StarCardLegal
All legal documents

Privacy Policy

Effective July 30, 2026 · Version 2026-07-30 · Everyone who uses StarCard

This document is a draft prepared for review and is not legal advice. It should be reviewed by a licensed attorney before it is relied upon.

This Privacy Policy explains how Summit Studio LLC, which operates the StarCard program ("StarCard," "we," "us," or "our"), collects, uses, and shares information about you when you use the StarCard mobile app, our websites, and related services (together, the "Services").

⚠️ Before launch, confirm this data inventory matches what the shipped build actually collects, and confirm it matches the App Store / Google Play privacy labels. Remove anything the app does not do; add anything it does.

1. Information you give us

When you create an account or use the Services, we collect information you provide directly, including:

  • Account information — your name, email address, and password. Passwords are stored only as salted hashes, never in plain text.
  • Optional profile details — such as a phone number, if you choose to add one.
  • Purchases — the fact that you bought or were gifted a membership, and the membership's status. Card and bank details are entered on our payment processor's checkout and are handled by them, not stored by us (see Section 5).
  • Support and feedback — the contents of feedback, bug reports, or messages you send us, and the email address we reply to.

2. Information we collect automatically

When you use the Services, we and our providers collect certain information automatically:

  • Location information — if you grant permission, we use your device's location to show nearby shops and to send nearby-deal alerts. See Section 6 for details and how to turn this off.
  • Device and push information — device type, operating system, app version, and, if you enable notifications, a push token that lets us deliver messages to your device.
  • Usage information — how you interact with offers and shops (for example, impressions, taps, and views), which we use to understand what's useful and to improve the Services.
  • Attribution and diagnostic information — when you install the app after tapping a StarCard link, we collect limited device and network signals (such as IP address, general device characteristics, and timing) to connect that install to the link that referred you, and we keep basic technical logs to diagnose errors and protect the Services.

3. How we use information

We use the information above to:

  • Provide, operate, and maintain the Services, including your membership and redemptions.
  • Show you relevant local shops and offers, and — if you opt in — send nearby-deal alerts and other notifications.
  • Process purchases and prevent fraud and abuse.
  • Understand usage, measure the performance of fundraising campaigns, and improve the Services.
  • Communicate with you about your account, transactions, and support requests.
  • Comply with law and enforce our terms.

4. How we share information

We do not sell your personal information. We share information only as described here:

  • Service providers — companies that run parts of the Services for us under contract, such as hosting, database, payment processing, push-notification delivery, and email delivery. They may use your information only to provide those services to us.
  • Merchants — when you redeem an offer in person, the shop sees that a valid member redeemed it. We do not share your account profile with shops for advertising.
  • Fundraising organizations — we share aggregate, non-identifying campaign results (for example, how many memberships a campaign sold) with the organization a campaign benefits. We do not share your identity with them for their own marketing.
  • Legal and safety — when we believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the Services.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
⚠️ List the actual sub-processors by name (e.g., payment, hosting, database, push, email, analytics) either here or in a linked sub-processor list, and keep it current. Some state laws require naming categories of third parties.

5. Payments

Memberships are purchased through our third-party payment processor. When you check out, your payment details are collected and processed by that provider under its own privacy policy. We receive confirmation of the transaction and limited billing details (such as a processor customer or subscription identifier and membership status) — not your full card number.

6. Location information

Location features are optional. If you allow it, we use your device location to find nearby shops and to send nearby-deal alerts, including — if you grant "always" access — while the app is in the background so alerts can reach you as you move around town. We use location for these features and do not use it to build advertising profiles.

You can turn location access on or off at any time in your device settings, and you can disable nearby alerts in the app. Turning off location may limit nearby features but does not otherwise affect your membership.

7. Push notifications

If you enable notifications, we deliver them through Apple's and Google's push services using a token tied to your device. You can turn notifications off at any time in your device settings or in the app.

8. Data retention

We keep personal information for as long as your account is active and as needed to provide the Services, then retain and dispose of it as required to meet legal, accounting, and fraud-prevention obligations. When information is no longer needed, we delete or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and hashed passwords. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your choices and rights

You can:

  • Access or update your account information in the app.
  • Turn off location access and push notifications in your device settings.
  • Ask us to access, correct, or delete your personal information by contacting starcard@summitstudio.dev. We will respond as required by applicable law.

Depending on where you live, you may have additional rights under laws such as those in California and other U.S. states — including the right to know what we collect, to request deletion, and to not be discriminated against for exercising those rights. Because we do not sell personal information, no opt-out of sale is needed.

⚠️ Confirm which state-privacy regimes apply given where members live and add the specific rights/disclosures counsel requires (e.g., CCPA/CPRA categories, sensitive-data handling for precise geolocation).

11. Children's privacy

The Services are intended for adults. StarCard accounts are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Although StarCard supports school and youth-group fundraisers, memberships are purchased and used by adults. If you believe a child has provided us information, contact us and we will delete it.

⚠️ Because campaigns benefit schools and youth teams, confirm the minimum age and COPPA/school-data posture with counsel; if minors will ever create accounts or appear in campaign content, this section and the Terms need to change.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

13. Contact us

Questions about this Policy or your information? Contact Summit Studio LLC at starcard@summitstudio.dev, or by mail at [MAILING ADDRESS — Cookeville, TN].

Privacy Policy · Effective July 30, 2026 · Version 2026-07-30