North Star is an Ardenholt program operated by Ruzylo Cloud, LLC. This sheet describes what we hold, why, and your rights over it. It is short for a reason: the plan is written on your device and stays there.
What we collect
- Your email address — only if you enter the register. Used to write to you about North Star, and nothing else.
- License keys and receipts — only once a price exists and you buy, so that we can prove what you own when you unlock the app.
- An authentication identifier — only if you choose to sign in. With Sign in with Apple we store the opaque identifier Apple gives us and never receive your real address unless you share it.
- Standard server logs — IP address, user agent, request path, kept no longer than thirty days for security and debugging.
- Payment details — handled entirely by our payment processor. We never see or store a card number.
What we do not collect
Your reasons. Your warning signs. The people on your list, their names, or their numbers. What you wrote to do at 2am. Any note, date, or entry you make inside the app.
All of it is written on your device and stays there — private by construction, on-device. There is no sync, no backup of it on our side, and no server of ours holding it, which means we cannot read it, cannot restore it, and cannot be made to hand it over. If a sync feature is ever built it will be opt-in, and it will say so plainly before it moves a single line.
What we will not do
- We do not sell your data. Ever.
- We do not run third-party advertising trackers.
- We do not use anything you write to train any model.
- We do not share your data with brokers.
- We do not contact anyone on your list, at any time, for any reason.
Where the little of it lives
Register addresses, and later any receipts and license keys, are stored on our hosting provider's infrastructure in the United States. Our payment processor stores payment data under its own policy, and Apple stores Sign in with Apple credentials under Apple's.
A word about HIPAA
HIPAA governs records held by clinicians, clinics, and their business associates. It is not the thing protecting your plan here, because your plan is not held by us at all — it is on your phone, under your device's own protection, and we are not a party to it. Anything you choose to export and send to a clinician becomes part of their record, under their obligations.
Your rights
All four go to [email protected]. Because your plan is not ours, an export from us will be short: an address, and later perhaps a receipt and a key.
- Access — write to us and we send a copy of everything we hold on you within thirty days.
- Deletion — the same, and we delete within thirty days unless a law requires us to keep a billing record.
- Correction — the same address, or change it in the app where that applies.
- Portability — exports come as JSON or CSV.
Children
North Star is not intended for children under 13, or under 16 in the EU, and we do not knowingly collect data from them.
Changes
If this sheet changes materially we will update the effective date at its head and write once to anyone on the register.
Contact
[email protected] — Ruzylo Cloud, LLC, Thousand Oaks, California.