Privacy policy

Armaria Inc., a company registered in Canada, runs Stella Systema and decides how your data is used (the "controller" under the GDPR). Privacy contact (our data protection officer): privacy@getarmaria.com.

• We store what you put into the app so the app can work for you. Nothing else.
• No ads. No analytics. No tracking. We never sell your data, and we never share it with anyone for their own marketing. We email you news and offers only if you tick the box for it when you create your account, and every one of those emails has an unsubscribe link.
• You can download all your data and delete your account at any time, in Settings.

Data	Why	Legal basis (GDPR)
Your email address and password (the password is stored only as a secure hash)	To create your account and let you sign in	Contract — needed to give you an account (Art. 6(1)(b))
What you enter in the app: your name, goals, actions, logs, levels, settings	To run the app and keep your record across devices	Contract (Art. 6(1)(b))
Your answer to "Send me news and offers from Armaria Inc." (yes or no) and the day you gave it	To email you news and offers about Stella Systema and Armaria Inc.'s other products, only if you said yes, and to keep a record of your choice	Consent (Art. 6(1)(a)); keeping the record of your answer: legitimate interest in showing what you chose (Art. 6(1)(f))
Community spaces you choose to join: your display name, the stats you choose to share, reports and blocks	To show your shared stats to the members of that space, and to keep spaces safe	Contract (Art. 6(1)(b)); safety: legitimate interest (Art. 6(1)(f))
Technical logs kept by our hosting providers (for example your IP address and the time of a request)	To deliver the site and keep it secure	Legitimate interest in running a secure service (Art. 6(1)(f))

An email address is required: the app is used only with an account.

We make no automated decisions about you with legal or similarly significant effects. Levels, EXP and ranks are game mechanics, not assessments of you.

The app keeps these things in your browser's storage (localStorage). They stay on this device, and none of them is used for ads or tracking:

• your sign-in session, so you stay signed in;
• a copy of your account's record, so the app opens at once and keeps working through a dropped connection; it is cleared when you sign out or delete your account;
• a workout in progress (its sets and timer), so reloading the page does not lose it;
• your progress through the app's guides;
• while a guide shows the example account, your own record, set aside here and put back when the guide ends;
• which of the System's notices you have already seen (a title earned, your class), so each one shows once;
• your display choices: the colour theme and the order of your circles' tabs;
• for a moment after you create your account, the day you answered the two sign-up boxes, until your account's record takes them;
• a record left on this device by an earlier version of the app that could be used without an account, if there is one: it never leaves your device until you create an account, when it is moved into your account.

The app also keeps a copy of its own files (code, fonts and images, no personal data), so it loads quickly and works offline.

In the phone apps, reminders are off until you turn them on; they are scheduled on your phone from your own schedule, and nothing about them is sent to us.

We set no advertising or tracking cookies. The fonts are served from our own site, not from a third party.

• Supabase — stores your account and your app data. Our database is located in the United States (us-east-1).
• Vercel — hosts and delivers the website, worldwide.
• Zoho Corporation — handles the email you send us and our replies (for example to privacy@getarmaria.com or support@getarmaria.com). Our mailbox is stored in Zoho's Canadian data centres.

All three act only on our instructions. Transfers of personal data to the United States, including from the EU, the UK and Switzerland, are covered by the European Commission's Standard Contractual Clauses (with the UK Addendum) and, for Vercel, the EU-U.S. Data Privacy Framework.

If you open a community's Discord link, you leave the app; Discord's own privacy policy applies there.

As long as you have an account. When you delete your account (Settings › Data › Delete my account and data), your account, your record and your memberships are deleted from our database at once. We keep only: the name of a circle you created while it still has members; goal or skill names you shared into a circle that still has members, with no link to you; and reports other members filed that mention you, for the community's safety. Copies in our hosting provider's backups expire within 7 days. Hosting logs are kept for the providers' short standard periods. How to delete your account.

You can: see and download your data (Settings › Data › Export) · correct it (edit it in the app) · delete it (Settings › Data) · stop our news and offers at any time (the unsubscribe link in any of those emails, or write to privacy@getarmaria.com) · ask us to restrict or object to processing · take your data elsewhere (the export is a standard JSON file). For anything you cannot do in the app, write to privacy@getarmaria.com; we answer within one month.

You can also complain to a data protection authority — in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca); in the EU, the authority of the country you live in; in the UK, the Information Commissioner's Office (ico.org.uk).

You must be at least 16 years old on the day you create your account. If we learn that an account belongs to someone under 16, we delete it.

Stella Systema is not offered in Europe (including the European Union, the United Kingdom and Switzerland), Turkey, Russia, China, Vietnam or the Canadian province of Quebec, or anywhere our US service providers may not operate (such as Iran, North Korea, Cuba and occupied Crimea). Sign-up from those places is refused: no account is created and nothing you typed is kept.

We do not track you across other websites and allow no third party to. A browser's "Do Not Track" signal therefore changes nothing here.

The app is not a medical or health service. What you log (for example a workout, sleep or a habit you are breaking) is used only to run the app for you, never to infer anything about your health. Some of it may count as sensitive data in some countries; you choose what to log, and you can delete any of it at any time.

Canada. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Japan. Your data is stored in the United States, which has no comprehensive federal privacy law; our providers protect it under data processing agreements with safeguards equivalent to the APPI. On request we give you the details of those safeguards.

South Korea. Data transferred abroad: your email, password hash and app data; to the United States; when you use the app, over encrypted connections; to Supabase, Inc. (storage) and Vercel Inc. (hosting); to run the app; kept until you delete your account. The transfer is necessary to provide the service; if you do not want it, do not create an account; you can delete your account, and with it your data, at any time.

India. Our grievance contact is privacy@getarmaria.com. On request we provide this notice in another language listed in the Eighth Schedule of the Constitution.

Singapore, the Philippines, Taiwan. Your data is transferred to the United States under contracts that give it comparable protection. You can reach our data protection officer at privacy@getarmaria.com.

If this policy changes, the new version is posted here with a new date, and a meaningful change is announced in the app before it applies.