Privacy Policy

Welcome to Star AI (“we”, “our”, or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the “Service”). It is designed to comply with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law on Data Protection (LOPDGDD).

If you have questions or concerns about this policy, please contact us at openrouternova@gmail.com.

For users in the European Union, the data controller responsible for your personal data is:

We process your personal data only when we have a valid legal basis under GDPR Article 6:

• Consent — waitlist signup, marketing emails, and optional analytics.
• Contract performance — account creation, delivering the Service, and transactional emails.
• Legitimate interest — security logs, crash diagnostics, fraud prevention, and aggregated product analytics.
• Legal obligation — when required by applicable law.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Information you provide directly:

• Account information: email address and display name when you register.
• Conversation content: messages and responses generated during your chat sessions.
• Profile data: XP level, energy balance, streak count, and mission progress.

Information collected automatically:

• Device information: device type, operating system, and app version.
• Usage data: features accessed, session duration, and in-app events.
• Crash reports and diagnostic logs to improve stability.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your conversations with AI models (Fast, Smart, Code, Vision).
• Manage your energy, XP, levels, streaks, and mission progress.
• Send account-related communications (e.g., email verification, password reset).
• Analyze usage patterns to improve the app experience.
• Detect and prevent fraud, abuse, or violations of our Terms of Service.
• Comply with legal obligations.

When you send a message in Star AI, your input is transmitted to third-party AI model providers to generate a response. We use providers such as Anthropic (Claude) and others depending on the mode selected (Fast, Smart, Code, Vision). These providers process your messages under their own privacy policies and data processing agreements.

We do not sell your conversation data to third parties for advertising purposes.

We may share your information with:

• AI service providers — to process your chat requests (e.g., Anthropic, Google).
• Firebase / Google — for authentication, real-time database, and cloud functions.
• Analytics providers — to understand app usage in aggregate.
• Legal authorities — if required by law or to protect rights and safety.

We do not sell your personal data.

We retain your account data for as long as your account is active. Conversation history is retained to provide continuity within the app. You may request deletion of your account and associated data at any time by visiting ainovaapp.netlify.app/delete-account or by emailing us.

All data is transmitted over encrypted HTTPS connections. We use Firebase security rules to restrict unauthorized access to your data. While we implement industry-standard safeguards, no transmission over the internet is 100% secure.

Star AI is not intended for children under 14 years old in Spain and the EU, in accordance with Spain's LOPDGDD and applicable EU digital consent rules. Where COPPA applies (United States), the minimum age is 13. Users under 18 must use the service with parental or guardian consent. If we become aware that a minor below the applicable age has provided personal data, we will delete it promptly.

Under GDPR and Spanish data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”).
• Withdraw consent at any time, without affecting prior processing.
• Object to or restrict certain processing of your data.
• Data portability (where applicable).
• Lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es.

To exercise any of these rights, email us at openrouternova@gmail.com. We will respond within 30 days.

You can request full deletion of your Star AI account and all associated personal data at any time. After submitting a request, we will process and complete the deletion within 30 days. Visit our account deletion page to submit a request.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact: