Stellmeet (com.helson.stellmeet)
Effective and last updated: August 13, 2026
This Policy applies to the Stellmeet app and related services (the “Service”). The Service is operated by Helson, an independent developer and the controller of the personal data described here. For privacy questions, rights requests, or complaints, email [email protected].
This Policy describes the data we process, why we process it, recipients, retention, and your rights. Using the Service does not waive statutory privacy rights. Where consent is required, we request it separately.
| Category | Data and source |
|---|---|
| Account and identity | Email, account ID, nickname, login and session information, provided by you or Apple/Google sign-in. We do not receive third-party passwords. |
| Profile and social data | Avatar, bio, country/city, interests, voice card, friends, blocks, relationships, reports, and enforcement records. |
| Location | With permission, foreground device location is read and reverse-geocoded on the device. The server stores country, city, country code, and location source, not GPS coordinates. If permission is denied, we do not read GPS and non-location features remain available. |
| User content | Direct-message text, images and audio; Wish Lanterns and replies; room covers, public chat, other submissions, and necessary sender, recipient, and time metadata. |
| Purchases and virtual assets | Product and transaction identifiers, purchase status/history, Diamond balance, spending history, and Charm score. Apple or Google processes payment-card data; we do not receive full card details. |
| Device, notifications, and logs | Push token and preferences; device, app, and installation identifiers; OS/app version; IP address; authentication and security logs. |
| Analytics and diagnostics | Screen views, feature interactions, room/message/purchase events, performance metrics, and diagnostics. We may set the Service account ID in Firebase Analytics, so some analytics can be linked to an account. |
| Support | Emails, complaints, requests, and response records. |
Images may undergo automated safety screening and text may undergo sensitive-content filtering. Results may be used to block or enforce against prohibited content. You may email us for human review. We do not make decisions producing legal or similarly significant effects based solely on automated processing.
We do not sell personal data or share it for cross-context behavioral advertising. We disclose only what is needed to:
| Provider | Purpose/data |
|---|---|
| Appwrite (self-hosted by Helson) | Accounts, databases, files, messages, and backend functions. |
| Google Cloud Vision | SafeSearch moderation of uploaded images. |
| Google Firebase Analytics / Performance | Account/installation identifiers, usage events, device information, performance, and diagnostics. |
| Agora | Real-time voice-room transmission and connection data. |
| RevenueCat | Purchase validation, entitlements, and purchase analytics. |
| Expo, Apple APNs, Google FCM | Push tokens and notification delivery. |
| Apple / Google | Third-party sign-in and in-app purchases. |
We require processors to protect data under contract, applicable provider terms, and law to a standard no lower than this Policy. We may also disclose necessary data in response to valid legal process, to protect users, or to establish, exercise, or defend legal claims.
Core Service data is hosted on a self-operated server in Helsinki, Finland. Global providers above may process data outside your country. Where GDPR or UK GDPR applies, transfers rely on adequacy decisions, Standard Contractual Clauses, the UK international transfer mechanism, or another lawful safeguard. Contact us for information about safeguards.
We use encryption in transit, access controls, least privilege, authentication, and content-safety controls. No internet service can guarantee absolute security. We will provide legally required notices of qualifying data incidents.
Account deletion removes the account and associated profiles, content, and files. Legally necessary transaction, report, or security records are isolated, access-restricted, and used only for compliance, fraud prevention, or disputes. Aggregated or irreversibly anonymized data is no longer personal data.
You can edit profile and notification choices in-app and withdraw location, photo, microphone, or notification permissions in device settings. Withdrawal does not affect prior lawful processing. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Delete your account via Settings → Delete Account or our Account Deletion page.
Email [email protected]. We may reasonably verify identity and respond within the applicable legal period. EEA residents may complain to their local data protection authority; UK residents may complain to the ICO. California residents, where applicable, may request to know, access, correct, or delete information, limit use of sensitive information, and receive non-discriminatory treatment. We do not sell or share personal information for cross-context behavioral advertising.
The Service is only for people aged 18 or older. If we learn that a minor submitted personal data, we will take steps to delete it and terminate the account. A guardian may notify us by email.
We may update this Policy. We will announce material changes in-app or by another prominent method and update the date above. Where renewed consent is legally required, we will request it.
Operator: Helson (independent developer)
App: Stellmeet
Email: [email protected]