Privacy Policy

This Privacy Policy explains how StarLoop collects, uses, discloses, and protects information when you use StarLoop at starloop.app and related services.

StarLoop is an AI-assisted learning application operated by Elisha Lim, sole proprietor (“StarLoop,” “we,” “us,” or “our”). You can contact us at starloop.admin@gmail.com.

StarLoop is currently offered as a closed beta. Features, data flows, service providers, and product functionality may change as the product develops. If we make material changes to this Privacy Policy, we will update the “Last updated” date and, where appropriate, provide additional notice.

By using StarLoop, you acknowledge the practices described in this Privacy Policy.

1. What StarLoop does

StarLoop helps users study topics through an AI-assisted learning workflow. Depending on the features available to your account, StarLoop may help you:

• create topics and learning goals;
• generate outlines and lessons;
• ask scoped tutor questions;
• complete drills, summaries, and quizzes;
• create and review notes, highlights, and flashcards;
• schedule spaced-repetition reviews;
• upload or link source materials so learning content can be grounded in your own materials.

StarLoop is currently a closed beta and is not a school, university, accredited educational institution, professional advisor, or replacement for professional advice.

2. Eligibility, students, and children

StarLoop is available only to users who are at least 13 years old.

StarLoop is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to StarLoop, contact us at starloop.admin@gmail.com and we will take appropriate steps to delete it.

Users who are under the age of majority where they live may use StarLoop only with the consent and supervision of a parent or legal guardian.

Students may use StarLoop for personal learning and study support, but StarLoop is not currently designed for school-administered use, classroom deployment, or processing education records on behalf of a school. Schools, teachers, districts, or institutions interested in using StarLoop should contact us before asking students to use the Service.

3. Information we collect

We collect information in the following categories.

A. Account information

When you create or use an account, we may collect:

• email address;
• display name;
• avatar or profile image, if you add one;
• timezone;
• account settings and preferences;
• authentication and login information;
• beta access status and invitation-related information.

B. Learning content you create

When you use StarLoop, we collect the content you create, submit, store, or generate through the Service, including:

• topics and learning goals;
• generated outlines;
• lessons associated with your account;
• summaries you write;
• AI feedback on summaries;
• notes and highlights;
• tutor and drill chat messages;
• quiz answers and quiz results;
• flashcards;
• spaced-repetition review history;
• progress, mastery, and completion status;
• settings related to your learning workflow.

C. Uploaded sources and linked materials

During beta, source uploads are enabled. If you upload, paste, link, or otherwise provide documents, URLs, text, or other materials as learning sources, we collect and process those materials to provide source-grounded learning features.

This may include:

• original uploaded files;
• pasted text;
• linked URLs;
• extracted text;
• parsed source artifacts;
• chunks or snippets of source material;
• embeddings or other numerical representations used for retrieval;
• source metadata, such as file name, file type, upload time, source title, or URL.

You should not upload sensitive information, confidential information, or materials you do not have the right to use. See Section 5.

D. AI inputs and outputs

StarLoop uses AI features to generate and evaluate learning content. We may collect and store:

• prompts and instructions sent to AI systems;
• your inputs and messages;
• relevant lesson, note, source, summary, quiz, or flashcard context;
• AI-generated outputs;
• AI feedback, grading, or generated explanations;
• metadata needed to debug, monitor, limit, or improve AI features.

E. Communications and feedback

If you contact us, join a waitlist, respond to beta questions, submit feedback, report bugs, or request support, we collect the information you provide, such as:

• name or email address;
• message content;
• screenshots or files you choose to send;
• feedback, feature requests, and bug reports;
• support history.

F. Usage, device, and technical information

We may automatically collect information about how you access and use StarLoop, including:

• pages viewed;
• features used;
• buttons clicked;
• time spent in the Service;
• learning workflow events;
• source upload, generation, review, quiz, and rate-limit events;
• IP address;
• browser type;
• device type;
• operating system;
• referring URL;
• log data;
• error and diagnostic information;
• approximate location inferred from IP address;
• cookies, local storage, and similar technologies.

G. Rate-limit and abuse-prevention data

To protect the Service and control beta costs, we may collect and process usage counters and related metadata, including:

• user ID;
• IP address;
• request timestamps;
• endpoint or feature usage;
• rate-limit counters;
• reset times;
• abuse-prevention signals.

H. Payment and billing information

If and when paid features become available and you choose to purchase them, we and our payment processor collect information needed to process payments and manage subscriptions, which may include:

• billing name and billing contact details;
• billing address and country;
• the payment method type and a tokenized payment identifier;
• the card brand and the last four digits of a payment card (we do not store full card numbers);
• subscription plan, status, start and renewal dates, and cancellation status;
• transaction history, amounts, currency, and receipts;
• tax-related information, such as jurisdiction or tax identifiers, where required.

Full payment card numbers and similar credentials are collected and processed directly by our payment processor and are not stored on StarLoop’s own servers.

4. How we use information

We use information to:

• create and maintain your account;
• provide the Service and its learning features;
• generate outlines, lessons, tutor responses, drills, summaries, quizzes, flashcards, and review schedules;
• process uploaded sources;
• retrieve relevant source snippets;
• save your learning progress;
• personalize your learning workflow;
• process payments, manage subscriptions and renewals, issue receipts, and handle refunds, chargebacks, and billing disputes;
• enforce beta access, usage caps, rate limits, and product restrictions;
• provide support and respond to your requests;
• debug, monitor, secure, and improve the Service;
• detect, prevent, and respond to fraud, abuse, misuse, security incidents, and technical issues;
• communicate with you about your account, beta access, product updates, policy changes, and service-related matters;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

We do not use your personal information for cross-context behavioral advertising.

5. Sensitive information and source uploads

StarLoop is not designed for storing or processing highly sensitive information. You should not upload or submit:

• Social Security numbers, passport numbers, driver’s license numbers, or government IDs;
• payment card numbers, bank account numbers, or financial account credentials (other than payment information you provide to our payment processor to purchase paid features);
• tax returns or detailed tax records;
• medical records, health insurance records, medical images, or protected health information;
• biometric data;
• precise geolocation data;
• passwords, API keys, access tokens, or private credentials;
• attorney-client privileged materials;
• confidential employer, client, or third-party documents;
• trade secrets or proprietary business documents you are not authorized to use;
• student education records or school-administered records;
• information about children under 13;
• any content you do not have the right to upload or process through StarLoop.

If you choose to submit sensitive information despite this restriction, it may be processed by StarLoop and our service providers as described in this Privacy Policy. We may delete, restrict, or refuse to process content that we believe creates legal, security, privacy, or operational risk.

6. How AI processing works

StarLoop uses AI providers to power features such as:

• outline generation;
• lesson generation;
• tutor chat;
• drill questions and feedback;
• summary feedback;
• quiz generation and grading;
• flashcard generation;
• source-grounded retrieval and reranking.

To provide these features, we may send relevant content to AI providers, including your prompts, learning content, uploaded source snippets, notes, summaries, quiz answers, and other context needed to complete the requested task.

We aim to send only the information reasonably needed for the requested feature. However, because AI features depend on context, the information sent may include portions of your learning content, source materials, or prior interactions.

We do not use your learning content, uploaded sources, notes, summaries, quiz responses, flashcards, or tutor messages to train StarLoop-owned machine-learning models.

Our AI providers process content to provide services to us. We intend to use AI providers under business or API terms that restrict use of customer content for model training, but provider terms and configurations may change. We will update this Privacy Policy if our AI training practices materially change.

7. Payments and billing

StarLoop is not charging users as of the date of this Privacy Policy. If we introduce paid features, we will use a third-party payment processor, Stripe, to process payments.

We do not collect or store full payment card numbers on our own servers; that information is handled by our payment processor under its own terms and security standards, including the Payment Card Industry Data Security Standard (PCI-DSS).

We receive limited billing information from the processor — such as your billing name, billing address, payment method type, card brand, the last four digits of your card, subscription status, and transaction records — which we use to provide and manage paid features, prevent fraud, comply with tax and accounting obligations, and respond to billing questions.

Your use of paid features, and the processor’s handling of your payment information, are also subject to the payment processor’s own terms and privacy policy.

8. Service providers and subprocessors

We use service providers to operate StarLoop. These providers may process information only as needed to provide services to us.

Some providers may be added, removed, replaced, or disabled as the beta evolves. We will update this Privacy Policy if our subprocessors materially change.

9. How we disclose information

We may disclose information in the following circumstances.

A. Service providers

We disclose information to service providers that help us operate, secure, monitor, host, improve, and provide StarLoop.

B. Legal compliance and safety

We may disclose information if we believe it is reasonably necessary to:

• comply with applicable law, legal process, or government requests;
• enforce our Terms of Service;
• protect the rights, safety, privacy, or property of StarLoop, users, or others;
• detect, prevent, or address fraud, security, or technical issues;
• investigate potential violations or misuse.

C. Business transfers

If StarLoop is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction.

D. With your direction or consent

We may disclose information when you direct us to do so or give us consent.

10. Data retention

We keep information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

In general:

• account information is retained while your account is active;
• learning content is retained while your account is active unless you delete it;
• uploaded sources are retained while your account is active unless you delete them or delete your account;
• billing and transaction records may be retained for the period required by tax, accounting, and legal obligations, even after account deletion;
• logs, analytics, diagnostic data, and security records may be retained for limited periods according to operational needs and provider retention schedules;
• backups may retain deleted information for a limited time before being overwritten or purged.

When you delete your account, we delete or de-identify your account information and associated learning content as described in Section 11, subject to backup, security, legal, and operational retention needs.

11. Account deletion and data export

You may export and delete your data from inside the Service where those features are available.

You may delete your account from Settings → Delete account. When account deletion is completed, StarLoop removes your profile and associated learning content from our active database and removes uploaded source files from private storage.

Deletion is permanent and cannot be undone. Some information may remain for a limited period in backups, logs, provider systems, or records we are legally or operationally required to retain (for example, billing records required for tax and accounting purposes).

If deletion cannot be completed for technical reasons, you may need to retry or contact us at starloop.admin@gmail.com.

You may also contact us at starloop.admin@gmail.com to request access, correction, export, or deletion of personal information.

12. Your privacy rights and choices

Depending on where you live, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• delete personal information;
• export or receive a copy of personal information;
• object to or restrict certain processing;
• opt out of certain data uses;
• appeal a denied privacy request, where applicable.

To make a request, contact us at starloop.admin@gmail.com. You may also use an authorized agent to make a request on your behalf where the law allows; we may ask the agent to provide proof of authorization.

We may need to verify your identity before responding, and we will respond within the time required by applicable law. We will not discriminate or retaliate against you for exercising any of these rights.

Because we do not sell personal information or use it for cross-context behavioral advertising, there is nothing for you to opt out of in those categories. Where required, we will honor recognized opt-out preference signals such as Global Privacy Control (GPC) for any applicable data uses.

13. Cookies, local storage, and analytics

We use cookies, local storage, and similar technologies to:

• keep you signed in;
• remember settings and preferences;
• support authentication and security;
• operate product features;
• understand how the Service is used;
• debug and improve the Service.

Analytics tools, if enabled, may associate usage events with your account, including email address, display name, and product activity.

If PostHog is enabled, StarLoop may identify your account in PostHog using your user ID, email address, display name, and related product activity so we can understand product usage, debug issues, and improve the Service.

If you are in a region that requires consent for non-essential analytics cookies, we will provide consent controls where required. During beta, some consent and preference features may still be under development.

You can control cookies through your browser settings, but disabling cookies may prevent parts of the Service from working. Because there is no common industry standard for “Do Not Track” signals, we do not currently respond to them, though we honor recognized opt-out signals as described in Section 12.

14. Security

We use reasonable technical and organizational measures designed to protect information, including:

• authentication controls;
• private storage for uploaded sources;
• database access controls;
• row-level access controls where applicable;
• encryption in transit;
• rate limiting;
• monitoring and diagnostic tools;
• access restrictions for service providers and internal systems.

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed. You are responsible for keeping your account credentials secure.

If you believe your account or information has been compromised, contact us at starloop.admin@gmail.com.

15. International data transfers

StarLoop is operated from the United States. We and our service providers may process information in the United States and other countries where our providers operate.

If you access StarLoop from outside the United States, your information may be transferred to and processed in countries that may have different data protection laws than your country. Where required, we rely on appropriate safeguards for such transfers.

16. Confidential beta feedback

Because StarLoop is in closed beta, you may provide feedback, bug reports, screenshots, or other beta-related information. We may use that feedback to improve the Service.

Please do not include confidential third-party information, sensitive personal information, or materials you do not have the right to share in beta feedback.

17. Third-party links and sources

StarLoop may allow you to submit URLs or interact with third-party links and source materials. We are not responsible for the privacy practices, content, or policies of third-party websites or services that we do not control.

Your use of third-party websites or services is governed by their own terms and privacy policies.

18. Changes to this Privacy Policy

We may update this Privacy Policy as StarLoop evolves. If we make material changes, we will take reasonable steps to notify you, such as by updating the “Last updated” date, posting notice in the Service, or emailing you.

Your continued use of StarLoop after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

19. Contact

Questions, privacy requests, or concerns can be sent to:

StarLoop Operated by Elisha Lim, sole proprietor Email: starloop.admin@gmail.com