The controller of your personal data is:
We have not appointed a data protection officer. For all questions relating to privacy, personal data, data subject rights or security, you can contact us at support@stellarxlab.com.
This Privacy Policy explains how we process personal data of Vellme app users, people who contact us, and visitors of Vellme informational pages, including the /privacy and /terms pages.
Vellme is an affirmation, journaling and mood-tracking app. Vellme is not a medical, therapeutic or diagnostic service.
When you create an account or sign in, we may process:
When using the app, you may voluntarily provide:
In connection with Premium plans, we may process:
Payments are handled by Apple App Store or Google Play. As a rule, we do not receive full payment card details.
To operate the app and maintain security, we may process:
If you contact us, submit a complaint or request data export or deletion, we may process the contents of your message, contact details, support history and other information needed to handle the request.
If you subscribe to our newsletter, we process your email address and information about the status of your newsletter subscription.
If you visit our informational website or legal pages hosted under stellarxlab.com, our hosting provider and we may process standard server logs such as IP address, request date and time, URL, browser information and other data required for security and service operation.
We obtain data:
We process data to create and maintain your account, enable sign-in, store your user content, synchronize data and provide app functionality.
Legal basis: GDPR Article 6(1)(b), performance of a contract for the supply of a digital service.
We process subscription data to activate or verify Premium access, resolve subscription issues and synchronize plan status.
Legal basis: GDPR Article 6(1)(b).
We process technical and diagnostic data to keep accounts secure, detect abuse, diagnose failures, manage push delivery and improve service stability.
Legal basis: GDPR Article 6(1)(f), our legitimate interest in ensuring security, integrity and reliability of the service.
We may process app usage data to understand how features are used, measure stability, improve UX and develop the product.
Legal basis: GDPR Article 6(1)(f), and where consent is required by applicable law or implementation model, GDPR Article 6(1)(a).
If you subscribe to the newsletter, we process your data to send marketing information about Vellme.
Legal basis: GDPR Article 6(1)(a), your consent. You may withdraw that consent at any time.
We process data to answer requests, handle complaints, comply with privacy rights requests and communicate with you about your account or the service.
Legal basis: GDPR Article 6(1)(b), (c) or (f), depending on the nature of the request.
We may process data to comply with accounting, tax or legal obligations and to establish, defend or pursue claims.
Legal basis: GDPR Article 6(1)(c) and (f).
We use external providers. Depending on the provider and service, they act either as our processors or as independent controllers for their own services.
Upon request, we may provide more specific information about the providers currently used.
We may disclose data to public authorities, courts, law firms, accountants, auditors or other authorized recipients where required by law or necessary to protect our rights.
Some providers may process data outside the EEA, especially in the United States. Where this happens, we rely on appropriate safeguards such as:
We retain personal data for no longer than necessary for the purposes described above, unless a longer period is required by law or necessary for claims handling.
Subject to applicable law, you have the right to:
In Poland, the supervisory authority is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
You can send privacy requests to support@stellarxlab.com. Where reasonably necessary for security, we may ask you to verify your identity.
If you request a copy or export of your data, we may fulfill that request through in-app tools, backend tools, database export or dedicated server-side functions.
We respond to privacy rights requests without undue delay and, as a rule, within 1 month of receipt. Where the request is particularly complex or we receive a higher number of requests, this period may be extended by up to a further 2 months, in which case we will inform you as required by law.
If you subscribe to the newsletter, you can unsubscribe at any time through the unsubscribe link or by contacting us. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
Where we process personal data for direct marketing on the basis of our legitimate interests as permitted by law, you also have the right to object to that processing.
We only send push notifications if you grant the necessary device permissions. You can withdraw that permission or turn off notifications in your device settings at any time.
We use appropriate technical and organizational measures to protect personal data, including access controls, transport encryption, authentication mechanisms, security logging and need-to-know access restrictions.
However, no Internet transmission or storage method can be guaranteed to be completely secure.
If a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you where required by law.
Vellme is intended for users aged 16 and older. If we learn that we are processing data of a younger person in violation of law or our rules, we will take steps to delete that data.
We may update this Privacy Policy from time to time, especially in response to legal, technical, product or organizational changes. The current version will always be published at the same address together with the last updated date. If the changes are material, we may also notify you by email or in the app.