Privacy Policy

1. Who we are

Stellarora is a product of Mobiplay, a software development studio based in South Africa. We build Progressive Web Apps and mobile applications. In this Privacy Policy, "we", "us" and "our" refer to Mobiplay and the Stellarora platform.

If you have any questions about this policy, contact us at hello@stellarora.com.

2. What information we collect

We collect only the minimum information necessary to provide the Stellarora service:

• Name — used to personalise your daily guidance
• Email address — used to verify your account and send transactional emails
• Your stated struggle and goal — used to personalise your AI-generated daily guidance
• Usage data — streak counts, completed guidance, theme preference, and push notification subscription tokens

We do not collect location data, financial information, or any sensitive personal information beyond the above.

3. How we use your information

Your information is used solely to provide and improve the Stellarora service:

• To generate your personalised daily guidance using AI
• To send you transactional emails (account verification, password reset)
• To send you daily push notifications if you have enabled them
• To track your streak and progress within the app

We do not use your information for advertising, sell it to third parties, or share it with any party other than those listed in section 4.

4. Third parties we work with

• Resend (resend.com) — transactional email delivery
• DeepSeek (deepseek.com) — AI guidance generation. Your name, struggle, and goal are sent to DeepSeek's API to generate your daily step. No personally identifying data is stored by DeepSeek beyond their standard API logs.
• Creem.io — payment processing for paid subscriptions. We do not store your payment card details.
• DigitalOcean — cloud hosting provider where your data is stored on servers located in the United States.

5. Your rights under POPIA

As a South African business, we comply with the Protection of Personal Information Act (POPIA). You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at hello@stellarora.com and we will respond within 30 days.

6. Data retention

We retain your personal information for as long as your account is active. If you delete your account, your personal data will be removed from our systems within 30 days. Anonymised usage statistics may be retained for analytical purposes.

7. Cookies

Stellarora uses a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

8. Security

Your data is stored on encrypted servers. Passwords are hashed using bcrypt and are never stored in plain text. All communication between your device and our servers is encrypted via HTTPS.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of Stellarora after changes are posted constitutes your acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at hello@stellarora.com.