Privacy Policy
Last updated: July 4, 2026
This Privacy Policy explains how Stelesy ("Stelesy," "the App," "we," "us") collects, uses, stores, and shares your personal data when you use our mobile application and related services (together, the "Service").
Stelesy is currently developed and operated by an individual person rather than a registered company. Please read this Policy carefully before using the Service.
1. Who Is Responsible for Your Data
The data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and other applicable data protection laws is Mukola Maneilo, the individual operator of Stelesy.
Contact email: [email protected]
2. Age Requirement
You must be at least 16 years old to use Stelesy. The age provided when you create an account is self-declared. We do not verify it through identity documents, and you are responsible for providing accurate information.
If we learn or reasonably believe that an account belongs to someone under 16, we may suspend or delete the account and handle its data as described in Sections 8 and 12.
3. Personal Data We Collect
- Account and profile data: sign-in details received from Google, contact and profile information, age, language preferences, timezone, avatar, and account settings.
- Learning and AI interaction data: exercises, answers, messages, generated feedback, learning progress, preferences, and related activity.
- Analytics and diagnostics: how you use the Service, performance information, crash reports, error reports, and operational logs.
- Device and notification data: device and app information, notification tokens and preferences, and notification delivery or engagement information.
- Social feature data: profile information you make visible, connections with other users, activity summaries, and rankings.
- Subscription data: subscription, entitlement, purchase-validation, promotion, and referral information. Payment card details are handled by the relevant app store, not by Stelesy.
- Support data: messages, contact details, feedback, and context you provide when requesting support or reporting a problem.
4. How We Use Your Data
We use personal data to:
- Create, authenticate, maintain, and secure your account.
- Provide and personalize learning, AI, social, notification, and subscription features.
- Track learning progress and operate the Service.
- Analyze, troubleshoot, protect, and improve the Service.
- Respond to support requests and feedback.
- Prevent fraud, abuse, unlawful activity, and violations of our Terms of Service.
- Comply with legal obligations and enforce our agreements.
5. Legal Bases for Processing
Where the GDPR applies, we process personal data when:
- Processing is necessary to perform our contract with you and provide the Service.
- It serves our legitimate interests in operating, securing, understanding, and improving the Service, provided those interests are not overridden by your rights.
- You have given consent, which you may withdraw at any time.
- Processing is necessary to comply with a legal obligation.
6. AI Processing
Stelesy uses OpenRouter to route submitted content to underlying AI model providers for features such as evaluation, translation, explanations, and learning assistance. OpenRouter and those providers process submitted content under their own terms and privacy practices. We do not make guarantees about their retention of submitted content or its use for model training or improvement.
Do not submit sensitive personal data that is unnecessary for learning, and do not attempt to manipulate, bypass, or misuse the AI systems.
7. How Long We Keep Your Data
We retain account and learning data while needed to provide the Service, satisfy legal obligations, resolve disputes, or enforce our agreements. Retention periods may vary by data type and purpose.
Account deletion affects data as described below. We may retain records where required by law, including financial records, and may retain anonymized information that no longer identifies you.
8. Account Deletion
You can delete your account directly in the app:
Other → Account → Delete account
Follow the confirmation steps shown in the app. After confirmation, the account can no longer be accessed from your side. When account deletion is completed:
- We remove direct identifiers tied to you (such as your name and linked sign-in information) and delete your avatar image.
- We revoke any registered push notification devices and cancel future scheduled notifications.
- Your account is removed from public visibility — profiles, search, follow relationships, activity feeds, and leaderboards.
However, certain records may be retained where needed for legal, security, analytical, statistical, or product-improvement purposes. Where retained for analytics, statistics, or product improvement, those records are kept in a form that is no longer tied to your visible account or direct identifiers.
Deleting your Stelesy account does not cancel your subscription. If you subscribed through Google Play, you must cancel the subscription yourself in Google Play to stop future renewal charges.
Account deletion cannot be undone from your side. You can also request account deletion outside the app by emailing us at [email protected]. We monitor this mailbox for deletion requests and review and complete account deletion within 24 hours after we have enough information to identify the Stelesy account.
9. Service Providers and Data Sharing
We use providers that process data for us or interoperate with the Service, including:
- Google, including Google Sign-In and Firebase, for authentication, analytics, diagnostics, and notifications.
- OpenRouter and the AI model providers to which it routes requests, for AI-powered features.
- Cloudflare for security and access protection.
- RevenueCat for subscription entitlement management.
- Google Play and the Apple App Store for purchases, billing, renewals, refunds, and cancellations.
- Hosting, database, storage, content-delivery, and media-processing providers needed to operate the Service.
We share only the data reasonably needed for these purposes. We may also disclose data when required by law, to protect rights or safety, or in connection with a lawful transfer of the Service. We do not sell your personal data.
10. International Data Transfers
Some providers may process data outside your country, including outside the European Economic Area. Where required, we rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.
11. Your Rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal data; receive portable data; withdraw consent; and lodge a complaint with a supervisory authority. These rights may be subject to legal exceptions.
To exercise a right, contact [email protected]. We will respond within the period required by applicable law.
12. Underage Users
If we discover that an account belongs to someone under 16 years old, we will delete or anonymize the associated account and personal data, consistent with Section 8. If you believe a child under 16 is using Stelesy, please contact us at [email protected].
13. Data Security
We use reasonable technical and organizational measures designed to protect personal data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
14. Changes to This Policy
We may update this Privacy Policy as the Service or legal requirements change. We will update the "Last updated" date and, where changes are significant, make reasonable efforts to notify you through the Service or other available means.
15. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact:
Mukola Maneilo
[email protected]