Privacy policy

About this translation

This is an English translation, provided so you can read what you are agreeing to. The Dutch version is the binding one: Stella is sold from the Netherlands under Dutch law, and if the two texts differ on any point, the Dutch text applies. You can read it at stella-app.nl/algemene-voorwaarden, stella-app.nl/privacybeleid, stella-app.nl/cookiebeleid and stella-app.nl/herroepen.

1. Introduction

This privacy policy describes how Mayelow, trading as Stella Networth Tracker ("Stella", "we", "us"), handles your personal data. We respect your privacy and act in accordance with the General Data Protection Regulation (GDPR, in Dutch the AVG).

2. Contact details

The controller is Mayelow, Charlotte van Pallandthof 132, 1112 ZL Diemen, the Netherlands. Chamber of Commerce (KvK) 91736838, VAT NL004912213B40, email info@stella-app.nl.

For questions about privacy you can reach us at the email address above.

3. What data do we collect?

3.1 During early access and the waiting list

•Email address

•Referral source, and the campaign you arrived from if the link had one (utm medium, campaign and content)

•Date you signed up

•Whether and when you confirmed your signup

•The order in which you signed up and when you confirmed your signup. Your place in the line is calculated from that and not stored separately

•Your personal invite code, and who invited you if you came through someone else’s link, also if you became a founding member through it. Whoever invited you only sees how many people signed up, confirmed or became founding members through that link, never who

•Which waitlist emails we sent you and when, and whether you unsubscribed from them

•Whether you get 3 months of Premium at your first login (only for a signup before 10 October 2026)

3.2 When using the app (future)

Account data:

•Full name

•Email address

•Password (stored encrypted)

•Date of birth (to verify you are 18 or older)

Financial data:

•Bank account numbers (partly masked)

•Account balances

•Investments

•Crypto assets

•Savings goals

•Income and spending

Usage data:

•IP address

•Device type and operating system

•App version

•Features used

•Sign-in times

3.3 Through cookies and storage in your browser

We set one functional cookie and a few pieces of storage in your own browser. We count visits anonymously and without cookies. With your consent, the Reddit Pixel and the Affonso pixel are added. The first measures whether our Reddit ads work, the second remembers which partner brought you to Stella, so that partner is paid if you become a member. Without consent they do not load. Exactly what each one does is set out in the Cookie statement at stella-app.nl/cookiebeleid.

If you arrived through a partner link (a link with a partner code, such as stella-app.nl/?via=name), we record which partner you came through when you buy or sign up for the waiting list, also without consent. This works without cookies and without storage in your browser: the partner code is only in the link, and we connect it to your purchase or signup on our server. See 4.5.

Inside the app we do use usage statistics and error reporting, to see which screens are used and to find crashes. See 5.1.

4. Why do we process your data?

4.1 To provide our services

Legal basis: performance of a contract

•The waitlist: your place in the line, your invite link, your free months of Premium and the emails that come with them (confirming, a reminder if you haven’t confirmed after a week, your spot, moving up)

•Creating and managing your account

•Net worth calculations

•Financial simulations and scenarios

•Syncing between devices

4.2 For improvement and analysis

Legal basis: legitimate interest

•Improving how the app works

•Improving the user experience

•Solving technical problems

•A/B testing (anonymised)

•Developing benchmark features

4.3 For communication

Legal basis: consent

•Marketing emails (only with opt-in)

•Product news and updates

•Tips for financial insight

4.4 For security

Legal basis: legitimate interest

•Fraud prevention

•Account security

•Preventing abuse

4.5 For our partner programme

Legal basis: legitimate interest

If you arrive through a partner link and buy or sign up for the waiting list, we record which partner link you came through (the partner code from the link). We do this without cookies, so we can pay that partner their commission. We keep the partner code with your purchase or signup, and pass it to Affonso together with your email address and the purchase amount, so Affonso can calculate the commission. Our interest is that partners who recommend Stella are paid fairly. You can object to this at info@stella-app.nl.

5. How do we share data?

5.1 Current service providers

•Vercel : hosting of the website, European region. Vercel Web Analytics also counts, anonymously, how many visits the site gets, through which campaign, and how often someone views the price, signs up, confirms their signup, shares an invite link, clicks founding member, or starts and finishes the film. Without cookies and without your email address, and a visit is only recognised as the same one for a single day. Vercel is a US company; that transfer relies on the Standard Contractual Clauses in their data processing agreement

•Reddit : measuring our ads on Reddit. Reddit sees which pages you visit, whether you confirm your signup for the waiting list and whether you become a founding member, with the amount. No email address. Only active with your consent. Established in the United States, see article 11

•Affonso (ZASolution GmbH, Fellbach, Germany): our partner programme. If you arrive through a partner link, Affonso receives a cookie id with your consent. If you then sign up or become a member, Affonso receives the partner code from the link, your email address and the purchase amount, also without consent for cookies (see 4.5), to calculate that partner's fee. Servers in Frankfurt, Germany.

•Supabase : database, accounts and storage of everything you put into Stella, European region

•Stripe : processing the payment for the founding membership. We neither receive nor store payment details

•RevenueCat : keeping track of whether you have access to Premium, linked to your user ID

•PostHog : usage statistics for the app, European region

•Sentry : error reporting for the app

•Resend : sending the waitlist emails: the email to confirm your signup, one reminder if you haven’t confirmed after a week, the email with your spot and the email when you move up. Resend receives your email address for this, and records whether an email was delivered and which link you click. Links in those emails therefore pass through Resend first. We do not measure whether you open an email. Based in the United States, see section 11

•Mailgun : receiving and forwarding email you send to info@stella-app.nl. Based in the United States, see section 11

We do not use Google Analytics, Microsoft Clarity or Google Sheets.

5.2 Future service providers

We select service providers carefully for:

•App hosting and databases

•Payment processing

•Email services

•Bank API connections

All service providers are established in the EU or in countries with an adequate level of protection.

5.3 No sale of data

We NEVER sell your personal data to third parties.

6. Security

We take appropriate measures to protect your data:

•Encrypted connections (HTTPS/TLS)

•Encrypted storage of sensitive data

•Regular security updates

•Access control and logging

•Incident response procedures

Specific measures will be extended as the app is developed.

7. Retention periods

•Waiting list : up to 1 year after the app launches

•Active accounts : while in use, plus 3 years of inactivity

•Deleted accounts : at most 30 days after deletion

•Records around a purchase, such as invoices and payments : 7 years, because Dutch tax law requires it

•Financial data you put into Stella, such as balances and transactions : as long as your account exists, and after that according to the period above for deleted accounts

•Marketing contacts : until you withdraw consent

8. Your privacy rights

Under the GDPR you have the following rights:

•Access : ask which data we process

•Rectification : have incorrect data corrected

•Erasure : have your data deleted

•Restriction : temporarily stop processing

•Portability : export your data

•Objection : object to processing

•Withdraw consent : for marketing communication

You can submit a request at info@stella-app.nl. We respond within one month, as the GDPR requires. If a request is complex we may extend that by two months, and we will tell you so within the first month.

9. Cookies

9.1 Which cookies do we use?

One functional cookie, for which no consent is required. With your consent, also one cookie from Reddit and two from Affonso (affonso_referral and affonso_data), which remember for 90 days which partner you came through. You can refuse it without the site working any differently.

The full overview, including what ends up in your browser storage, is in the Cookie statement at stella-app.nl/cookiebeleid. That document is the leading one.

9.2 Managing cookies

You can refuse or clear cookies through your browser settings. The site keeps working afterwards; you will simply see the signup form and the question about statistics again.

10. Data breaches

In the event of a data breach that puts your rights at risk:

•We report it within 72 hours to the Autoriteit Persoonsgegevens, the Dutch data protection authority

•We inform you by email without undue delay

•We take measures to limit the damage

11. International transfers

Your data is processed primarily within the EU. Where data is transferred outside the EU we put appropriate safeguards in place, such as:

•The EU-US Data Privacy Framework

•Standard Contractual Clauses

•An adequacy decision

The Reddit Pixel sends data to Reddit, Inc. in the United States. Reddit is certified under the EU-US Data Privacy Framework, and the transfer relies on that. The pixel also only loads with your consent, and you can withdraw it in the same place.

The waitlist emails are sent through Resend (Plus Five Five, Inc.) in the United States. Resend is certified under the EU-US Data Privacy Framework, and the Standard Contractual Clauses in our data processing agreement with them apply as well.

Email to info@stella-app.nl runs through Mailgun (Sinch) in the United States. That transfer relies on the Standard Contractual Clauses in our data processing agreement with them.

12. Changes

We may update this privacy policy. We communicate significant changes through:

•Email to registered users

•A notice in the app

•An announcement on the website

13. Complaints

Do you disagree with how we process your data?

•Please contact us first

•You can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority

•You have the right to legal protection

14. Contact

For questions about this privacy policy or your data:

Email : info@stella-app.nl Post : Mayelow, Charlotte van Pallandthof 132, 1112 ZL Diemen, the Netherlands

This privacy policy was last updated on 11 October 2026