Privacy Policy

Effective date: March 10, 2026

StarPrepare is an AI-powered interview preparation app operated by BayGull AI. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Information

When you create an account, we collect your email address and assign a user ID through Firebase Authentication.

Resume Data

When you upload a resume, the original file is stored in your account in Cloud Storage and the extracted text is stored in Firestore. Resume data is retained until you delete it. When generating STAR responses, resume content is also sent to the OpenRouter LLM API for processing.

STAR Sessions and Content

All STAR responses, follow-up questions, answers, and revision history generated through the app are stored in your account in Firestore. This includes AI-generated content, your feedback on revisions, and version history. Session data is retained until you delete it or delete your account.

Device Identifiers

We generate a per-device identifier (e.g., ios-{UUID} or web-{UUID}) stored locally on your device. This identifier is sent with sync requests and stored alongside your sessions in Firestore to support multi-device synchronization.

Usage Data

We collect analytics data through PostHog, including your user ID, LLM usage metrics (such as token counts, model used, and generation types), and optionally your email and display name if you opt in to enhanced analytics.

Purchase Data

If you make in-app purchases, RevenueCat processes your purchase history and associates it with your user ID.

Crash and Performance Data

We use Sentry to collect crash reports, performance traces, structured logs, and your user ID to diagnose issues and improve app stability.

2. How We Use Your Information

Provide the service — generate STAR responses, follow-up questions, and revisions based on your resume and input.
Store your data — persist resumes, sessions, and revision history so you can access them across devices.
Sync across devices — use device identifiers to synchronize your data between your iPhone and web browser.
Improve the app — analyze usage patterns and LLM metrics to enhance features and user experience.
Process payments — manage subscriptions and in-app purchases through RevenueCat.
Diagnose crashes — identify and fix bugs using crash and performance data collected by Sentry.

3. Third-Party Services

We use the following third-party SDKs and services:

Service	Data Collected	Purpose	Privacy Policy
Firebase (Auth & Firestore)	Email address, user ID, session data, resume text	Authentication, data storage, sync	Firebase Privacy
Sentry	Crash data, performance traces, logs, user ID	Crash reporting, performance monitoring, logging	Sentry Privacy
PostHog	User ID, LLM usage metrics, email and display name (opt-in)	Analytics	PostHog Privacy
RevenueCat	Purchase history, user ID	In-app purchases, subscriptions	RevenueCat Privacy
OpenRouter	Resume content, interview questions (transient)	LLM processing for STAR responses	OpenRouter Privacy
Langfuse	LLM operational metadata: user ID, session ID, token counts, model name, generation latency. Prompt/completion content is redacted before transmission.	LLM observability and monitoring	Langfuse Privacy

4. Data Retention

Account data — retained while your account is active. When you delete your account, your authentication record and user profile are removed.
Resume data — stored in your account until you delete individual resumes or your account. Original files are stored in Cloud Storage; extracted text is stored in Firestore.
STAR sessions — stored in your account until you delete individual sessions, archive them, or delete your account. Archived sessions are automatically purged after 30 days.
Crash and performance data — retained in Sentry for 90 days from collection, after which it is automatically purged.
Analytics data — retained in PostHog for 12 months from collection, after which it is automatically purged.
LLM monitoring metadata — retained in Langfuse for 90 days, after which it is automatically purged.
Beta accounts — Data associated with beta accounts that have not graduated to a regular account will be deleted 60 days after the beta period ends, consistent with the right-to-erasure provisions of CCPA § 1798.105 (US), PIPEDA Principle 5 (Canada), and DPDP Act 2023 § 8(7) (India). Users are notified by email 14 days before deletion.
Purchase data — retained by RevenueCat as required for transaction records and subscription management.

5. iOS App Availability

The StarPrepare iOS application is distributed through the Apple App Store and its availability may be limited to certain countries depending on Apple's distribution settings. The web application at starprepare.com is available wherever Firebase and Google Cloud services are accessible. Residents of specific jurisdictions have additional rights described in sections 7–9 below.

6. Your Rights

Delete your account — you can delete your account and associated data at any time by visiting /delete-account.
Delete your content — you can delete individual resumes, sessions, and archived conversations from within the app at any time.
Request data export — contact us at hello@starprepare.com to request an export of your data.
Opt out of analytics — you can opt out of PostHog analytics collection within the app settings.

7. California Residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act, including:

Right to know — request details of the personal information we have collected about you.
Right to delete — request deletion of personal information we have collected (see §6).
Right to correct — request correction of inaccurate personal information.
Right to opt out of sale/sharing — we do not sell personal information. We do not share personal information for cross-context behavioural advertising.
Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes beyond those strictly required to provide the service.

To exercise these rights, contact hello@starprepare.com. We will not discriminate against you for exercising your rights.

8. Canadian Residents (PIPEDA & Quebec Law 25)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act and, in Quebec, An Act respecting the protection of personal information in the private sector. These include:

Access — request access to your personal information.
Correction — request correction of inaccurate or incomplete information.
Withdrawal of consent — withdraw consent for collection, use, or disclosure of personal information where applicable.
Complaint — file a complaint with the Office of the Privacy Commissioner of Canada.

Our privacy officer can be reached at hello@starprepare.com.

9. Indian Residents (DPDP Act 2023)

Residents of India have rights as Data Principals under the Digital Personal Data Protection Act 2023, including:

Access — obtain a summary of personal data processed and processing activities.
Correction and erasure — request correction, completion, updating, or erasure of your personal data.
Grievance redressal — raise a grievance through the app support flow or email.
Nomination — nominate another person to exercise your rights in the event of death or incapacity.

To exercise these rights, contact hello@starprepare.com.

10. Children's Privacy

StarPrepare is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@starprepare.com and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and notify you through the app. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

hello@starprepare.com