Star Within is a private intention-setting and wellness support app. We designed it so that personal content remains private by default and is shared with René only through clear actions you choose. This policy applies to the Star Within iOS app and these related legal and support pages.
1. Who we are
Star Within is operated by Star Therapy, based in Laval, Quebec, Canada. René Estella is the person responsible for the protection of personal information (Privacy Officer).
Privacy questions, requests or complaints can be sent to startherapy11@gmail.com. We may need to verify your identity before acting on a request.
2. Information we handle
The information depends on the features you use. It may include:
- Account and identity information: your name, email address, account identifier, sign-in provider and basic provider profile information supplied through Apple, Google or email authentication.
- Profile and preferences: your selected focus areas, guidance style and depth, reminder preferences, notification choices, optional AI settings, profile image and whether you permit proactive messages from René.
- Intentions and wellness content: titles, descriptions, categories, affirmations, next actions, progress, status, saved images and other content you create. Because you decide what to write, this may include sensitive personal or wellness information.
- Messages and sharing: guidance requests, messages, the intentions or snapshots you explicitly share with René, live-sharing status, timestamps and read/unread status.
- Device and security information: an iOS push notification token, device platform, App Check and device attestation results, last-active timestamps, and routine technical logs needed to operate, secure and troubleshoot the service.
If you contact support by email, we also receive the information in your message and the contact details you use.
These public legal pages do not use targeted-advertising cookies or behavioural analytics. Hosting providers may process routine request information, such as an IP address, to deliver and protect the pages.
3. How we use information
We use information only for purposes connected to Star Within, including to:
- create, authenticate and maintain your account;
- save, organize and display your intentions and preferences;
- provide optional on-device AI guidance;
- deliver the messages, snapshots and live sharing you request;
- send reminders, message alerts and application badges when enabled;
- provide support and respond to privacy requests;
- detect misuse, enforce access controls, troubleshoot and secure the service; and
- comply with legal obligations and protect people, rights and property.
We do not sell personal information, rent member lists, build advertising profiles, or use Star Within content for targeted advertising.
4. Apple Intelligence and images
Optional AI guidance
On compatible devices, Star Within can use Apple's Foundation Models to refine an intention, answer a guidance question, or prepare a draft for René to review. These features are optional and use Apple Intelligence on the device. Star Therapy does not send the prompt or generated response to a third-party cloud AI provider to generate the response.
A conversation or result may be stored in your private Star Within account when the feature needs to show it again. René cannot see a private AI conversation unless you separately use a feature that shares relevant content. Any AI-assisted draft prepared for René must be reviewed and deliberately sent by a person; the app does not auto-send it.
Photos and Image Playground
You may choose a photo or use Apple Image Playground to create an intention image. Star Within accesses only the item you select or create. Image processing such as subject isolation is performed using Apple frameworks on the device. If you save the result, a reduced PNG and related metadata are stored privately with the intention in Firebase.
AI output can be incomplete or inaccurate. It is a reflection and planning aid, not medical, psychological, legal, financial, crisis or emergency advice.
5. When information is shared
Your intentions are private by default. René can receive content when you deliberately choose an action such as Share Live with René, Send a Snapshot to René, submit a guidance request, or send a message. Live sharing can reflect later changes to that intention until you stop sharing; a snapshot preserves the information sent at that time.
We may also disclose limited information:
- to service providers that operate authentication, databases, notifications, security, hosting and support for Star Within;
- when you direct us to or clearly consent;
- when required by law, court order or a lawful government request; or
- when reasonably necessary to investigate fraud, protect the security of the service, or protect people, rights or property.
6. Service providers and transfers
Star Within relies primarily on Google Firebase services, including Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, App Check and Hosting. Apple provides iOS, Sign in with Apple, push-notification delivery, Apple Intelligence and Image Playground. Google also provides Google Sign-In when you choose it.
These providers may process or store information in Quebec, elsewhere in Canada, the United States, or other countries where they operate. Information handled outside Quebec may be subject to the laws and lawful access requirements of that location. We use contractual, technical and organizational measures intended to protect information handled by service providers.
Appointment-booking links may open Square or another external service. Information you submit there is governed by that service's privacy policy and is not part of your Star Within account.
7. How long we keep information
Account content is generally kept while your account remains active, until you delete particular content, or until you permanently delete the account. Disabled or replaced device tokens are removed or made inactive when they are no longer needed.
Support correspondence, security records and limited technical logs may be retained for a reasonable period when needed to answer a request, prevent abuse, meet legal obligations, resolve a dispute or protect the service. Service-provider backups and logs may remain for their normal limited retention cycles before deletion or overwriting.
8. Your choices and privacy rights
Depending on applicable law, you may ask to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- withdraw consent for an optional use;
- stop live sharing or delete selected app content;
- delete your account and associated Star Within data; or
- raise a concern or make a complaint about our practices.
You can change notification permission in iOS Settings and adjust available sharing, reminder and AI choices in the app. Withdrawing consent may prevent a related optional feature from working, but does not affect processing already lawfully completed.
Send a request to startherapy11@gmail.com. We will respond within the period required by applicable law. You may also contact the Commission d'accès à l'information du Québec or another privacy regulator that has jurisdiction.
9. Permanent account deletion
Star Within provides account deletion inside the app. Open your profile area, choose Account and Data, then follow the permanent-deletion and identity-verification steps. For security, you may be asked to sign in again.
Successful deletion removes your Firebase Authentication account and associated Star Within profile, intentions, saved images, AI conversations, guidance requests, messages, notification registrations and queued notification records. If you used Sign in with Apple, Star Within also requests revocation of the related Apple authorization before completing deletion.
Deleting Star Within does not delete your Apple or Google account. Appointments, invoices, clinical or business records created outside Star Within are separate and are not changed by in-app account deletion. Contact Star Therapy if you have a request about those records.
10. Security
We use safeguards designed for the sensitivity of the information, including encrypted network connections, Firebase Authentication, App Check and device attestation, restrictive database rules, administrator claims, limited-service permissions and a protected server-side deletion process.
No system can be guaranteed completely secure. Protect your device and sign-in credentials, and contact us promptly if you believe your account or information has been compromised.
11. Age requirement
Star Within is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact the Privacy Officer so we can investigate and delete it as appropriate.
12. Changes and contact
We may update this policy as Star Within, its providers or legal requirements change. We will post the revised policy here and change the effective date. If a change materially affects how we use information, we will provide additional notice or seek consent where required.