StarMeow Privacy Policy

# StarMeow Privacy Policy **Version 2.0 — Effective September 10, 2026** StarMeow (the "App") is operated by the operator of StarMeow ("we", "us" or "our"). We know that the questions, worries and birth details you share in the App are deeply personal. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have. This Policy applies whenever you use our services through the iOS or Android versions of the App. Please read it together with the StarMeow Terms of Service. ## 1. Data Controller and Applicable Law 1.1 For the processing described in this Policy, the operator of StarMeow is the data controller (or the equivalent role under applicable law). 1.2 The App is distributed in many countries and regions. We process personal information on the basis of the laws of the laws of the jurisdiction in which the operator is established, where we are established, while respecting the mandatory rights granted to you by the laws of your place of residence. The additional provisions in Section 10 for users in the European Economic Area, the United Kingdom, California and elsewhere apply only where those laws apply to you. ## 2. Information We Collect We collect only what is needed to provide the Service. Specifically: ### 2.1 Sign-in identifiers | Sign-in method | What we receive | |---|---| | Sign in with Apple | Apple's unique user identifier (sub); and, if you choose to share them, your name and (possibly relay-hidden) email | | Sign in with Google | Google's unique user identifier (sub); and, if you authorise it, your name, email and profile photo | | Guest mode | An anonymous device ID randomly generated and stored by the App on your device | We never receive your Apple or Google password. The guest device ID is not derived from device hardware and ceases to exist when the App is deleted. ### 2.2 Profile you provide - Nickname and avatar; - Gender (optional); - Date of birth, time of birth, birthplace and its latitude/longitude. **These are used solely to generate personalised zodiac, natal-chart and birth-energy content.** Coordinates come from the place you select, or — only if you tap "Use current location" — from a one-time, while-in-use location reading that we convert to birthplace coordinates. We never track your location in the background. ### 2.3 What you write while using the App - Questions and follow-ups you ask the tarot; - Conversations with your cat companion; - Concerns you write down during onboarding; - Review and progress notes; - Anonymous posts and readings on the Stargazing Deck and messages in Cosmic Echo; - Questions and background submitted for expert readings; - Choices you make in StarMeow House stories; - Feedback and reports you submit, including any screenshot you choose to attach; - The phone number you type into the phone-number energy feature (used only to compute that reading; you may enter any number). This content is used to generate your AI Content and forms your "Cat Memory" (see Section 5). **You can view, edit and delete individual Cat Memory entries, or clear all of them, from within the App.** ### 2.4 Purchase and virtual-asset records - Details of orders completed through Apple or Google: product, amount, time, store order number and receipt; - Stardust balance and ledger, membership period, unlocked cats, reports and story chapters; - Referral codes and referral-reward records. We **do not** receive your card number or payment-account details; Apple and Google handle those. ### 2.5 Device information and usage events - Platform (iOS/Android), operating-system version, App version, language and time zone; - In-app product events such as opening the App, viewing a screen, submitting a reading or completing a purchase, together with a random session ID. **Usage events are used for statistics and product improvement. Event parameters never include the text of your questions, concerns or conversations.** ### 2.6 Notifications Reminders (cat letters, check-ins, expert replies) are scheduled locally on your device. We do not operate a remote push service and do not collect a push token. You can turn notifications off in your system settings at any time. ### 2.7 What we do not collect We do not collect your contacts, your photo library (other than a screenshot you choose to attach to feedback), background location, call or SMS records, and we do not track your activity in other apps through third-party advertising SDKs. Your avatar comes from your Apple / Google account or a built-in default; the App does not upload custom avatars. ## 3. How We Use Information | Purpose | Information used | Legal basis (where applicable) | |---|---|---| | Create and maintain your account; sign in across devices | Sign-in identifiers, nickname, avatar | Performance of contract | | Generate tarot readings, cat conversations, weekly reports, in-depth reports and story letters | What you write, birth details, Cat Memory | Performance of contract | | Provide expert readings | Your submitted question and background, order details | Performance of contract | | Complete purchases, deliver Stardust and entitlements, handle refund requests | Purchase records | Performance of contract; legal obligation | | Local reminders | Notification permission (on device) | Your consent | | Operate the anonymous community; handle reports and blocks | Community content, report records | Performance of contract; legitimate interest (safety) | | Measure usage, find and fix problems, improve the product | Device information and usage events | Legitimate interest (service improvement) | | Prevent fraud, reward farming and abuse | Sign-in identifiers, purchase records, usage events | Legitimate interest (security); legal obligation | | Comply with legal obligations and lawful requests | Relevant records | Legal obligation | 3.1 We do not use your personal information for purposes unrelated to those above. If we need a new purpose, we will tell you first and obtain your consent where required. 3.2 We **do not** sell your personal information, and we do not use what you write to serve you third-party advertising. 3.3 We do not use your concerns, questions or conversations to train our own or any third party's AI models. ## 4. AI-Generated Content and Your Data 4.1 AI Content in the App is produced by large language models operated by third-party AI providers. To generate it, we send **your question and the necessary context** to the provider over an encrypted connection. This typically includes your nickname, the current question, the cards drawn, a summary of relevant Cat Memory, a summary of your birth details (such as your zodiac sign) and the persona of the cat you have chosen. 4.2 We **do not** send your sign-in identifiers, email, purchase records or device ID to AI providers. 4.3 Our AI providers are contractually bound to use the transmitted content only to generate responses for us, not to train their models, and to delete it in accordance with their retention policies. Current providers are listed in Section 6. 4.4 AI Content such as cat conversations and story letters is stored under your account so that you can revisit it and so that your cat can "remember" it. You can delete it as described in Sections 5 and 10. ## 5. Cat Memory 5.1 "Cat Memory" is a set of records we compile from your use of the App to deliver a continuous companionship experience. It includes the questions you have asked and their status, the concerns you wrote during onboarding, your review and progress notes, and notes your cat has taken from conversations. 5.2 You have full control over Cat Memory: - **View** — the memory screen in the App shows every entry; - **Edit** — you can change the text of any entry; - **Delete one** — you can ask your cat to "forget" a single entry; - **Clear all** — you can delete every entry with one action. 5.3 Deleted memories are removed from our servers immediately and are no longer used when generating future AI Content. ## 6. How We Share Information and Our Processors We share personal information with third parties only in the situations below, and only the minimum needed for the purpose: ### 6.1 Processors acting on our behalf | Processor | Purpose | Information sent | |---|---|---| | AI model provider(s) | Generating tarot readings, cat conversations, reports and story letters | Your question and necessary context (see Section 4) | | Alibaba Cloud | Server hosting, databases and object storage (OSS, used for files such as avatars) | All data described in Section 2 is stored on our servers there | | Apple | Verifying Sign in with Apple; In-App Purchase and receipt validation | Apple user identifier, purchase receipts | | Google | Verifying Sign in with Google; Google Play billing and purchase validation | Google user identifier, purchase receipts | These processors are bound by data-processing terms with us and may act only on our instructions. ### 6.2 Other users - Posts and readings you publish on the Stargazing Deck, and messages you send through Cosmic Echo, are shown to other users anonymously or under a pseudonym; - Content you actively share through features such as paired charts or gifting is shown to the people you choose. ### 6.3 Our readers The question and background you submit for an expert reading are read by the member of our reading team assigned to your order. Readers are bound by confidentiality obligations and see only what is needed to complete the reading — your question, the cards and the background you chose to provide. They do not see your sign-in identifiers or purchase information. ### 6.4 Legal requirements and protection of rights We may disclose information where permitted by law in order to comply with laws, regulations, court orders or governmental requests; to enforce the Terms of Service; to protect the rights, property or safety of us, our users or the public; or to investigate fraud or security incidents. ### 6.5 Business transfers If we are involved in a merger, acquisition, asset sale or reorganisation, your information may be transferred as part of that transaction. We will notify you before the transfer and require the recipient to continue honouring this Policy. ## 7. International Transfers 7.1 The App serves users worldwide. Your information is stored on our servers in the laws of the jurisdiction in which the operator is established and may be transferred to, and processed in, the countries where our processors operate, including the locations of our AI providers' and cloud providers' servers. Data-protection laws in those countries may differ from those where you live. 7.2 For information originating from the European Economic Area, the United Kingdom, Switzerland or other regions with specific transfer requirements, we implement appropriate safeguards as required by applicable law, such as recognised standard contractual clauses or reliance on adequacy decisions. 7.3 By using the App you acknowledge these transfer arrangements. If you have questions about them, contact us at wecwinning@gmail.com. ## 8. Data Retention and Deletion ### 8.1 Retention periods - **While your account exists** — your profile, content, memories and purchase records are kept so that we can keep serving you; - **Usage events** — stripped of your user identifier when you delete your account; only anonymous statistics remain; - **Report and block records** — kept for a reasonable period after handling to maintain community safety. ### 8.2 Account deletion 8.2.1 You can delete your account at any time from **Settings → Delete Account** in the App. The entire process happens in the App. 8.2.2 Deletion performs all of the following in a single operation (if any step fails, none of it takes effect — there is no "partially deleted" state): - **Deleted**: tarot readings and follow-ups, cat conversations and letters, Cat Memory, concern archives, natal charts, in-depth reports, daily cards, energy prescriptions, Stargazing Deck posts and readings, feedback, badges, check-in records, purchased cosmetics and all other private content; - **Anonymised**: your nickname is replaced with "Deleted user"; avatar, gender, date and time of birth, birthplace and coordinates are cleared; your Apple/Google identifier or device ID is unlinked from the account, so the same Apple or Google account can later register a brand-new account; records that involve other people (such as Cosmic Echo replies you sent, paired charts you took part in, and gifts you received) have your user identifier removed; - **Authorisation revoked**: if you signed in with Apple, we revoke the Apple authorisation token. 8.2.3 Deletion takes effect immediately, your session is invalidated, and the data cannot be recovered. ### 8.3 Statutory retention After deletion we retain the following **de-identified** records as required by applicable accounting, tax and anti-fraud laws: purchase orders, Stardust ledger entries, referral-reward records and promotion-attribution data. These contain only IDs and transaction details and cannot on their own be linked back to you. They are kept for the period required by applicable law and then deleted or further anonymised. ### 8.4 Guest accounts Guest-account data is handled under the same rules. Note that if you delete the App or change devices without first deleting your account, the guest data on our servers becomes an orphaned record that no one can access; we clean up long-inactive guest accounts after a reasonable period. ## 9. Security 9.1 We apply technical and organisational measures appropriate to the sensitivity of your information, including HTTPS encryption for all traffic; access controls and least-privilege permissions on servers and databases; server-side verification of sign-in credentials; and restrictions and auditing on staff access to user content. 9.2 No method of transmission or storage over the internet is completely secure. If a security incident is likely to affect your rights, we will notify you and the relevant authorities as required by applicable law. 9.3 You can help protect yourself by setting a device lock, linking a guest account to Apple or Google, and not disclosing identifying details in the anonymous community. ## 10. Your Rights ### 10.1 Rights available to everyone Wherever you live, we offer the following rights, most of which you can exercise directly in the App: | Right | How to exercise it | |---|---| | **Access** your personal information | View your profile under My Profile; view Cat Memory on the memory screen; view purchases on the orders screen | | **Correct** inaccurate information | Edit your profile under My Profile; edit entries on the memory screen | | **Delete** information | Delete single or all entries on the memory screen; delete everything via Settings → Delete Account | | **Export** your data | Email wecwinning@gmail.com and we will provide a copy in a commonly used, machine-readable format | | **Withdraw consent** | Turn off notifications in system settings; delete your account at any time | | **Object to or restrict** specific processing | Email wecwinning@gmail.com describing your request | | **Complain** | Contact us, or lodge a complaint with your local data-protection authority | ### 10.2 Verification and response time To protect your information, we may need to verify your identity before acting on an emailed request (for example by asking you to initiate a verification from within the App). We normally respond within 15 business days, or sooner where applicable law requires. Exercising your rights is free unless a request is manifestly unfounded or excessive. ### 10.3 Users in the EEA, the United Kingdom and Switzerland If you are located in these regions, you have the rights granted by the General Data Protection Regulation (GDPR) and equivalent laws, including access, rectification, erasure, restriction of processing, data portability, objection, and the right not to be subject to solely automated decisions. Our legal bases for processing are set out in the table in Section 3. You have the right to lodge a complaint with the supervisory authority in your country. We do not make solely automated decisions about you that have legal or similarly significant effects. ### 10.4 Users in California and other U.S. states If you are a California resident, you have the rights granted by the California Consumer Privacy Act (CCPA/CPRA), including the right to know, to delete, to correct, and not to be discriminated against for exercising your rights. **We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising.** The categories of information we collect are described in Section 2, our purposes in Section 3, and the recipients in Section 6. Similar rights under other U.S. state laws can be exercised in the same way. ### 10.5 Other regions If the law of your jurisdiction grants you rights not listed here, you may exercise them by contacting wecwinning@gmail.com. ## 11. Children's Privacy 11.1 The App is intended only for users aged 18 or over (or the age of majority where they live). We do not knowingly collect personal information from minors. 11.2 If we learn that we have collected information from a minor without the parental consent required by law, we will delete the account and its data as soon as possible. If you believe we may hold information about a minor, please contact wecwinning@gmail.com. ## 12. Notifications and Device Permissions 12.1 **Notifications.** The App asks for notification permission the first time it is needed. You can enable or disable notifications in your system settings at any time. If you decline, we will not ask repeatedly; letters and replies remain available inside the App. 12.2 **Photos / camera.** Requested only when you choose to attach a screenshot to feedback, and only the image you select is uploaded. The App does not record audio; any microphone entry shown by the system comes from the image-picker component and is never used. 12.3 **Location.** Requested only when you tap "Use current location" while filling in your birthplace; a single while-in-use reading is converted to coordinates and stored as your birthplace. 12.4 We do not request permissions unrelated to the Service. ## 13. Analytics 13.1 We use our own lightweight event tracking to understand how features are used (for example, how many users complete a reading). Events are collected by our own servers; we do not use third-party analytics or advertising SDKs. 13.2 Events contain technical fields such as a random session ID, language, App version, the selected cat and the originating screen. **They never contain any text you have written.** When you delete your account, the user identifier is removed from event records. ## 14. Changes to This Policy 14.1 We may update this Policy from time to time to reflect changes in the product, the law or our operations. The updated version will be published in the App with a new version number and effective date. 14.2 For material changes — such as new categories of information, new recipients or new purposes — we will notify you before they take effect through an in-app notice or other reasonable means, and will seek your renewed consent where the law requires it. ## 15. Contact Us For any question, request or complaint about this Policy or your personal information, please contact: - Email: wecwinning@gmail.com - In the App: Settings → Contact Us Data controller: the operator of StarMeow We normally reply within 15 business days.