Privacy Policy

1. Overview

This Privacy Policy explains what information Staira ("Staira," "we," "us," or "our") collects when you use the Staira website, application, and text-messaging service (collectively, the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described here.

2. Information You Provide Directly

• Account information: name, email address, phone number, and password (or authentication credentials) when you sign up.
• Conversation content: everything you say to Staira in the chat thread or by text message, including morning check-ins, Quick Pulse responses, and any free-text messages.
• Payment information: subscription payments are processed by our payment provider (e.g., Stripe); we do not store your full card number ourselves.
• Family & Assistant Visibility settings: if you choose to enable this feature, the identity/contact details of the person you grant permissioned access to, and your choices about what they can see.

3. Information from Connected Third-Party Services

If you choose to connect the following services, we access only what's needed to operate the features you've enabled, and only for as long as the connection remains active:

• Calendar (e.g., Google Calendar): event times, titles, and free/busy status, used to identify your fixed commitments ("stone") so Staira can size the time around them. We do not create, edit, or delete calendar events without your explicit confirmation in the chat.
• Tasks (e.g., Google Tasks, Notion, Apple Reminders): your open task items, used to populate the floating backlog Staira manages.
• Health data (e.g., Apple Health, Google Fit): sleep, movement, and workout data, used only to inform state detection and recovery suggestions. Health data is never used for advertising, sold to any third party, or shared with data brokers.
• Email (e.g., Gmail, read-only): limited scanning for mentioned deadlines, only if you enable this integration. We do not read, store, or use the full content of your email beyond identifying relevant dates you've referenced.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google integrations for advertising purposes, and we do not sell it to third parties.

4. Information Collected Automatically

We collect basic usage data (feature usage, message timing, session activity) and technical data (device type, IP address, general location) to operate and improve the Service, detect abuse, and maintain security.

5. How We Use Your Information

We use the information above to:

• Operate the core Service: state detection, gap sizing, the Peak Engine's chronotype modeling, Nightly Reflection, the Evidence Locker, and related features.
• Send messages you've opted into, through the in-app chat and, if enabled, real text messages (SMS/RCS/iMessage).
• Maintain your long-term behavioral profile ("Operating Manual") — the patterns Staira learns over time about your peak hours, recovery habits, and comeback patterns — so the Service can personalize its suggestions.
• Process payments and manage your subscription.
• Provide the permissioned Family & Assistant Visibility view, only to the extent and to the person you've explicitly authorized.
• Maintain security, prevent fraud, and comply with legal obligations.

We do not sell your personal information, and we do not use your conversation content, calendar data, health data, or email data for third-party advertising.

6. How We Share Information

We share information only with:

• Service providers: who help operate Staira on our behalf (e.g., cloud hosting and database infrastructure, our text-messaging provider, our payment processor, and the AI model provider used to generate responses), bound by confidentiality and data-use obligations.
• The person you designate: only if you enable Family & Assistant Visibility, and only the limited, high-level information you've configured them to see.
• Legal or safety reasons: if required to comply with law, enforce our Terms of Service, or protect the rights, safety, or property of Staira, our users, or others.

We do not otherwise share your personal information with third parties for their own marketing purposes.

7. Data Retention

We retain your information for as long as your account is active, since the Service's core value depends on building an accurate long-term profile of your patterns. You may request deletion of your account and associated data at any time (see Section 9); upon deletion, we will remove your personal data within a reasonable period, except where retention is required for legal, tax, or security purposes.

8. Text Messaging Data

If you opt into text messaging, we retain your phone number and message history for as long as your account remains active or until you opt out. Opting out of text messaging (by replying "STOP" or through account settings) stops future texts but does not delete your account or prior message history unless you separately request deletion.

9. Your Choices and Rights

You can, at any time:

• Disconnect any third-party integration (Calendar, Tasks, Health, Email) from Settings.
• Revoke or reconfigure Family & Assistant Visibility access.
• Opt out of text messaging while continuing to use the in-app chat.
• Request a copy of your data or request deletion of your account by contacting support@getstaira.com.

Depending on your location, you may have additional rights under applicable law (such as the right to access, correct, or delete your personal information, or to object to certain processing). We will honor valid requests consistent with applicable law.

10. Children's Privacy

The Service is not directed to, and should not be used by, anyone under 18. We do not knowingly collect personal information from children.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International Data Transfers

If you access the Service from outside the country where our servers are located, your information may be transferred to and processed in other countries, which may have different data protection laws than your own.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date, and material changes will be communicated through the Service or by email where appropriate.

14. Contact

Questions about this Privacy Policy or your data can be sent to support@getstaira.com.