Starred Privacy Policy

Effective Date: September 9, 2026

Last Updated: October 21, 2026

This Privacy Policy explains how Muse Computing, Inc., a Delaware corporation ("Muse," "we," "us," or "our"), collects, uses, discloses, and protects information when you use Starred, including the Starred iOS app, Star in phone messaging, starred.today, the Connections Portal, and related services (collectively, the "Services").

The Services are offered only to people located in the United States who are at least 18 years old. Do not use the Services if you are outside the United States or under 18.

1. Scope

This Privacy Policy applies to personal information Muse processes through the Services. It does not govern third-party services, websites, or applications, even when Starred links to or works with them. Those third parties apply their own terms and privacy policies.

2. Information We Collect

A. Account and profile information

Starred uses phone-based authentication. We may collect or receive:

  • your phone number;
  • authentication and account identifiers, including Firebase and Starred user identifiers;
  • your display name or preferred name, and other profile information and preferences you choose to provide;
  • account creation, verification, session, and security information; and
  • communications and information you provide when requesting support.

When you set up Star on our website, we ask what Star should call you, the city you're based in, and about your interests and preferences, such as the apps you use, and we verify your phone number with a one-time code. With your answers we save your device's time zone setting so Star's messages and reminders arrive at sensible times. We use these answers to set up Star and personalize its recommendations, for example to suggest places near you. The "use my location" option guesses your city from your device's time zone setting; it does not use GPS or precise location, and nothing is sent until you submit the answer.

If you joined our former email waitlist, we keep your email address to manage the waitlist and contact you about access to Starred. Joining the waitlist does not create an account.

B. Contacts

Starred does not request Contacts access, read or upload your device address book, or match your contacts. If we introduce contact importing or matching, we will explain the feature and request optional permission when you choose to use it, and update this Policy before collection begins.

When you include Star in a group chat, we receive participants' messaging identifiers and the content sent to that chat. This does not give us access to your device's address book.

C. Location and place information

With your permission, Starred may access your precise foreground location after you create a Star. Starred may send a coordinate and related request information to Muse and a place-search provider to return nearby place candidates. A place is attached to a Star only after you choose it.

Location observations and confirmed places may also be stored locally with private content on your device. We may derive approximate location from an IP address for security, operations, or legal compliance.

If you choose to share your location with Star through messaging, Star can receive the shared coordinates, locality, and sharing update time to help with your nearby-place request.

D. Camera, photo, video, audio, and other content

Depending on the features you choose, Starred may access or create:

  • photos and videos captured with the camera or selected from your library;
  • voice and other audio recordings;
  • text, notes, captions, transcripts, tags, drawings, and compositions;
  • chat messages and attachments;
  • Stars, saved Moments, Rooms, preferences, reactions, and other product activity; and
  • prompts, responses, recommendations, and other AI-assisted results.

Some creation and transcription features operate on your device. Private Personal Stars are stored on your device unless you take an action that sends content to the Services, such as sending a chat message, requesting cloud or AI processing, using an import feature, or participating in product analytics. Product analytics may include sampled recordings of selected in-app screens and interactions, including content visible on those screens. Content you send through chat is processed and stored through Starred and its chat provider.

For phone messaging, we receive the messages, links, media, and reactions you send to Star; your messaging identifier, such as a phone number; participant and conversation identifiers; and timestamps and delivery or read information when available. We store conversation history and may create summaries and media descriptions to help Star respond and find earlier content in the conversation. Star also uses the profile information and quiz answers you save to personalize replies.

While you take a signed-in website quiz, we save your current answers, photo selections and label corrections, quiz position, and device time zone for the quiz link's remaining lifetime, up to three days, so you can resume. Star can read these updates and respond in the chat that sent the quiz. Completed quiz results remain saved with your account under our retention practices in Section 6.

When Star sends you a link, its messaging preview may include a suitable display name and artwork chosen from interests you explicitly selected during setup. These previews use our approved images and stickers, not your uploaded photos, private messages, free-text answers, location, generated profile notes, or website sign-in details. Anyone with the link, including a messaging provider, may retrieve and cache the preview. The preview does not grant access to your private account. Our preview reference can serve the card for up to 30 days; third-party cached copies may remain available under that provider's practices.

My profile can show a private, generated read based on your messages to Star, saved quiz answers, and reactions to items on your boards. We store that read, the supporting excerpts and references, and the words you save when you correct or reject part of it. We may update the read in the background after activity, and use the same current understanding to personalize Star's replies and related work. A saved correction can prompt a text from Star; background profile maintenance does not itself send a daily text. Correcting the read does not delete the original conversation or quiz answer. Deleting or suppressing a supporting source removes its use in the current read.

Website quizzes may invite you to upload photos before or after signing in. When you select a photo, we send it to our services and AI providers to check it and personalize Star's response. After you verify your phone number and submit your setup, the selected uploads are associated with your Starred account. Photos uploaded while signed in are associated with your account immediately. These photos remain with your account even if you do not finish the quiz; completed quiz answers let Star use the selected photos in your conversation. We remove unclaimed uploads from active storage within 24 hours during normal operation. Recoverable copies may remain under our storage recovery and backup retention policies described in Section 6. We do not publish these photos or share them with other users through the quiz.

E. Personalized libraries and individual imports

For the personalized feed and library or discovery requests, we use the interests and preferences you provide to search for and automatically select third-party content. For discovery requests made through chat or similar features, we also use your instructions and relevant request context. You do not identify every item yourself. Separately, you may submit a supported post URL or image for an individual import.

For these features, we may collect and process:

  • stated interests, preferences, prompts, and search queries derived from them;
  • source URLs, platform and creator identifiers, captions, and other retrieved metadata;
  • copies of retrieved videos, images, audio, and previews, including candidates not ultimately shown;
  • transcripts, descriptions, analysis, and other processed results;
  • the requesting account, request identifiers, timestamps, status, provider-call records, and associations between requests and retrieved or displayed items; and
  • records of requests and policy acceptance when collected, including the wording or policy version presented, the affirmative action taken, its time, and the scope of the instruction.

The account's requests, preferences, import history, and access grants are account-specific. Direct image uploads are account-restricted. Underlying third-party posts and media, however, are stored in a shared catalog and may be reused and shown to other accounts. This also applies to posts retrieved through individual URL imports. Reuse of source content does not expose your account's request or import history to other users through these features. Personalized content libraries are therefore not exclusive repositories of the third-party media they contain.

The Usage Policy explains automated selection, downloading, storage, provider processing, and stopping controls. The Terms distinguish a library request from rights or permissions belonging to third parties.

F. Device, push, usage, and diagnostic information

We may collect:

  • app installation and device identifiers;
  • Expo and Stream push-notification tokens and notification-delivery information;
  • device type, operating system, app version, language, and configuration;
  • App Check, authentication, security, and fraud-prevention signals;
  • IP address, request identifiers, timestamps, server logs, and error information;
  • sampled recordings of selected in-app screens and interactions, which may include content visible on those screens;
  • product interactions, feature usage, and content-view or save activity; and
  • crash, performance, and other diagnostic information.

The Starred app does not use third-party advertising networks or track you across unrelated apps or websites for advertising.

G. Advertising measurement on starred.today

Our website, starred.today, uses the Meta Pixel and Meta's Conversions API to measure how our ads on Meta's services perform. When you visit the website, the Meta Pixel can set cookies and send Meta information about your visit, such as the page you viewed, your IP address, and your browser. We also report selected steps in setting up Star: starting setup, reaching phone verification after answering the questions, saving setup, opening the messaging handoff, and sending a first message to Star. Opening the handoff does not mean a message was sent. The reports include the setup variant's catalog identifier. Server reports of saved setup and a first message include a hashed version of your phone number, available Meta cookies from your visit, and the IP address and browser details from your setup, so Meta can match them to an ad you saw or clicked. We do not send Meta your messages, setup answers, personality or interest labels, uploaded photos, or other Starred content. We remove retained visit cookies, IP address, and browser details after both the setup and first-message reports are accepted, after an advertising opt-out, or within seven days of setup, whichever comes first. Account deletion also removes this retained context. Delivery attempts and receipts remain under our retention practices in Section 6. Meta uses this information under its own terms and privacy policy. A recognized Global Privacy Control signal prevents these advertising reports from the website and is saved as an advertising opt-out when you submit setup. You can also contact us to request an advertising opt-out for your account.

When you reach starred.today from one of our ads, the link names the ad campaign and ad you came from. If you set up Star, we keep those campaign and ad identifiers with your account so we can see which ads bring people who enjoy Starred. Website page addresses received by the Meta Pixel may include these campaign and ad identifiers; server conversion reports use a page address without advertising query parameters.

H. Product analytics on starred.today

We use Amplitude, a product analytics provider, to understand how people find starred.today and set up Star. Amplitude records the pages and setup screens a visit reaches, whether a screen was continued, answered or skipped, whether you answered that you use Pinterest, and what brought you to the site, such as the referring site and the campaign or ad named in the link you followed. It also records how long the first setup screen takes to load and become usable and whether its pictures loaded, whether the page opened in an app's built-in browser such as Instagram's, whether you left before that screen was done, and the site release identifier. It also records when your setup and any required quiz result are confirmed saved, when the page is ready to open Star, and which setup stage needs a retry, without your answers or error details. When you open Star, it records whether the quiz save was confirmed or you chose to continue without confirmation; opening Messages does not mean you sent a message. It records whether you start entering a phone number and whether a submission is rejected as empty or invalid, without the characters you enter. It also records phone-verification attempts, whether a code request is a resend, and whether an attempt succeeded, failed or was cancelled, without the phone number, verification code or provider error details. It assigns your browser a random identifier and receives your IP address and browser details, from which it estimates an approximate location. We do not send Amplitude your name, the city you enter, your phone number, uploaded photos, or upload claim credentials. When your setup is confirmed saved after phone verification, we link the visit to your Starred account identifier, so we can see whether people who set up Star go on to text it. Amplitude processes this information on our behalf.

On your signed-in Portal, we also record when your profile or a quiz becomes visible and when a quiz result is completed. These records use the same pseudonymous account identifier, the quiz's catalog identifier and version, whether it came from a chat or setup, and the number of answers. We also record whether a saved profile correction replaces or rejects a note. We record when Star shares a quiz or profile link, without the private link or message content. They do not include your profile contents, quiz answers or results, photos, private page links, or sign-in credentials. Profile visits count separately from the requests that load your data.

When the messaging service reports that you read a message from Star in a private conversation, we may send the read time and the same pseudonymous account identifier to Amplitude. This helps us distinguish opening or reading from replying, reacting, or completing a quiz. These analytics records do not include message contents, phone numbers, or private links. A missing read receipt does not mean you did not read a message. We may import previously stored read receipts for the same usage measurement.

I. Website sign-ins and requested account work

When you ask Star to work with a website or account, we use your request, relevant conversation context, saved sign-ins, and content from that website to carry out the requested work. This may include messages, events, documents, or other account content relevant to your request, as well as observed page content, screenshots, task status, and results.

If you save a password or other reusable secret through the Connections Portal, it is stored in Kernel's credential vault and used to fill the website's sign-in fields. Secrets saved this way are not supplied as text to Star's AI models. Kernel also stores browser state, such as cookies, so a later requested task can use an existing session. We store login identifiers, sign-in preferences, and records of the requested work. Saving sign-in details does not itself start work or establish that a sign-in or task succeeded.

3. How We Use Information

We use information to:

  • manage the waitlist and contact people who ask to hear about access to Starred;
  • create, authenticate, secure, and administer accounts;
  • provide the features and content you request, including selecting and retrieving content based on your stated interests and library instructions;
  • document requests, their scope, and acceptance or withdrawal of applicable permissions;
  • store and display your account-restricted content and operate the shared third-party content catalog used for personalized libraries and individual URL imports;
  • operate chat, reminders, notifications, content retrieval, personalization, and recommendations;
  • carry out requested website and account work using saved sign-ins and relevant website content;
  • process prompts and content with AI systems;
  • provide nearby-place results and other user-requested enrichment;
  • moderate content and detect fraud, abuse, infringement, and security threats;
  • troubleshoot, analyze, maintain, and improve the Services;
  • communicate about support, security, service changes, and policy updates;
  • enforce our Terms and protect users, Muse, and others; and
  • comply with law and respond to valid legal requests.

We may aggregate or de-identify information so it no longer reasonably identifies you and use that information for analytics, product improvement, security, and operational purposes.

4. AI Processing

Our Usage Policy provides additional details about the information shared with AI providers, their purposes, and your choices.

Starred uses artificial intelligence to provide recommendations, respond in chat, analyze content, moderate use, and support other requested features. Information submitted to an AI-assisted feature may be sent to Muse's AI service providers. AI systems may produce inaccurate, incomplete, or unexpected results. Do not submit information you do not want processed as described in this Policy.

5. How We Disclose Information

We may disclose information as follows.

A. Service providers

We use providers to operate the Services. Depending on the feature, these providers include:

  • Google Cloud and Firebase for authentication, security, application infrastructure, databases, and media storage;
  • Stream for in-app chat, chat attachments, and related messaging functions;
  • Linq for phone messaging, including messages, attachments, participant identifiers, and delivery information;
  • Kernel for browser sessions, saved browser state, and the credential vault used for requested website and account work;
  • Expo and Apple for push-notification delivery and mobile-platform services;
  • ScrapeCreators for social-content search and retrieval, and EnsembleData and source-platform infrastructure for supported content retrieval and individual imports;
  • Foursquare for user-requested nearby-place candidates;
  • product analytics providers for pseudonymous usage measurement, debugging, and product improvement; and
  • AI and content-processing providers, including OpenAI, Anthropic, Google Vertex AI, and fal.

Providers process information on our behalf to perform the services we request. The particular provider used may depend on the feature, availability, and Service configuration. For personalized libraries, search and retrieval providers may receive derived interest queries, source URLs, and post identifiers; storage providers receive retrieved media and metadata; and AI/content-processing providers may receive relevant instructions, context, retrieved content, and processed results. Not every provider receives every category. A derived query can itself reveal an interest even when it does not include your account identifier.

We may disclose information when we reasonably believe it is necessary to comply with law or a valid legal process; investigate or prevent fraud, abuse, infringement, or security threats; enforce our agreements; or protect the rights, safety, and property of Muse, our users, or others.

C. Business transfers

Information may be disclosed in connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable law.

D. At your direction

We may disclose information when you direct us or intentionally use a feature that sends content to another service or person.

6. Retention and Deletion

We retain information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, meet legal and security obligations, resolve disputes, and enforce agreements.

Account deletion is intended to remove or schedule removal of the Firebase account and Starred-owned account data, including account records, active sessions and tokens, push registrations, Stream identity and chat data, account-owned uploaded media, import records, library requests and access grants, preferences, and other user-linked records. Shared third-party source media and processed results may remain in the catalog and be used for other accounts; deleting your account does not necessarily erase those shared copies. Any retained information that remains linked to you is still subject to this Policy, including its retention limits and exceptions.

Once you request deletion, we will remove your account and associated personal information from our active systems within 30 days, unless we need to retain particular information for one of the reasons described below or the information has already been de-identified so that it is no longer associated with you.

We direct service providers that maintain account-linked information on our behalf to delete that information within 30 days after your deletion request, subject to the limited retention exceptions described below. Information processed without a persistent account link may instead expire under the provider's ordinary retention schedule.

Residual copies may remain in encrypted, access-restricted backups for up to 30 additional days after removal from our active systems. We do not use backup copies for ordinary business purposes. If we restore a backup, we will reapply completed deletion requests before the restored data is used to provide the Services.

We may retain limited information for longer when reasonably necessary to comply with law or legal process, maintain security, prevent fraud or abuse, resolve disputes, enforce our agreements, or keep a record that we completed a deletion request. We may also retain de-identified information that can no longer reasonably be linked to you.

Content stored only on your device is removed through the applicable in-app deletion controls, account-deletion flow, or removal of the app and its data, as described in the product at the time. Deletion from Recently Deleted may be subject to the recovery period displayed in the app.

7. Your Rights and Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, and to appeal certain decisions. You may also withdraw a device permission through iOS Settings. Withdrawing permission does not affect processing that already occurred.

In phone messaging, you can ask Star to list, change, pause, or cancel reminders and discoveries. Sending STOP as a message by itself in a private chat stops scheduled contact; ordinary chat remains available. Stopping scheduled contact does not delete your information. You can replace or remove saved sign-in details through the Connections Portal; an existing website session may remain signed in after those details are removed.

For personalized libraries, stopping use avoids new browsing requests but does not cancel work already admitted or delete shared source content. There is currently no dedicated in-app collection pause control. You can ask us to stop further collection for your account at colin@starredtoday.com; see the Usage Policy for current controls and account deletion for broader removal options.

To submit a privacy request, contact colin@starredtoday.com. We may need to verify your identity before completing a request.

Muse does not sell personal information for money. Some state laws may treat the advertising measurement described in Section 2.G as "sharing" personal information for cross-context behavioral advertising. You can opt out by turning on Global Privacy Control in your browser, which starred.today honors by not loading the Meta Pixel and not keeping your visit details for Meta, or by emailing colin@starredtoday.com.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No storage or transmission system is completely secure, and we cannot guarantee absolute security. Protect your device and account, and notify us if you believe your account has been compromised.

9. Age and Geographic Restrictions

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. The Services are offered only in the United States. If you believe an underage person has provided information to us, contact colin@starredtoday.com.

10. Changes to This Policy

We may update this Policy as the Services or our practices change. We will post the updated Policy with a new "Last Updated" date and provide any additional notice required by law. Material changes apply prospectively unless otherwise stated or permitted by law.

11. Contact Us

Muse Computing, Inc.

2261 Market Street, STE 76867
San Francisco, CA 94114

Privacy requests: colin@starredtoday.com

General support: colin@starredtoday.com