Privacy Policy

See Stella Pty Ltd (ACN 669 216 924) ("Stella", "we", "us", "our") operates the Stella application and related services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information — including sensitive biometric and health data — in accordance with the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), and applicable US state privacy laws including the California Privacy Rights Act (CPRA), the Washington My Health My Data Act (WA MHMD), Nevada SB370, Connecticut CPA, and Colorado SB24-205.

Overview

Stella is a skin measurement application. When you use Stella, your phone camera reads signals from your skin and generates scores across a range of metrics. This policy describes what data we collect in that process, why we collect it, who we share it with, and what rights you have over it.

By using Stella, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the app.

Information We Collect

Biometric and Skin Data

When you scan using Stella, we process visual data captured by your phone camera to generate skin scores. This includes data points across categories such as sensitivity, clarity, tone, pigmentation, aging markers, texture, and eye area. This constitutes biometric or consumer health data under applicable laws.

Health and Wellness Data

If you choose to connect third-party health platforms (such as Apple Health, Fitbit, Oura, Whoop, or Samsung Health), we may receive data including sleep metrics, heart rate variability, stress indicators, and menstrual cycle information. This data is used to contextualise your skin scores. You control which integrations you enable and can disconnect them at any time.

Account Information

To create and maintain your account, we collect your name, email address, and password (stored in encrypted form). We may also collect optional profile information such as age range and skin type to help calibrate your baseline.

Routine and Product Data

If you use the routine tracking feature, we collect information about skincare and wellness products you add to your profile. This is used to generate your weekly report and correlate product use with your skin scores over time.

Device and Usage Data

We automatically collect information about how you interact with the app, including your device type, operating system, app version, session activity, and feature usage. This helps us improve performance and resolve issues.

Communications

If you contact us directly — including through the founder contact form — we retain your name, email address, and the content of your message. We use this to respond to your enquiry and improve our service.

How We Use Your Information

We use the information we collect to:

• Generate and deliver your skin scores and weekly reports
• Build your personal skin baseline and track changes over time
• Connect health and routine data to contextualise your scores (where you have consented to integrations)
• Maintain and improve the accuracy and functionality of the app
• Send you product updates, notifications, and reports (you can opt out at any time)
• Respond to support requests and direct communications
• Comply with legal obligations

We do not use your personal or biometric data to make automated decisions that produce legal or similarly significant effects.

When We Share Your Information

Service Providers

We share data with trusted third-party providers who help us operate Stella, including cloud hosting, analytics, and communications infrastructure. These providers are contractually required to protect your data and may not use it for their own purposes.

Aggregated Research

We may use anonymised, aggregated data — data that cannot reasonably identify you — to improve Stella's measurement accuracy and for internal research. This data is never sold and does not identify individual users.

Legal Requirements

We may disclose your information if required to do so by law, regulation, or a valid legal process, or to protect the rights, property, or safety of See Stella Pty Ltd, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the acquiring entity. We will notify you of any such change and your rights in relation to it.

We do not sell your personal or biometric data. We do not sell, rent, or trade your personal information or biometric data to third parties for their own marketing or commercial purposes.

Cookies and Tracking

The Stella app does not use browser cookies. Our website may use essential cookies necessary for basic functionality, and analytics cookies to understand how visitors use our site. You can control cookie preferences through your browser settings.

We do not use cross-site tracking technologies or sell data collected through tracking to third parties.

International Data Transfers

Stella is operated from Australia. If you access the app from outside Australia, your data may be transferred to and processed in Australia or other countries where our service providers operate. We take steps to ensure appropriate data protection measures are in place for any international transfers, consistent with Australian Privacy Principle 8.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Anonymised aggregated data derived from your scans may be retained indefinitely for the purpose of improving measurement accuracy.

Your Privacy Rights

Australia (Privacy Act 1988 / APPs)

Under the Australian Privacy Act, you have the right to access the personal information we hold about you, request corrections to inaccurate or incomplete information, make a complaint about how we handle your information, and opt out of direct marketing communications.

California (CPRA)

California residents have the right to know what personal information we collect, use, disclose, or sell; the right to delete personal information; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information (we do not sell); the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising these rights.

Washington (My Health My Data Act)

Washington residents have the right to confirm whether we collect consumer health data, access that data, withdraw consent for collection, delete consumer health data, and obtain a list of third parties with whom we have shared health data.

Nevada, Connecticut, and Colorado

Residents of Nevada, Connecticut, and Colorado have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of certain uses of their data. Please contact us to exercise any of these rights.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at privacy@seestella.co. We will respond within the timeframes required by applicable law (generally 30–45 days). We may need to verify your identity before processing your request.

Children's Privacy

Stella is not intended for use by children under the age of 13, or under the age of 16 where required by applicable law. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly. If you believe a child has provided us with their data, please contact us at privacy@seestella.co.

Security Measures

We implement industry-standard security measures to protect your personal and biometric data, including encryption in transit and at rest, access controls and authentication requirements, regular security assessments, and incident response procedures.

While we take reasonable steps to protect your information, no security system is impenetrable. In the event of a data breach that is likely to result in serious harm, we will notify affected users and relevant authorities as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email, and update the "Last updated" date at the top of this page. Your continued use of Stella following notification of changes constitutes your acceptance of the updated policy.