StarDM Privacy Policy
Last updated: [DATE OF PUBLICATION]
This policy explains what personal data StarDM collects, why, who we share it with, how long we keep it, and the rights you have. It applies to the StarDM Android app, the website trystardm.com, and the creator portal at trystardm.com/creator.
We have written it to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended in February 2026 ("IT Rules"). Most DPDP duties apply from 13 May 2027; we follow them from launch anyway.
1. Who we are
StarDM is run by Krishan Singhal, a sole proprietor trading as "StarDM" (we, us, our). Under the DPDP Act we are the Data Fiduciary for the personal data described here.
- Website: trystardm.com
- Registered address: SCO 113, New Grain Market, Shahbad, Haryana 136135
- Support: support@trystardm.com (placeholder)
- Grievance Officer: Krishan Singhal, krishan@riffy.pro (see section 12)
2. What StarDM is, in one paragraph
StarDM lets fans chat with AI avatars of real creators, made with those creators. Only two things are AI: the chat replies and the avatar's voice (in audio calls and voice notes, labelled "AI voice"). A creator's photos, name, bio and Instagram link are the real creator's own, uploaded by them. Creators never see fans' messages, names or phone numbers. Creators see only aggregate numbers: how many subscribers they have and what they've earned.
3. Age: StarDM is for adults only
StarDM is only for people 18 or older. We ask you to confirm your age when you sign up. We do not knowingly collect data from children (anyone under 18, as the DPDP Act defines a child). If we learn, for example from something said in a chat, that a user is under 18, we suspend the account, review it and delete the data we don't need to keep by law. If you think a child is using StarDM, write to the Grievance Officer.
4. What we collect
4.1 Fans
| Data | Where it comes from | Why we need it |
|---|---|---|
| Phone number | You, at sign-up (one-time password) | To create and secure your account. Stored by Firebase Authentication; we also keep a one-way, keyed hash of it (see "trial lock") |
| Name and optional profile photo | You | To show on your own profile. Creators don't see it |
| Age confirmation (yes/no and the time you confirmed) | You | To keep StarDM 18+ |
| Chat messages you send (text, and photos and voice notes you choose to send) | You | To deliver your messages to the AI avatar and generate replies; for safety checks |
| AI avatar replies (text and AI voice notes) | Generated by our service | To show you the conversation |
| Transcripts of your speech in fan voice notes and audio calls | Generated by speech-to-text | So the avatar can understand and reply; for safety checks |
| Avatar memory for each creator chat: a short summary of the conversation and a few facts you've shared (for example the name you like to be called, your interests, recent topics) | Generated from your chats | So the avatar remembers context. We tell the memory system not to store health, religion, finances or sexuality |
| Subscriptions and payments: plan, creator, dates, status, amounts, and a masked payment method (for example "UPI ••••@okicici" or the last 4 card digits) | You and our payment providers | To run your subscription, renewals, refunds and tax records. We never see or store your full card number or UPI PIN |
| Device and app data: an app installation ID, push-notification token, platform and app version, a keyed hash of your device identifier, and app-integrity results (Google Play Integrity / Firebase App Check) | Your device | To send notifications, keep the app secure, stop bots and abuse, and enforce one free trial per person and device |
| Usage and safety records: message and reply counts, call minutes, timing patterns, moderation results on messages, reports you file, creators you block | Generated by our service | Fair use, misuse detection, safety review, cost control |
| Crash and analytics data (Firebase Crashlytics and Analytics) | Your device | To fix crashes and improve the app. Analytics on the website runs in a consent-friendly mode |
| Support and grievance messages | You | To answer you |
4.2 Creators
| Data | Why we need it |
|---|---|
| Instagram handle and email (from the application form at /creator) | To review your application and contact you |
| Display name, bio, categories, photos you upload, Instagram link and verification status | To build your public profile |
| Interview answers, sample replies, approved persona, guardrails | To build the AI avatar persona you approve |
| Voice recordings and the voice clone (only if you sign the voice addendum) | To produce the AI voice for calls and voice notes |
| Legal name, PAN (we keep only the last 4 characters after verification), GSTIN if any, bank account or UPI ID (stored masked; held by our payout provider) | KYC, payouts, TDS and GST compliance |
| Signed agreements and consent records | To prove consent and meet legal duties |
| Aggregate earnings and subscriber counts | To show your Earnings screen. These never contain fan identities |
4.3 Website visitors
Basic logs (IP address, browser, pages visited) kept by our hosting provider for security, and analytics only as described in our cookie notice. The creator application form uses reCAPTCHA Enterprise to stop spam, and we keep a hash of your IP address with the application.
5. Why we use your data, and our legal basis
Under the DPDP Act we process personal data either with your consent or for certain legitimate uses the Act allows.
| Purpose | Basis |
|---|---|
| Creating your account, running chats, AI replies, calls and voice notes | Consent, given at sign-up through our consent notice |
| Avatar memory | Consent (you can reset it at any time; see section 9) |
| Subscriptions, payments, renewals and refunds | Consent, and performing the service you asked for |
| Safety: moderating messages, handling reports, protecting users and creators, responding to self-harm risk | Consent, and legitimate uses including responding to a medical emergency or threat to life (DPDP Act section 7) |
| One free trial per phone and device; fraud and bot prevention | Consent, and legitimate uses |
| Keeping tax, accounting and payment records | Compliance with law (DPDP Act section 7) |
| Responding to lawful requests from government or courts | Compliance with law |
| Crash reports and product analytics | Consent |
We do not sell your personal data. We do not show third-party ads. We do not use your chats to train our own or anyone else's AI models.
Withdrawing consent. You can withdraw consent at any time by deleting your account (section 9) or writing to us. Withdrawal doesn't affect processing already done, and some records must still be kept by law (section 8).
6. Who we share data with (our processors)
We share data only with service providers who process it for us under contract, and only what they need.
| Processor | What they do | Data they receive | Where |
|---|---|---|---|
| Google Firebase / Google Cloud | Hosting, database, file storage, login, notifications, crash reports | All app data | India (Mumbai, asia-south1). Some Firebase services (Authentication, Crashlytics, Analytics, Cloud Messaging) may process data outside India |
| OpenAI, L.L.C. | AI model that writes the avatar's chat replies and its spoken replies in audio calls, keeps the avatar's memory summaries, and runs the automatic safety checks on messages, photos you send, avatar replies and each call turn. Under our settings OpenAI does not store these requests for later use (store: false), does not train on them, and keeps them only up to 30 days for abuse monitoring. Chat requests carry a one-way hashed ID, never your account ID, phone number or name |
Chat text, photos you send in chat, voice-note and call transcripts, the avatar persona, memory summary. Never call audio, and not your phone number or name unless you type or say it | United States |
| ElevenLabs | Turns avatar replies into the creator's consented AI voice | Avatar reply text only | |
| LiveKit | Relays live audio for calls. Calls are not recorded | Live call audio, in transit only | |
| Sarvam AI | Speech-to-text for your voice notes and call audio | Your voice audio | India |
| Razorpay | Payments, UPI AutoPay and card e-mandates, refunds, creator payouts and KYC (RazorpayX) | Phone, payment method, amounts; for creators, PAN and bank/UPI details | India |
| Google Play | Only if you choose Google Play on Google's payment choice screen; also app distribution and integrity checks | Purchase details Google handles directly | Google's locations |
| Professional advisers (lawyer, chartered accountant) | Legal and tax advice and filings | Only what's needed, mostly creator payout and tax records | India |
Who does NOT receive your data: creators. A creator never sees your messages, name, phone number, photo or who you are. They see only counts (for example "120 Basic, 30 Pro subscribers") and their earnings.
Our safety team. A small StarDM team may review conversations that are flagged (by our automatic safety checks or by a report you file) and a small random sample of conversations, to keep the service safe and check the avatar's quality. Reviewers see a pseudonymous ID, not your phone number. Every review is logged.
Legal requests. We may disclose data where Indian law requires it, for example to a court, law enforcement agency or the Data Protection Board, and to respond to grievances under the IT Rules.
7. Transfers outside India
Some processors (OpenAI, and likely ElevenLabs and LiveKit) are outside India. Change on 5 Oct 2026: our AI model provider changed from Anthropic to OpenAI, so chat data now goes to OpenAI (United States) instead of Anthropic, and Anthropic no longer receives any data. The DPDP Act allows transfers except to countries the Government restricts by notification. We will stop or change a transfer if a destination is restricted. We use contracts requiring these providers to protect your data and to use it only to provide their service to us.
8. How long we keep data
| Data | How long |
|---|---|
| Account, profile, chats, voice notes | Until you delete your account (or we close it) |
| Audio calls | Not recorded. Call audio is streamed and discarded |
| Call transcripts | 30 days, for safety review, then deleted |
| Avatar memory (summary and facts) | Until you reset that avatar's memory or delete your account |
| Safety records (moderation results, reports, review notes) | Up to [12 months] after the event, or longer if needed for a legal claim or a law-enforcement request |
| Trial-lock hashes (a keyed one-way hash of your phone number and device identifier, plus which creator the trial was used with and when) | Kept after account deletion, so the free trial can't be claimed again by deleting and re-joining. The hash can't be turned back into your number |
| Payment, invoice and tax records | As long as tax and accounting laws require: we currently plan 8 years |
| Creator KYC and agreements | For the life of the creator relationship plus the tax-retention period above |
| Website and server logs | Up to [90 days] |
| Backups | Database backups roll off after 30 days; deleted data disappears from backups within that time |
| Inactive accounts | Under the DPDP Rules, we may erase data of accounts with no activity for the period the Rules set for our class of fiduciary, after giving you 48 hours' notice |
9. Your rights and choices
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you and how we use it, and who we've shared it with.
- Correction and completion: fix inaccurate or incomplete data. You can edit your name and photo in the app.
- Erasure: delete your data, subject to legal retention (section 8).
- Withdraw consent at any time.
- Grievance redressal: complain to our Grievance Officer, and then to the Data Protection Board of India if you're not satisfied.
- Nominate: name another person to exercise your rights if you die or become unable to. Write to us with the nominee's name and contact details.
Built-in controls:
- Reset an avatar's memory: Profile → My subscriptions → Manage → Reset this avatar's memory.
- Block a creator's avatar: long-press a message → Block.
- Notifications: Profile → Notifications.
- Delete your account: in the app at Profile → Delete account, or on the web at trystardm.com/delete-account. Deleting removes your profile, chats, voice notes and avatar memory. It cancels renewals of your subscriptions. We keep only the trial-lock hashes and the payment and tax records we must keep by law.
To use any other right, email the Grievance Officer. We may need to verify it's you (for example by an OTP to your registered phone). We'll respond within the timelines in section 12, and in any case within the time the DPDP Rules allow.
10. Security
- Data is encrypted in transit (TLS) and at rest (Google Cloud encryption).
- Messages, memory and the avatar persona are stored where only our servers can read them; app access rules are tested.
- Card and UPI details are handled by Razorpay (PCI-DSS certified); we never see them.
- Staff access is limited, needs two-factor sign-in, and is logged.
- We use App Check and Play Integrity to block bots.
No system is perfectly secure. If something goes wrong, see section 11.
11. Data breaches
If a personal data breach happens, we will:
- tell affected users without delay, in plain language: what happened, what data, the likely impact, what we're doing and what you can do;
- tell the Data Protection Board of India without delay and give a detailed report within 72 hours of becoming aware (as the DPDP Rules require);
- report to CERT-In within 6 hours where its directions apply.
12. Grievance Officer and contact
Under the IT Rules and the DPDP Act:
Grievance Officer: Krishan Singhal
Email: krishan@riffy.pro
Address: SCO 113, New Grain Market, Shahbad, Haryana 136135
- We acknowledge complaints within 24 hours.
- We resolve them within 7 days (IT Rules, as amended Feb 2026).
- Complaints about impersonation, or intimate or sexual images of a person, are acted on within 2 hours.
More detail is on our Support page.
13. Changes to this policy
If we make a material change, we'll tell you in the app and, where the law requires, ask for your consent again. The date at the top shows the latest version. Earlier versions are available on request.
14. Language
This policy is in English. Under the DPDP Rules you can ask for the consent notice in any language in the Eighth Schedule of the Constitution; we will provide Hindi at launch and others on request.