Privacy Policy

Last updated: 28 June 2026

StarFace is a beauty-camera, AR-filter, short-video, and social app published by Hatchify Pty Ltd, a company based in Australia ("Hatchify", "we", "us", "our"). This Privacy Policy explains what information we collect when you use the StarFace mobile app and our website at www.starface.mobi (together, the "Services"), how we use it, who we share it with, and the choices and rights you have.

By using StarFace you agree to the practices described here. If you do not agree, please do not use the Services. This policy should be read alongside our Terms of Service and Child Safety Standards.

1. Information we collect

We collect the minimum information needed to provide StarFace. The table below mirrors our App Store privacy label. Everything we collect is used only for App Functionality, is linked to your account, and is not used for tracking you across other companies' apps or websites.

We do not collect contact lists, precise location, browsing history, financial information, or health data through StarFace. Subscription and AI-credit purchases are processed by the Apple App Store or Google Play under their own terms — we don't receive or store your card details.

2. How we use your information

We use the information above to:

• Provide the app — let you capture, edit, and save photos and short videos, apply beauty and AR filters, and generate AI portraits.
• Create and manage your account — register you, authenticate sign-in, and keep your profile and settings.
• Power social features — show your profile and feed, publish 24-hour stories, deliver comments, likes, and follows, and route direct messages (including filtered photos and videos you send).
• Keep StarFace safe — operate moderation, detect and act on abuse, spam, or content that breaks our rules, and respond to reports made to safety@starface.mobi.
• Provide support and improve the Services — respond to your questions, fix bugs, and maintain reliability and security.
• Comply with the law — meet legal obligations and enforce our Terms of Service.

We do not use your personal data for third-party advertising, and we do not build advertising profiles about you.

3. On-device face processing

StarFace's live beauty adjustments and AR face filters run locally on your device. The processing that detects and tracks your face for these effects happens on your phone in real time.

• Raw face landmarks (the geometric points used to position effects) are not stored and not uploaded to our servers unless you explicitly opt in to a feature that requires it.
• There is no "beauty score" — we do not rate, rank, or grade your appearance.
• We do not modify your race or ethnicity by default. Effects are cosmetic adjustments you choose to apply.
• What you choose to save or post — a finished photo or video with effects baked in — becomes User Content and is handled as described in this policy.

4. How information is shared

We do not sell your personal data, and we never have. We share information only in these limited ways:

• Service providers (processors). We use Supabase as our backend processor for hosting, authentication, and storage — your account data lives in a Postgres database, sign-in is handled by Supabase Auth, and your media is kept in private, owner-scoped storage. Supabase processes data on our instructions and is bound to protect it.
• Other users. Content you post publicly (profile details, feed posts, stories, comments) is visible to others according to your settings, and content you send in direct messages is visible to the recipients you choose. Please think before you share.
• Legal and safety disclosures. We may disclose information if required by law, to respond to valid legal process, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Hatchify.
• Business transfers. If Hatchify is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

5. Data retention & deletion

We keep your information only as long as your account is active or as needed to provide the Services, and for any period required to meet legal, security, or dispute-resolution obligations.

• Delete individual media. You can delete any photo, video, story, or message you've created at any time from within the app.
• Delete your account. You can delete your entire StarFace account at any time in Settings → Account → Delete account. This removes your profile and associated content from our active systems; residual copies in backups are purged on our routine backup cycle.
• Need help? If you can't access the app, email privacy@starface.mobi and we'll help you delete your data.

6. Security

We take reasonable technical and organisational measures to protect your information, including:

• Encryption in transit — data moving between the app and our backend is protected with TLS/HTTPS.
• Row-Level Security (RLS) — database access policies restrict each record so you can only reach your own data.
• Owner-scoped storage — your media is kept in private storage buckets accessible only to you and the people you share with.
• Access controls — internal access to systems is limited to what's necessary to operate and support the Services.

No method of transmission or storage is ever completely secure, so we can't guarantee absolute security — but we work to protect your data and to address issues promptly.

7. Children

StarFace is intended for users aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has created an account, we will disable it and delete the associated data. For more detail on how we keep younger users safe, see our Child Safety Standards. If you believe a child under 13 is using StarFace, please contact safety@starface.mobi.

8. Your rights and choices

Wherever you live, you can review and update your profile, manage your privacy choices in Settings, delete your media, and delete your account. In general, you have the right to access, correct, delete, and export your personal information. Depending on where you live, you may have additional rights:

Australia — Privacy Act 1988

We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You can request access to and correction of your personal information, and you may complain to us and, if unsatisfied, to the Office of the Australian Information Commissioner (OAIC).

European Union & United Kingdom — GDPR

If you're in the EU or UK, you have rights under the GDPR (and UK GDPR), including the rights to access, rectify, erase, restrict, and object to processing, and to data portability. Our lawful bases are typically performance of our contract with you (to provide the Services), our legitimate interests (to keep the Services safe and functional), your consent (for optional features such as opt-in face data), and compliance with legal obligations. You may also lodge a complaint with your local supervisory authority.

California — CCPA/CPRA

If you're a California resident, you have rights under the CCPA/CPRA to know what personal information we collect and how we use it, to request access and deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. We do not sell or "share" (for cross-context behavioural advertising) your personal information.

How to exercise your rights: use the in-app controls in Settings, or email privacy@starface.mobi. We'll verify your request to protect your account and respond within the timeframe required by applicable law. You may use an authorised agent where the law allows.

9. International transfers

Hatchify is based in Australia, and our processors may store or process data in other countries. Where personal information is transferred across borders, we take steps to ensure it remains protected to a standard consistent with this policy and applicable law — for example, by relying on appropriate safeguards such as standard contractual clauses where required for transfers from the EU/UK.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above, and for significant changes we'll provide a more prominent notice (such as an in-app message). Your continued use of the Services after an update means you accept the revised policy.

11. Contact us

Questions, requests, or concerns about your privacy? We're here to help.