Stellatris Privacy Policy

Version: 1.2.0

Last Updated: June 30th, 2026

At Stellatris, we believe your health is your business. This policy describes how we handle your data in compliance with the Maryland Online Data Privacy Act (MODPA), currently the strictest privacy regulation in the United States, and other applicable health privacy standards.

1. Data Collection and Strict Necessity

In accordance with Maryland law, we only collect and process sensitive data that is strictly necessary to provide the specific services you request.

Identity Data: Name, email, and date of birth required for account verification.
Contact Information: We collect your email address to establish and authenticate your account, send strictly necessary service and security notifications, and facilitate our anonymous exposure alert system. If you attempt to sign up outside of our current service area, we will collect your email address to notify you when Stellatris launches in your region.
Location Data: Your zip code is collected to determine your eligibility for our initial launch areas, to notify you of future regional launches if you are outside our current service area. Full billing addresses are collected separately and strictly for payment processing on paid tiers.
Consumer Health Data: Self reported STI statuses, used solely to populate your Health Passport and trigger Connection Network (i.e., Intimacy Constellation) Exposure Alerts.
Connection Network (i.e., Intimacy Constellation) Data: Your list of confirmed connections, processed to map 1st degree exposure alerts for all tiers, and 2nd degree exposure alerts for the Protostar tier.
Connection Details (Nebula and Protostar tiers): User generated data used strictly to provide requested characterization of a connection within your intimacy constellation.

2. How We Use Your Information

To Provide Services: Managing your STI status and send or receive anonymous alerts between you and your connections.
Safety Alert Logic: Processing the timestamps of your health logs to manage Delta Notifications and cooldown windows to prevent alert fatigue.
Security and Record Keeping: We may record your IP address and device user agent at the time of account creation to maintain a verifiable record of your agreement to our terms and for fraud prevention.
Infrastructure: Your data is stored and processed on secure servers hosted by our third party cloud service provider.

3. Sharing and Disclosures

No Sale of Identifiable Data: Stellatris does not sell your identifiable sensitive health data or personal information to third parties for monetary or other valuable consideration.
Service Providers: We share your data with trusted third party service providers (such as cloud hosts and payment processors) solely to provide the services you have requested. These providers are contractually prohibited from using your data for any other purpose.
Public Health and Legal Disclosures: We may disclose your information to local, state, or federal public health authorities for the purpose of preventing or controlling the spread of infectious diseases, or to comply with a valid legal obligation, such as a subpoena or court order.
De-identified and Aggregate Data: We may use, share, or sell de-identified or aggregate information that cannot reasonably be used to infer information about or be linked back to you (for example, for research or community health analytics). In accordance with the Maryland Online Data Privacy Act, Stellatris publicly commits to: (a) Maintaining and using all such information in a de identified form; (b) Not attempting to re identify the information; and (c) Contractually obligating any third party recipients of this data to comply with these same non identification restrictions.
Member Visibility: Your identifiable health status is shared only with the specific members you have authorized through an established Connection.

4. Data Security

We secure your health data using modern at rest and in transit encryption standards (e.g., TLS and AES 256) alongside industry standard cryptographic hashing for account credentials. We utilize a Privacy by Design model that prioritizes data minimization and local device storage where possible.

5. Your Rights Under Maryland Law (MODPA)

As a Maryland resident, you have the following rights:

Right to Access: Request a copy of the data we hold about you.
Right to Correct: Rectify inaccurate health or profile information.
Right to Delete: Request that we delete your personal and health data.

As a non Maryland resident, we provide the same above rights.

6. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect data from minors, and we apply an Age Assurance protocol to prevent unauthorized access.

7. Stellatris Beta Testing Program

In addition to our core application services, we intermittently run the Stellatris Beta Testing Program . If you choose to apply, specific data minimization rules apply to your application data:

Data Collection: When you apply for the beta program, we collect additional information including your pronouns, gender identity, sexual orientation, relationship status, and your recent sexual history (e.g., number of partners, attendance at sex parties/bathhouses or group sex settings).
Strict Necessity: This sensitive demographic and sexual history data is strictly necessary and collected exclusively to evaluate your eligibility for the program and to place you in an appropriate, diverse testing cohort.
Data Retention & Deletion (Non-Selected Applicants): If you are not selected for the beta program, all sensitive data (including gender identity, sexual orientation, and sexual history) will be permanently deleted within 30 days of cohort finalization.
Data Retention & Deletion (Selected Applicants): If you are selected, your sensitive application data will be permanently deleted immediately upon your placement into a testing cohort. We will solely retain a “fact-of-participation” record for as long as you are active in the program. Once the cohort testing period concludes, your individual participation in that specific cohort will be de-identified.

8. Contact Us

For questions or to exercise your privacy rights, please contact us at contact@stellatris.com.