Privacy Policy
Last updated: 29 June 2026
This Privacy Policy explains how Starmy ("we", "us", "our") collects, uses, stores, and discloses your personal information, and how we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). It applies to our website, mobile application, and services (the "Service").
1. Information we collect
We collect: account details (name, email); profile and migration details you provide (e.g. visa type, occupation, points, education, English level, country, goals, timeline); content you submit, including messages to our AI assistant; usage and device data; and billing identifiers from our payment processor. We do not store full card numbers. Migration details may include sensitive information, which we collect only with your consent and only to operate features you choose to use.
2. How we use your information
We use your information to provide and personalise the Service (points estimates, EOI rankings, checklists, AI responses), manage accounts and subscriptions, communicate with you, ensure security, comply with legal obligations, and improve the Service. AI assistant messages are sent to a third-party model provider to generate responses; do not include information you do not wish to be processed.
3. Disclosure to service providers
We share data with providers who help operate the Service, under contractual confidentiality: hosting and authentication (Supabase), application hosting (Vercel), payments (Stripe), product analytics (PostHog), and AI processing (Anthropic). Some may store or process data overseas (e.g. the United States). We do not sell your personal information.
4. EOI and public data
SkillSelect EOI statistics shown in the Service are aggregate, anonymous figures sourced from public Australian Government data and contain no personal information about you.
5. Data storage and security
Data is hosted in Australia (ap-southeast-2) and protected by access controls, encryption in transit, and row-level security. No system is perfectly secure; we cannot guarantee absolute security but take reasonable steps to protect your information and notify you of eligible data breaches as required by law.
6. Retention
We keep personal information while your account is active and for as long as needed for the purposes above or as required by law. You may delete your account from settings; we then delete or de-identify your data, subject to records we must retain.
7. Your rights
You may access, correct, or request deletion of your personal information, and withdraw consent for optional processing. To exercise these rights or raise a privacy concern, email hey@starmy.com.au. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).
8. Cookies and analytics
We use cookies and similar technologies for authentication, preferences, and analytics, subject to your consent. See our Cookie Policy. You can manage cookies via your browser and consent settings.
9. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
10. Changes
We may update this Policy; material changes will be notified via the Service or email. Continued use after changes means you accept the updated Policy.
11. Contact
Privacy questions: hey@starmy.com.au.
This Policy is general information and not legal advice. Starmy recommends independent legal review for your circumstances.