How the app handles personal information

Messages and notifications

To let bots receive messages, StarLight reads messenger notifications with notification access. If you turn it on in the settings, it also reads other apps’ notifications.

Notification content is passed to your bot projects on the device, and StarLight does not send it to the developer’s servers.

Data stored on the device

Projects, logs, settings and AI conversations are stored only on the device: in the StarLight folder of the internal storage for the GitHub build, and in the app-specific folder for the Google Play build.

API keys and sign-in tokens for AI services are encrypted with a key in the Android Keystore and kept in the app’s private storage.

AI features (optional)

When you use StarLight AI, your conversation, the files you attach, and the project files and logs the agent reads while working are sent to the AI service you connect (Anthropic, OpenAI, a ChatGPT account, Google Gemini, OpenRouter or an OpenAI-compatible server you specify). That data is subject to the service’s privacy policy and terms.

When the agent reads a web page, the device connects to that page directly. If you don’t use the AI features, none of this is sent.

Servers the app connects to

The GitHub build connects to GitHub to check for new versions and changelogs, and to get the plugin store’s list and plugin files. These requests carry none of your data.

The Google Play build doesn’t connect to these servers; Google Play handles its updates.

Scripts and plugins

Scripts you write and plugins you install can connect to the internet and handle data. What they do is up to their authors and is outside the scope of this policy.

Analytics, ads and error reports

StarLight has no analytics, ads or user tracking.

When the app runs into an error, it shows the error report on the device. The report leaves the device only if you share it.