Privacy Policy

Last updated: 2026-05-17

1. Information We Collect

Account Information

When you create an account with Starboard, we collect your email address, name, and other information you provide during registration through our OAuth providers (Google). This information is used to create and manage your account.

Vision Board Content

We store the vision boards you create, including titles, descriptions, categories, and any images you upload. This content is stored securely and is only accessible to you unless you choose to make your boards public.

Usage Data

We collect information about how you use our services, including pages visited, features used, and time spent on the platform. This helps us improve our services and provide better user experiences.

2. How We Use Your Information

To provide and maintain our vision board creation service
To authenticate users and manage accounts
To personalize your experience and provide relevant content
To communicate with you about your account and our services
To analyze usage patterns and improve our platform
To ensure the security and integrity of our services

3. Information Sharing and Third-Party Processors

We do not sell, rent, or trade your personal information. We do not share your personal information for cross-context behavioral advertising. We share data with the third-party processors listed below only to the extent necessary to deliver the service you have requested or, where indicated, only with your consent.

Supabase

EU (eu-central-1)

Purpose: Authentication, account storage, board content database

Data shared: Email, profile, board content, hashed password

OneSignal

United States

Purpose: Transactional and marketing email; push notifications

Data shared: Email address, device token, name, opted-in notification tags

MailerLite

EU / US

Purpose: Newsletter delivery

Data shared: Email address, name, subscription status

Resend

United States

Purpose: Internal admin notifications (feedback, template submissions)

Data shared: Email of the person submitting feedback or a template

RevenueCat

United States

Purpose: Subscription state and entitlement management

Data shared: App user ID, purchase entitlements

Stripe

US / EU

Purpose: Web payment processing for subscriptions

Data shared: Billing details (handled directly by Stripe; we never store card numbers)

Apple App Store

Per Apple terms

Purpose: iOS in-app purchases

Data shared: Transaction receipt, App Store account ID

Google Play

Per Google terms

Purpose: Android in-app purchases

Data shared: Transaction receipt, Google Play account ID

PostHog

EU (eu.i.posthog.com)

Purpose: Product analytics (consent-based; off until you accept)

Data shared: Anonymous distinct ID, page views, event names, device class; your Supabase user ID when signed in

Groq

United States

Purpose: AI-generated affirmations (opt-in; see Section 4)

Data shared: The goal, challenges, and tone you enter — no account identifiers

Perplexity

United States

Purpose: Moon-phase ritual suggestions (see Section 4)

Data shared: Current moon phase, month, and illumination percentage only — no personal data

Public Content

If you choose to make your vision boards public or submit a board as a public template, the board content, your display name, and the public share URL may be visible to other users and to anyone with the link.

California Residents (CCPA / CPRA)

We do not sell your personal information for money or other valuable consideration, and we do not share your personal information for cross-context behavioral advertising. The categories of personal information we collect and the business purpose for each are described in the table above and in Section 1. You have the right to know, to delete, to correct, and to limit our use of sensitive personal information. Submit requests by emailing captain@starboardmanifest.com; we will verify the request against the email on your account.

EEA / UK Residents (GDPR and UK GDPR)

Our legal bases for processing your personal data are: (a) contract performance — for account creation, board storage, and billing; (b) legitimate interest — for fraud prevention, service stability, and product analytics where you have not opted out; and (c) consent — for marketing emails, push notifications, product analytics, and AI features, which you can revoke at any time in Account → Settings. You have rights of access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact captain@starboardmanifest.com. You may also lodge a complaint with your local supervisory authority.

4. AI-Powered Features

Some features of Starboard are generated by third-party AI services. These features are optional, and content produced by them is for inspiration only, not professional, medical, financial, or legal advice.

Groq: AI-generated affirmations

When you use the optional AI affirmation feature (used as custom notifications), the goal, challenges, tone, and any details you enter are sent to Groq, Inc. to generate affirmation variations. We do not send your account identifiers, email, or vision board imagery. This feature is off by default. The first time you try to use it, you'll see a consent prompt explaining what's sent; choosing No thankscloses the prompt without generating anything and records your decline. You can revoke consent at any time from Account → Settings → AI Features; once revoked, no further data is sent to Groq.

Perplexity: moon-phase ritual guidance

The lunar ritual page sends only the current moon phase, calendar month, and illumination percentage to Perplexity AI to generate ritual suggestions. No personal information about you is sent. Responses are cached for 24 hours and labeled in the UI as AI-generated.

You can avoid sending data to these providers by not using the relevant features. To request deletion of any data we have processed on your behalf, contact captain@starboardmanifest.com.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit, hosted databases with access controls, and routine security review.

6. Your Rights

Access to your personal information
Correction of inaccurate information
Deletion of your account and associated data
Opt-out of marketing communications
Data portability

To exercise these rights, please contact us at captain@starboardmanifest.com.

7. Cookies, Local Storage, and Analytics

Starboard uses three categories of browser storage:

Essential (always on) — Supabase auth cookies, CSRF tokens, your theme preference, and a record of your consent banner choice. These are required for the service to function and are not used for analytics.
Analytics (consent-based) — when you select Accept All in our consent banner, we enable first-party PostHog product analytics (EU region). PostHog state is kept in browser localStorage; no analytics cookies are set. PostHog collects anonymous page-view and feature-use events keyed to a randomly generated distinct ID and, when you are signed in, your Supabase user ID. See PostHog's privacy policy. You can withdraw consent at any time from Account → Settings → Privacy, or by choosing Reject All when the banner appears.
Operational vendors — RevenueCat, OneSignal, and Stripe set first- or third-party cookies as part of their own services when you actively use them (purchasing a subscription, opening an email link, completing checkout). These are described in Section 3.

We do not embed Google Analytics, the Meta Pixel, the TikTok pixel, or any cross-site advertising tracker. The NEXT_PUBLIC_FACEBOOK_APP_ID value in our app is used solely to enable the Share to Facebook dialog on the public share page; no Pixel script is loaded.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. We will post material changes here and, where the change materially expands the use of personal information, notify signed-in users in-app or by email at least 30 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent substantive revision. A prior version is available on request from captain@starboardmanifest.com.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: captain@starboardmanifest.com

Postal: Starboard Manifest, {{MAILING_ADDRESS}}

Website: https://www.starboardmanifest.com