Privacy Policy

Last updated: September 15, 2026.

1. Who processes your data. StarDo (the mini app and the @StarDoBot bot) is an independent service. Telegram does not own it and is not responsible for it. Contact: @StarDoSupportBot.

2. What we receive from Telegram. When you open the app, Telegram passes us your account id, name, username, profile photo, client language and theme parameters. We store the id, the name and the language; the photo is not stored - it is fetched on request and passed straight to your device. If the app crashes, it sends us a technical description of the failure - the error text, the app version and the platform - without any task content; we do not store who sent the report. If you came via a tagged link (for example, from our website), we remember the tag - to understand where people learn about us. If you came with a friend's invite, we remember who invited you: the inviter sees your name and Telegram profile photo in the app and whether you count towards their invites, and you see who invited you. Your tasks, rating and activity are never shown to anyone. Friends - whoever invited you and whoever you invited - can view your sky: only the picture, stars without titles, amounts or dates. You can turn this off in the app (Profile → “Friends can see my sky”), and you can remove anyone from your friends. Visits to the stardo.io website are counted by our own analytics system running on our servers. It does not use cookies and does not store IP addresses. It records the pages opened and buttons clicked, the referring source, country and city, language, device type, operating system, browser and screen size, and it can recognize a repeat visit only within the same month.

3. What you enter yourself. Task titles and notes, deadlines, promise amounts, projects, labels, settings, time zone. This is the content of your own affairs, and we use it only to run the service: show your list, remind you of a deadline, calculate your rating. For overall service statistics - how many tasks are created and completed on time - we use only counts and dates, never the content. Based on this data, the service records which achievements you have earned and the date each one was earned, and, for voice input achievements, counts how many tasks were created by voice - only the number, without any content.

4. Payments. Payments are made in Telegram Stars and handled by Telegram. We never receive or store card details. We keep the payment id, the amount in Stars and the date - accounting and dispute resolution require it.

5. Voice input. The feature works only with your explicit consent, which is requested before the first processing and can be withdrawn at any time: Profile → Voice input.
• Who processes it: routing - OpenRouter (USA); speech recognition - the Whisper model (OpenAI) running on DeepInfra or Groq (USA); parsing the text into task fields - Gemini (Google). The list may change; the current one is always shown here.
• Along with the transcript, the processor receives the names of your projects and labels (to sort the task) and your UTC offset (to resolve “tomorrow at ten”). Your Telegram account id is never sent - the data we send cannot be linked back to your account.
• The recording is not stored on our servers and never reaches our backups: it is processed in memory and dropped immediately.
• The transcript is kept until you confirm or decline, and no longer than an hour. Only what you confirm stays in the task.
• We forbid the processors from retaining what we send or training their models on it.

6. Notifications. The bot writes to you only about your own tasks: a reminder, a promise coming due, a payment, a subscription. No newsletters, no ads.

7. Retention. Tasks, projects and labels - until you delete them or delete your account. A voice transcript - up to one hour. Payment records - as long as financial accounting requires. A sky image you share - up to one hour. It does not show your name or photo. Telegram retrieves it by a random link for a story, a message or a download. Earned achievements and the count of tasks created by voice - until you delete your account.

8. Deletion. In the app: Profile → Delete account. Tasks, projects, labels, history and your name are deleted. A service record stays linked to your Telegram id: your honor rating, whether you have used the free trial, whether you have completed onboarding, and your invite count. It exists so the rating cannot be reset by registering again, and it comes back to you if you return. Payment records remain, anonymized. If you want the service record deleted too, write to us.

9. Who else sees the data. Nobody except those without whom the service cannot run: Telegram (message delivery and payments), the voice processors listed in §5 (only for voice input and only with your consent), and our hosting provider (servers in the European Union). We do not sell data and do not pass it to advertisers.

10. Security. Task content - the title and the note - is stored encrypted in the database (AES-256-GCM), with the key kept separately from it. The connection to the server is encrypted (HTTPS). The database is not reachable from the internet. Backups are encrypted and stored separately from the key. Server access is by key only, no passwords. Task content never appears in service alerts or logs.

11. Your rights. Get a copy of your data (on request via support), correct it in the app, delete your account, withdraw consent for voice input, or ask us anything about processing: @StarDoSupportBot. If you are in the European Union, GDPR rights also apply, including the right to complain to your national supervisory authority.

12. Age. The service is not intended for children under 16. If you are younger, use it only with your parents' consent and do not make payments.

13. Changes. We may update this policy. Significant changes will be announced in the bot. The date of the last update is shown at the top.