Privacy Policy
Last updated October 31, 2026
This Privacy Policy explains what information Stardo collects, why, who can see it, how long we keep it, and the choices you have. It covers the website at stardo.app, the Stardo apps, and everything they connect to (the "Service"). Stardo is made and run by CanDev Agency ("Stardo", "we", "us").
We built Stardo for students, many of them under 18, so we try to collect as little as we can, keep it safe, and explain it plainly.
The short version
- We collect what you give us to organise your school work, and a little about how you sign in to keep your account safe.
- We use it to run Stardo for you. We don't sell it, rent it, show you ads, or use it to train AI models. There are no advertising or tracking tools in Stardo.
- Parents and teachers only see what the sections below say they can. You decide what you share.
- You can download everything we keep about you, fix it, and delete your account at any time.
- Ask us anything at privacy@stardo.app.
1. Who is responsible
CanDev Agency is responsible for the personal information Stardo handles. Our Privacy Officer makes sure we follow this policy and the law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25). Reach them at privacy@stardo.app.
When a school or board gives Stardo to its students under a licence, the school decides some things about those accounts (for example, who can join) and we handle the information for the school under our agreement with it. Ask your school about its own privacy rules too.
2. What we collect
Your account
- Your name, email address (or a username, for younger children's accounts) and password. We only keep a scrambled version of your password (a hash), never the password itself.
- Your role (student, parent or teacher), and that you confirmed you're 13 or older.
- When you agreed to these terms and to account emails.
About your school (all optional)
- Your grade, school name, province and time zone.
What you put into Stardo
- Terms, courses, assignments, tests, due dates, progress, steps and marks.
- Calendar events, and the links of calendars you connect.
- Files, photos and notes you upload or write.
- Your chats with Nova, and the text of files, photos, links or voice messages you give Nova.
- Flashcards, practice tests and study plans.
When you connect another service (only if you choose to)
- Google or Microsoft sign-in: your account ID with them, your name and email.
- Google Classroom: your courses and coursework (read-only).
- Google Calendar: the events in the calendar you connect.
Family and classes
- Links between parents and students, and their settings (what a parent may see).
- Invitations you send (the email address you invite).
- Classes you teach or join, class work, teachers' notes and released marks.
Payments
- Your plan, what you paid and when. Payments are handled by Stripe, Apple or Google, which give us your name, email and billing details, but never your full card number.
- Stardust balance and use, and invite rewards (including the email a gift card is sent to).
Safety and device information
- Each sign-in: when it happened, whether it worked, your IP address, and your browser or device type.
- If you allow notifications: a push token for your phone or browser, and the notifications we sent you.
- How much Nova you used (counts and timing, not the words), to apply daily limits and plan our costs.
- Reports you send us about a problem.
We don't collect your precise location, contacts, photos you don't choose to upload, or information about other apps on your device. The app uses your camera, microphone or files only when you tap to scan, record or attach something.
3. Why we use it
- To run Stardo for you: show your timeline and calendar, store your files, send the reminders you asked for, connect the services you chose, and let Nova help you.
- To connect you with the people you choose: parents, teachers, classmates and people you share with.
- To keep Stardo and everyone on it safe: protect accounts, stop abuse and cheating on rewards, review reported content, and fix problems.
- To handle payments, plans and Stardust.
- To talk to you about your account (see section 6).
- To make Stardo better: we look at overall numbers (like how many people use a feature) and at problems people report. We don't build advertising profiles.
- To follow the law: for example, keeping tax records, or answering a valid legal request.
We only use your information for these purposes, or for a new purpose you agree to. If you are in the European Union or the United Kingdom, we rely on our contract with you (to provide the Service), your consent (for example, for account emails and connecting services), our legitimate interests (keeping Stardo safe and working), and legal obligations.
4. Nova and AI
When you ask Nova something, we send our AI provider what's needed to answer: your message, the school work it's about, and the text of any file, photo, link or voice message you give it. We currently use OpenAI's API, or Microsoft's Azure OpenAI Service where it's set up. Under their API terms, these providers don't use what we send to train their models, and they keep it only for a short time to check for abuse.
Nova's replies, and the parents' weekly note that Nova writes, are stored with your account. Stardo staff only read Nova chats when a reply is reported or flagged by our safety checks, and every look is recorded.
5. Who can see your information
- You.
- Parents you link with see what you allow (such as your timeline and grades), never your files, notes, Nova chats or private items. A parent who manages a younger child's account can see and change that account.
- Teachers of classes you join see whether you marked their class work done and the marks they released, plus your name and email in their class list.
- Your school, if it has a licence: your name, email, role and last sign-in, and the classes it runs.
- People you share with: anyone you share a file or note with, or who has a share link you made.
- Stardo staff: a small number of people, only when needed to help you, keep Stardo safe, or follow the law. Every time a staff member looks at someone's information, it's recorded.
- Service providers that run parts of Stardo for us, under contracts that only let them use it to provide their service and require them to protect it:
- Hosting and storage (servers, database and file storage)
- OpenAI or Microsoft Azure OpenAI (Nova)
- Our email provider (account emails)
- Expo, Apple and Google (phone notifications)
- Google and Microsoft (sign-in, and Classroom and Calendar if you connect them)
- Stripe, Apple, Google Play and RevenueCat (payments and subscriptions)
- Our gift card provider (invite rewards, if you claim one)
- When the law requires it: if we must answer a valid legal request, or to protect someone's safety in an emergency.
- If Stardo changes hands: if another company takes over Stardo, your information would move to it under this policy, and we'd tell you first.
We never sell or rent personal information, and we don't share it for advertising.
6. Emails and notifications
When you create an account, you agree that we can send you emails about your account. These include: password resets and security alerts, reminders and daily summaries you've turned on, invitations and requests from family or classes, receipts and plan notices, and important changes to these terms.
- Turn reminders and summaries off any time in Notification settings (or with the link in the email).
- Security, legal and payment emails can't be turned off while you have an account, because you need them.
- We don't send marketing or promotional emails unless you separately say yes to them, and you can say no again at any time with the unsubscribe link.
Phone and browser notifications are only sent if you allow them on your device, and you can turn them off in your device settings or in Stardo.
7. Where your information is stored
Stardo's database and files are stored in Canada. Some of our service providers (such as our AI provider, notification services, app stores and payment processors) may process information in other countries, mainly the United States. When that happens, the information is protected by our contracts with them, but it may be available to that country's courts and authorities under its laws.
8. How long we keep it
- Your account and everything in it: for as long as you have an account. When you close it, we delete it for good after 30 days (in case you change your mind).
- Files and notes in the trash: deleted for good after 30 days.
- Nova chats: kept with your account. "New chat" hides older messages from you, and they're deleted with your account.
- Sign-in history and sent notifications: kept with your account, to keep it safe.
- Payment and tax records: as long as tax law requires (in Canada, generally six years), even after your account is closed.
- The record of staff looking at accounts: kept to show we follow this policy. It doesn't contain your content.
- Backups: deleted information can stay in our backups for a short time until they're replaced on their regular schedule.
9. Children and teens
- Students who are 13 or older can sign up themselves.
- Children under 13 (under 14 in Quebec) can only use Stardo through an account a parent made, or a teacher made with the school's permission and a parent's consent. These accounts don't need an email address, can't make public share links, and Nova's homework help stays off until the parent turns it on.
- Parents can see and change the information in a child's account they manage, download it, and close the account at any time. Write to privacy@stardo.app for anything else.
- If we learn that we have information from a child under 13 without a parent's consent, we'll delete it.
10. Keeping it safe
We use encryption in transit (HTTPS) for everything, store passwords only as hashes, encrypt keys and secrets, limit staff access to those who need it, require two-step sign-in for staff, and record every staff look at an account. No system is perfectly secure, so please use a strong password that you don't use anywhere else.
If a breach of security creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner (and the Commission d'accès à l'information in Quebec) as soon as we can, as the law requires.
11. Your rights and choices
- See your information: Account → Your data → Download gives you everything we keep about you in one file.
- Fix it: change your name, school and settings in Stardo, or ask us.
- Delete it: close your account at any time (stardo.app/delete-account explains how), or delete individual items yourself.
- Withdraw consent: turn off emails and notifications, disconnect Google, Microsoft or calendars, or unlink a parent. Some things (like account and security emails) are needed to run your account, so the way to stop them is to close it.
- Ask questions or complain: write to privacy@stardo.app. We'll answer within 30 days. If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec the Commission d'accès à l'information (cai.gouv.qc.ca).
Depending on where you live (for example, the European Union, the United Kingdom or California), you may have more rights, such as to object to some uses or to move your information elsewhere. Write to us and we'll help. We may need to check that a request really comes from you, and a parent can make requests for their child.
12. Cookies and storage on your device
Stardo doesn't use advertising or tracking cookies, or third-party analytics. The website uses one sign-in cookie (to keep you signed in safely) and your browser's storage for things like your theme. The apps keep your sign-in in your phone's secure storage.
13. Changes to this policy
We'll update this policy when Stardo or the law changes. The date at the top always shows the latest version. If a change matters, we'll tell you in Stardo or by email before it applies and, where the law needs it, ask for your consent again.
14. Contact us
Privacy Officer, CanDev Agency (Stardo)
Email: privacy@stardo.app
Other questions: support@stardo.app