← Back to app

Privacy Policy

Last updated: 2026-05-16

StarsUp (“we”, “us”, the “Service”) is a family behavior-rating and motivation app. We take privacy seriously, especially because the app involves children's information. This policy explains what we collect, why, and your choices.

1. Who this applies to

This policy applies to anyone who uses StarsUp — parents and caregivers who hold accounts, and the children whose ratings are logged inside a household.

2. Information we collect

From parents/caregivers (account holders):

  • Email address (for sign-in via magic link)
  • Display name and avatar color (you choose)
  • Optional payment method via Stripe / Apple / Google (we never see card numbers)
  • Device type and approximate region (for service operations only)

From children (entered by parents):

  • First name or nickname (you choose — no last name required)
  • Optional photo or chosen emoji avatar
  • Birthday (optional)
  • Rating data: star ratings, daily notes, kid-authored comments, redemption requests

We do NOT collect from children: email addresses, phone numbers, last names, government IDs, biometric data, location data, social media handles, browsing history, or any data not directly entered by a parent for the purpose of using StarsUp.

3. Children's privacy (COPPA & GDPR-K)

StarsUp is designed for parents to use with their children. Children do not create their own accounts. A parent-set 4-digit PIN lets kids view their own data on a shared family device, but no independent kid account is created.

We rely on the household's account holder to provide consent for any data entered about children under 13 (US) or 16 (EU). Parents can review, export, or delete all of a child's data at any time from Settings → Data & Privacy.

Per COPPArules, we never share or sell children's data, never use it to serve ads, and never use it for any purpose other than providing the family the functionality of StarsUp.

4. How we use information

  • To provide the Service — log ratings, compute scores, surface trends
  • To authenticate your account and protect against abuse
  • To process subscription payments (via Stripe / Apple / Google)
  • To send you transactional emails (sign-in links, redemption alerts, subscription receipts)
  • To improve the Service via aggregated, anonymized usage stats

We do not run third-party ad networks. We do not sell or trade personal information.

5. Who can see your data

  • Members of your household (other parents you've invited)
  • StarsUp staff only when required to provide support or as required by law
  • Service providers acting on our behalf under written confidentiality (e.g. our database host, payment processor, transactional email provider)

We do not allow our service providers to use your data for any purpose other than running StarsUp.

6. Where data is stored

Data is hosted by Supabase (a Postgres-as-a-service provider) on AWS infrastructure in the United States. Payment processing is handled by Stripe (US) and Apple / Google for in-app purchases. Email delivery is via Resend (US). All providers comply with industry security standards.

7. Data retention & deletion

Your data is kept as long as your account is active. You can:

  • Export all your data (JSON or CSV) anytime from Settings → Data & Privacy.
  • Delete an individual child — their ratings, notes, and avatar are permanently removed.
  • Delete your entire account — all household data, ratings, redemptions, and consequences are permanently removed within 30 days from Settings → Data & Privacy → Delete account.

8. Your rights

Depending on where you live (GDPR for EU/UK, CCPA for California, similar laws elsewhere), you have rights to:

  • Access the data we have about you
  • Correct inaccurate data
  • Delete your data
  • Receive your data in a portable format
  • Object to processing
  • Lodge a complaint with your local data-protection authority

To exercise any of these, email privacy@starsup.app.

9. Security

We use HTTPS everywhere, encrypted database connections, row-level access control, and standard industry practices to protect your data. No system is perfectly secure — if we ever discover a breach affecting you, we'll notify you promptly as required by law.

10. Cookies & tracking

We use a minimal session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies. We may use first-party privacy-respecting analytics (e.g. Plausible) to count page views — these store no personal data.

11. Changes to this policy

We'll post any updates on this page and, for significant changes, email account holders at least 14 days in advance.

12. Contact

Questions about privacy? Email privacy@starsup.app.

For deletion requests, opt-outs, or California-specific “Do Not Sell My Personal Information” requests, email privacy@starsup.app.

This policy is provided for transparency. It is not legal advice. Consult a lawyer before commercial launch.