugs, improve the product | Device information and usage events | Legitimate interests (improve the Service) |
| Prevent fraud, reward abuse and misuse | Sign-in identifiers, purchases, usage events | Legitimate interests (safety), legal obligation |
| Comply with law and lawful requests | Relevant records | Legal obligation |
3.1 We will not use your personal information for unrelated purposes. If we need a new purpose we will tell you first and, where required, ask for consent.
3.2 We do not sell your personal information, and we do not use what you write to show you third-party ads.
3.3 We do not use your worries, questions or chats to train our own or a third party's AI models.
4. AI-generated content and your data
4.1 AI Content is generated by a third-party large-language-model provider. To generate a reply we send, over an encrypted connection, your words and necessary context, usually: your nickname, what you just wrote, a short Cat Memory summary, and the chosen cat's persona.
4.2 We do not send your sign-in identifiers, email, purchase records or device ID to the model provider.
4.3 The provider is contracted to use that content only to generate a response for us, not to train its models, and to delete it under its retention policy. See Section 6.
4.4 Cat conversations and story letters are stored on your account so you can look back and so the cat can "remember". You can delete them as described in Sections 5 and 10.
5. Cat Memory
5.1 "Cat Memory" is a set of records we keep so companionship stays coherent: a night you told it about, a title you gave, a later.
5.2 You have full control:
- View every record on the memory screen;
- Edit the text of a single memory;
- Forget one item;
- Clear all memories at once.
5.3 Deleted memories are removed from the server immediately and are not used in later AI Content.
6. Sharing and processors
We share personal information only in the cases below, and only the minimum needed:
6.1 Processors we appoint
| Processor | Use | Information sent |
|---|---|---|
| AI model provider | Cat conversations, story letters | Your words and necessary context (Section 4) |
| Alibaba Cloud | Hosting, database and object storage (OSS, for files such as avatars) | The data in Section 2, stored on our servers |
| Apple | Sign-in with Apple, in-app purchases and receipt checks | Apple user identifier, purchase receipts |
| Google sign-in, Play Billing and purchase checks | Google user identifier, purchase receipts |
These processors are bound by data-processing terms and may process data only on our instructions.
6.2 Other users
What you post on the Observatory is shown to other users anonymously or under a pen name.
6.3 Law and safety
We may disclose what the law allows in order to comply with law, a court order or a government request; to enforce the Terms; to protect us, users or the public; or to investigate fraud or a security incident.
6.4 Business transfers
If we take part in a merger, acquisition, asset sale or reorganisation, your information may move with the deal. We will notify you first and require the recipient to keep this Policy.
7. Cross-border transfers
7.1 The App is for users worldwide. Your information is stored on servers in 运营主体注册地法律 and may be processed in the countries where the processors above (including the AI and cloud providers) keep their servers. Those countries may have different data-protection laws.
7.2 For information from the EEA, UK, Switzerland and similar places we use appropriate safeguards required by law, such as approved standard contractual clauses or an adequacy decision.
7.3 Using the App means you understand and accept these transfers. If you have questions, write to wecwinning@gmail.com.
8. Retention and deletion
8.1 How long we keep it
- While the account exists: profile, content, memories and purchases, so we can keep serving you;
- Usage events: user identifiers are stripped after deletion; only anonymous stats remain;
- Reports and blocks: kept for a reasonable time after handling, for community safety.
8.2 Deleting your account
8.2.1 You may delete your account at any time in Settings → Delete account. The whole flow is in the App.
8.2.2 In that single operation we (if any step fails, none of it applies):
- Delete: cat chats and letters, Cat Memory, capsules, House visits, Observatory posts, feedback, check-ins and other private content;
- Anonymise: nickname becomes "Deleted user"; avatar, gender, birthday and similar fields are cleared; Apple/Google identifiers and the device ID are unlinked so the same Apple/Google account can register a new account later;
- Revoke: if you used Sign in with Apple, we revoke the token with Apple.
8.2.3 Deletion is immediate. You are signed out. The data cannot be restored.
8.3 Legal retention
After deletion we may keep de-identified purchase, Stardust, invite and attribution records as required for accounting, tax and fraud prevention. They hold IDs and transaction facts, not a way to identify you on their own, for the period the law requires, then they are deleted or further anonymised.
8.4 Guest accounts
Guest data follows the same rules. If you delete the App or change devices without deleting the account first, the guest data on the server becomes an orphan record; we clean up long-inactive guest accounts after a reasonable time.
9. Security
9.1 We use technical and organisational measures matching the sensitivity of the information: HTTPS in transit; access control and least privilege on servers and databases; server-side verification of sign-in; limits and audit on staff access to user content.
9.2 No internet transmission or storage is perfectly safe. If a personal-data incident may affect you, we will notify you and regulators as the law requires.
9.3 You can also help: lock your device, link a guest account to Apple or Google, and do not post identifiable details in anonymous spaces.
10. Your rights
10.1 Rights we offer everyone
Most of these you can exercise in the App:
| Right | How |
|---|---|
| Access your information | Profile, memory screen, orders |
| Correct inaccurate information | Edit profile or a memory |
| Delete | Forget one memory or all of them; Settings → Delete account |
| Export | Email wecwinning@gmail.com; we will send a common machine-readable copy |
| Withdraw consent | Turn off notifications in system settings; delete the account |
| Object or restrict a particular use | Email wecwinning@gmail.com |
| Complain | Contact us, or your local data-protection authority |
10.2 Identity and timing
To protect you we may need to verify who you are before acting on an email request. We usually reply within 15 business days, or sooner if the law requires. Exercising these rights is free unless a request is clearly unfounded or repetitive.
10.3 EEA, UK and Switzerland
If you are there, GDPR and equivalent laws give you access, correction, erasure, restriction, portability, objection and the right not to be subject to solely automated decisions with legal or similarly significant effects. Our legal bases are in the Section 3 table. You may complain to your national authority. We do not make solely automated decisions of that kind.
10.4 California and other US states
If you are a California resident, CCPA/CPRA gives you the rights to know, delete, correct and not be discriminated against for exercising those rights. We do not sell your personal information and we do not "share" it for cross-context behavioural advertising. Categories are in Section 2, uses in Section 3, recipients in Section 6. Similar state-law rights can be exercised the same way.
10.5 Elsewhere
If your local law gives you rights not listed here, write to wecwinning@gmail.com.
11. Children
11.1 The App is for users who are 18 (or the age of majority where they live). We do not knowingly collect children's personal information.
11.2 If we learn we collected a child's information without the consent the law requires, we will delete the account and data promptly. If you think we may have a child's information, write to wecwinning@gmail.com.
12. Notifications and device permissions
12.1 Notifications. We ask the first time we need them. You can turn them on or off in system settings. If you refuse we will not ask again; letters still appear in the App.
12.2 Photos / camera. Asked only when you attach a screenshot to feedback, and only that image is uploaded. The App does not record audio.
12.3 Location. Asked only if you tap "Use current location"; one while-in-use reading.
12.4 We do not ask for permissions unrelated to the Service.
13. Analytics
13.1 We use a light, first-party event log to understand feature use. Events go to our own servers. We do not use third-party analytics or ad SDKs.
13.2 Events include a random session ID, language, app version, chosen cat and source screen — never the text you wrote. After you delete the account, user identifiers are stripped from the log.
14. Changes to this Policy
14.1 We may update this Policy when the product, the law or our operations change. The new version is published in the App and on the website, with a new version number and effective date.
14.2 For material changes (new types of information, new recipients or a new purpose) we will notify you in the App or another reasonable way before they take effect, and we will ask for consent again where the law requires.
15. Contact
Questions, requests or complaints about this Policy or your information:
- Email: wecwinning@gmail.com
- In the App: Settings → Contact us
- Website: https://www.starmeow.club
Data controller: 星喵语（StarMeow）运营方
We usually reply within 15 business days.