Privacy Policy

Short version

Constellations is built for private personal tracking. We do not sell personal data, run ads, or use user data for ad tracking.

This policy applies to the Constellations web app, iOS app, and Android app.

Who we are

Neburose operates Constellations and is responsible for the data described here.

Questions or requests can go to admin@neburose.org.

Information we collect

• Account information, such as email, username/display name, login provider, and account IDs.
• Information you add to the app, including member/part information, descriptions, journals, board posts, chat logs, tags, custom fields, privacy bucket settings, and tracking content.
• Information from connected services when you choose to connect or sync them.
• Passive technical information that helps us operate and secure the app, such as cookies, IP/location information, browser or session information, diagnostics, and notification delivery data.
• Support or payment-related information when needed. Payment card details are handled by the payment provider or app store, not by us.

How we use information

• To provide the app, sign you in, save your data, sync with services you connect, and send notifications you enable.
• To provide support and manage paid or supporter-only access where applicable.
• To keep the service secure, diagnose bugs, prevent abuse, and understand whether core features are working.
• To make internal product decisions using aggregate or non-identifying usage patterns where possible.

Storage and security

Because the app may contain sensitive or health-related personal information, we use reasonable technical and access controls for the size and purpose of the service. Only people who need access to run or support the service should access production data.

No internet service can promise perfect security. If we learn of a security incident that affects your personal data, we will handle notice according to applicable law.

Sharing information

We share data only as needed to run the service, comply with law, handle abuse, or provide features you choose.

That can include hosting/database providers, email delivery, login providers, push notification services, payment providers, and the connected services you choose to use.

If you connect PluralKit, Simply Plural, Octocon, Discord Rich Presence, Apple notifications, or Google/Android notifications, data needed for that feature may be sent to that service.

Friend access and privacy buckets

Constellations includes friend and role-based sharing features. If you grant a friend permission, that friend may be able to view the parts of your account covered by that permission, such as member/part profiles, descriptions, front status, journals, board posts, chat logs, tags, custom fields, notes, relationships, or other shared content.

Privacy buckets are intended to limit which parts or fields a friend can see. Some permissions are labeled as "View all" permissions. Those permissions bypass privacy bucket restrictions for the content type they describe, such as viewing all parts, all tags, all custom fields, all board posts, or all chat logs.

Board and chat log access is read-only unless a separate permission allows action. A friend who can view board posts or chat logs cannot necessarily send messages, reply, or otherwise communicate through those areas.

If you remove a friend or change permissions, future access through the app should stop or change. Content someone already viewed, remembered, screenshotted, exported, or otherwise copied may remain outside our control.

Messages from us

We may send account, security, support, or service-related messages. If we ever send optional announcement or marketing emails, you can opt out by using the unsubscribe option or contacting us.

Access, export, and deletion

• You can export your account data from the app.
• You can delete your account from the app.
• You can remove provider tokens or disable optional features such as push notifications and Discord Rich Presence.
• You can contact admin@neburose.org to ask about access, correction, portability, deletion, or other privacy requests.

Retention

Account data is kept while your account exists. Deleting your account removes account-scoped data from the active service.

Performance and error logs are kept for a limited debugging window. Backups you download are your responsibility after export.

Children and minors

Constellations is not directed to children under 13. If we learn that we collected personal information from a child under 13 without appropriate consent, we will take steps to delete it or handle it as required by law.

Changes

We may update this policy as the app changes. The latest version will be posted here with the updated date above.