Draft — pending legal review
This document is a working draft that a lawyer has not yet reviewed. We’ll revise it before public launch and tell members about any material changes.
Legal
Privacy Policy
Version 2026-11-08 · Last updated November 8, 2026
This policy explains what information StarAlly collects, how we use it, and the choices you have. The short version:
- We collect what we need to run your assistant, and nothing for advertising.
- We don’t sell your personal information.
- AI training on your data is off by default and only ever opt-in.
- You can export or delete your data at any time; we finish requests within 30 days.
- We never share your mobile opt-in data with third parties for marketing.
1. Information we collect
Information you give us
- Account details: your mobile number, the name you’d like to be called and your time zone.
- Your agreements: when you accepted our terms, this policy and text messages, and which versions.
- Messages: the texts you send StarAlly and its replies.
- Memory: things you ask StarAlly to remember.
- Tasks: what you asked for, the options found, your approvals and the outcome.
As new features arrive
If you connect other accounts or store items in a secure vault, we’ll keep what those features need, and explain exactly what before you turn them on.
Collected automatically
Basic technical data, such as IP address, browser type and timestamps, used to keep the service secure and reliable. When you sign up, this website sets one strictly necessary cookie to keep your session secure. We don’t use advertising or cross-site tracking cookies.
2. How we use information
- to run StarAlly and carry out the requests you approve;
- to text you about your account and tasks you asked for;
- to keep the service and your account secure and to prevent fraud and abuse;
- to provide support when you ask for it;
- to measure and improve reliability using records of how tasks went, without training AI models on your content unless you opt in;
- to meet our legal obligations.
3. AI training: off by default
We don’t use your information to train AI models unless you opt in. It’s off by default, you can turn it on or off at any time, and turning it off applies from then on.
Even if you opt in, these are never used for training: vault items, data from connected accounts, health information, and your messages.
We use AI model providers to understand your requests and write replies. They process your information only to provide StarAlly to you, and we require them not to use it to train their own models.
4. When we share information
We share only what’s needed, with:
- Businesses you deal with: when you approve an action, the details it needs, like your name and party size for a reservation or a delivery address for an order.
- Service providers: companies that host our systems, carry text messages and phone calls, turn speech into text and back, run AI models or process payments for us, under contracts that limit them to providing that service.
- Legal and safety reasons: when the law requires it, or to protect someone’s safety or rights.
- Business changes: if StarAlly is involved in a merger or acquisition, with notice to you, and this policy continues to apply.
We don’t sell your personal information or share it for targeted advertising.
5. Text messaging and your mobile number
We use your mobile number to run your account and to send the messages described in our SMS Terms. We never share your mobile number, your opt-in to receive texts, or records of that consent with third parties or affiliates for their marketing or promotional purposes. Our text-delivery providers receive only what they need to deliver the messages you’ve agreed to receive.
6. Phone calls
StarAlly can make and take phone calls using an AI voice. Every call StarAlly places starts by saying it is from StarAlly, an AI assistant, and that the call is recorded.
- Calls to businesses: StarAlly calls a business for you only after you approve the call. By default it shares only your name and callback number; anything more must be listed in the approval you give. It never gives card or bank details, passwords, ID documents, your date of birth, or insurance or health information on a call.
- Calls to you: only if you turn them on, on the Phone calls page, for urgent updates about things StarAlly is doing for you. Taking approval requests by phone is a separate, optional choice: you press 1 to approve, or enter the code from the text for payments. Calls you make to StarAlly never approve anything. You can stop the calls at any time by texting STOP CALLING ME or turning them off on that page. Consent to calls is not a condition of using StarAlly.
- Transcripts, never audio: StarAlly keeps a written transcript of each call, encrypted at rest with a key unique to you, like your messages. The audio is never stored. The website shows your call history (who, when and how each call went), never a transcript.
7. Texts StarAlly sends first
StarAlly may text you first, about your own things only: a booking’s cancellation deadline, a trip, a question it is waiting on you for, an email you have not answered, your calendar for the day, or a reminder or watch you set. It never sends offers or ads.
- What it reads: for this, StarAlly reads the sender, subject and date of the emails in your connected inbox, and your connected calendar.
- Deciding what is worth a text: a small AI model rates whether a nudge is worth a text, given only these facts.
- What we keep: a record of each nudge (its facts and its text, encrypted) is kept with your account and deleted with it.
- Your settings: quiet hours, a daily limit, the topics you hear about and a pause, on the Notifications page or by text.
8. Pages you share
StarAlly can put research it does for you on a page, like a comparison or an itinerary. A page opens only for you until you approve sharing it. A shared link opens for anyone who has it, expires (after 30 days at most) and can be turned off at any time, by text or on the Files page. Shared pages are not listed in search engines and carry no third-party trackers.
9. WhatsApp
If you turn WhatsApp on (on the Notifications page, or by texting WHATSAPP), StarAlly also messages you there, at the same phone number.
- What goes there: confirmations, updates and reminders about things you ask StarAlly to do, and, where WhatsApp allows it, replies when you message StarAlly there. Orders of alcohol, tobacco, medicines or medical products are confirmed by text, never on WhatsApp.
- Who carries it: WhatsApp messages travel through our messaging provider, Twilio, and WhatsApp (Meta), under their terms. They see what is needed to deliver each message.
- What we keep: the messages, encrypted like your texts, and a record of your consent (when, how, and the wording you agreed to).
- Stopping: reply STOP on WhatsApp, text WHATSAPP OFF, or turn it off on the Notifications page. Your texts continue.
10. Group texts and linked assistants
If you add StarAlly to a group text, it says nothing there until a member with their own StarAlly confirms that everyone in the group agreed, and then it answers only when someone asks it by name. The group’s assistant can’t see anyone’s personal accounts.
- People in a group who don’t use StarAlly: we store their phone number and what they write in the group, to keep the conversation going. Messages not addressed to StarAlly are kept for at most 7 days; messages addressed to StarAlly, for 30 days.
- Leaving a group: anyone in the group can reply STOP. StarAlly confirms once, leaves that group for good, and stops messaging that number.
- Your own StarAlly in a group: it shares nothing from your accounts, calendar, memory or wallet with a group unless you say yes in your own thread, except busy times (times only, never what you’re doing) where you allow it.
- Linked assistants: when you link your StarAlly with someone you trust, your two agents can message each other, for example to find a time for you both. Those messages are encrypted for the receiving agent (agent-to-agent encryption: StarAlly runs both agents) and share something only with your OK, except busy times (times only) where you allow it. We keep the last four digits of each number, each side’s name (encrypted), what each side allows and a note of who owes whom. The encrypted messages passed between the agents are deleted 30 days after they are opened or expire.
- Stopping: unlink, stop sharing busy times or stop trusting a group at any time, by text or on the Network page.
11. iMessage
If you turn iMessage on (on the Notifications page, or by texting StarAlly’s iMessage number from your own phone), StarAlly messages you on iMessage too.
- Who carries it: iMessages travel through a relay provider [provider name to be added during legal review] and Apple, under their terms. They see what is needed to deliver each message.
- What we keep: the messages, encrypted like your texts, the reactions you add to StarAlly’s messages, and a record of your consent (when and how). A reaction never approves anything.
- Stopping: reply STOP on iMessage, or turn it off on the Notifications page. Your texts continue.
12. How we protect it
Information is encrypted in transit. Messages, memories and task details are encrypted at rest with a key unique to you. Access is limited to the people and systems that need it, and every action StarAlly takes is recorded in a tamper-evident activity log. No system is perfectly secure, so we’ll tell you promptly if a breach affects your information.
13. How long we keep it
We keep your information while your account is open. When you delete your account, we delete your information within 30 days and destroy the encryption key that protects it, which makes any remaining backup copies unreadable. Where the law requires it, we keep a minimal record, such as your text-message consent and opt-out history.
14. Your choices and rights
- See what StarAlly remembers about you, and change or erase it by text.
- Get a copy of your data, or delete your account and data, by emailing support@starally.ai. We complete both within 30 days.
- Turn AI training and recommendations on or off. Both start off.
- Reply STOP to stop text messages at any time.
- Turn calls from StarAlly on or off on the Phone calls page, or text STOP CALLING ME to stop them.
- Choose when, how often and about what StarAlly texts you first on the Notifications page, or by text.
Depending on where you live, you may have additional rights. [State-specific disclosures to be added during legal review.]
15. Children
StarAlly is only for people 18 and older, and we don’t knowingly collect information from anyone younger. If you believe someone under 18 has signed up, contact us and we’ll delete the account.
16. Changes to this policy
If we make material changes, we’ll tell you by text or on this website before they take effect. The version at the top of this page is always the current one.
17. Contact us
Questions or requests? Email support@starally.ai. [Company legal name and postal address to be added.]