2026年10月4日 · October 4, 2026
运营者为香港主体 NOONWAKE TECHNOLOGY (HONG KONG) CO., LIMITED。联系：support@noonwake.com。新版 Starot 使用独立账户及数据库，不自动导入旧 Starot 的账户、内容或购买。
邮箱验证码、邮箱密码登录或 Apple 身份标识、你主动填写的出生档案、对话、记忆、事项、宝典行动记录、音频收藏与播放历史，以及 Apple 交易编号和会员/金币账本。出生资料可包含时间、地点与时区；你可以选择未知出生时间。
登录本身不会自动上传全部内容。你在账户页主动选择上传或恢复时，所选云同步快照（档案、事项、记忆、对话、宝典、唤醒与音频记录）才在本机和阿里云美国弗吉尼亚的独立服务器之间传输。用户正文及身份详情加密储存，通过 HTTPS 传输。只有你明确同意 AI 处理时，请求所需内容才发送到独立 Starot Dify 工作流及 DeepSeek 模型服务；使用已存记忆还需单独同意。对话中的星盘开关开启时，会发送已计算的星体位置（不含出生日期、城市或完整出生档案）；关闭后，后续请求不会继续附带星盘位置及含该上下文的对话历史。你可以在应用内停止后续 AI 处理或记忆使用。模型供应商可能在美国以外处理请求；不要输入身份证件、密码或他人的敏感资料。
电话采用独立于文字 AI 的许可。只有你确认音视频处理说明、主动开始电话并允许系统麦克风权限后，才录音并传输。新版电话由 Starot 的独立美国后端代理至阿里云百炼 Qwen 实时模型，本版配置使用新加坡地域处理。连接失败不会自动切换到另一个地域。电话会发送你所许可的事项、近期对话短摘、计算结果及已存记忆；使用记忆仍需单独同意。
照片在你选取、预览并明确发送后才上传。相机只在你主动开启分享时以约每秒一帧发送所见画面，并显示预览与共享状态；可随时关闭。画面用于讨论可见物体或文字，不用于识别人身份、推断敏感特征、判断真实情绪或预测。麦克风与相机系统许可可以撤销；在 App 设置中撤销电话许可、挂断、切换文字、退出账号或进入后台时，应停止新的音视频采集和传输。
Starot 不将电话原始录音、共享图片或相机帧写入持久存储、日志、长期记忆或云备份。通话内容在连接期间经过内存处理，待接上下文最多保留60秒；实时模型提供商会处理已发送的数据。完成的字幕先供你查看，只有你明确选择保存的文字记录或记忆才进入本地记录，之后是否上传仍由你选择云同步。我们保留与账户关联的电话时间、次数、地区、状态和限额记录，不保存媒体正文。停止分享只能停止后续传输，不能撤回已经发出的数据。
设置邮箱密码需已验证邮箱和近期登录。密码仅用于登录验证，服务端保存随机盐和多轮密码派生散列，不保存或回显明文密码。密码登录失败也受安全限流。账户删除会清除密码凭据。我们可为明确的测试或审核用途赠送限期会员和金币，赠送来源、期限和金币单独记账，不伪装成 Apple 购买；不会因此自动订阅或扣款。
支付由 Apple 处理，我们不接收完整银行卡资料。服务端验证 Apple 签名后记录购买、退款、金币消费与会员权益。登录验证码通过公司的 SendCloud 邮件投递服务发送。我们不出售你的个人资料，不为广告追踪向第三方共享数据。
主动云备份会保留你填写的出生城市及经纬度；手动输入可能包含精确坐标。我们不请求设备实时GPS定位。你自愿记录的1至5分情绪感受和事项变化用于个人回看与成长练习。使用AI和宝典时，服务端会记录请求次数、完成或错误状态、响应延迟和可关联账号的技术请求标识，用于功能运行、问题诊断和防滥用；这些记录可能在请求结束后保留。邮箱及Apple登录的安全限流使用经HMAC处理的IP衍生标识、计数和期限，不用于广告追踪或推算位置；逻辑限流期限不代表届时已物理删除记录。
你可以修改档案、删除记忆和事项，或在“我的 → 账户 → 删除账户”提交删除。需要近期重新登录。受理删除后，独立云数据库中的档案、记忆、对话、宝典与播放历史会被移除，会话会被撤销，Apple 登录授权会按可用撤销接口处理。已送往 Dify 的请求由独立后台任务按该账户的精确映射擦除；在途请求结束前或短暂故障期间，状态为“处理中”，应用可以查询完成状态。只有远端回读完成，才显示“已完成”；任务失败会显示待重试状态或需支持处理。为履行财务和反欺诈义务，会保留与随机账户编号关联的必要交易账本，随机编号不代表已匿名化。加密备份可能在其保留周期内继续存在；恢复备份时应重放删除记录。删除 App 或账户不会自动取消 Apple 订阅，请在 Apple 订阅管理中取消。
Starot 是自我反思和成长工具，不提供医疗诊断、心理治疗、财务或法律建议，不保证任何预测。面向18岁及以上用户。如你希望访问、更正或删除资料但无法登录，请联系上述支持邮箱。
Starot is operated by NOONWAKE TECHNOLOGY (HONG KONG) CO., LIMITED, Hong Kong. Contact support@noonwake.com. This version has its own accounts and database and does not automatically import legacy Starot data or purchases.
We process your sign-in identifier, birth profile you choose to provide, conversations, saved memories, matters, guidebook actions, listening history and favorites, and verified Apple transaction and entitlement records. Signing in does not automatically upload all content. When you explicitly choose upload or restore in Account, the cloud snapshot moves between your device and the isolated service in Alibaba Cloud Virginia, USA. HTTPS protects transfer and personal content is encrypted at rest.
With your explicit AI consent, relevant request content is processed by the isolated Starot Dify workflow and DeepSeek. Including saved memories requires separate permission. When the birth-chart switch is enabled in chat, requests include calculated planetary positions, not the birth date, city or full birth profile. Turning it off stops including those positions and earlier chart-context conversation history in subsequent requests. Providers may process requests outside the USA. You may stop future AI or memory processing in the app. Do not enter identity documents, passwords, or another person's sensitive information.
Calls require separate consent from text AI. Audio collection and transfer begin only after you accept the audio/visual processing notice, actively start a call and grant microphone permission. Starot's isolated US backend proxies calls to Alibaba Cloud Model Studio's Qwen realtime model, configured in Singapore for this release. A failed connection does not automatically move the call to another region. Only the matter, recent conversation excerpt, calculated context and saved memories you authorize are included; using saved memories still needs separate permission.
A selected photo is uploaded only after you preview it and choose to send it. The camera shares approximately one frame per second only after you actively start camera sharing, with a visible preview and sharing indicator. You can stop at any time. Images support discussion of visible objects or text, not identity recognition, sensitive-trait inference, claims about real emotions or prediction. Revoke system microphone/camera access or call consent in app settings to stop future sharing. Hanging up, switching to text, signing out or moving the app into the background stops new capture and transfer.
Starot does not persist raw call recordings, shared photos or camera frames in storage, logs, long-term memories or cloud backups. Content passes through memory during a connection; pending context lasts at most 60 seconds. The realtime model provider processes the data already sent to it. Completed captions are presented for review; only text or memories you explicitly choose to save enter your local records, and cloud sync remains your choice. We retain account-linked call times, counts, region, status and quota metadata without media content. Stopping sharing prevents future transfer but cannot retract data already sent.
Email passwords require a verified email identity and a recent sign-in to set or reset. Passwords are used only for authentication. The service stores a random salt and an iterated password-derived hash, never plaintext passwords, and applies rate limits to failed attempts. Account deletion removes password credentials. Limited membership and coin grants for identified testing or review purposes are recorded with their source and expiry independently of Apple purchases. They do not create a subscription or a charge.
Apple processes payments; we never receive full card details. SendCloud delivers sign-in emails. We do not sell personal data or share it for advertising tracking.
A cloud backup you choose to upload includes your birth city and coordinates, which can be precise when entered manually. We do not request the device’s live GPS location. Your voluntary 1-to-5 feeling scores and changes in matters support personal reflection and growth exercises. AI and guidebook requests record usage counts, completion or error status, response latency and technical request identifiers that can be linked to your account, for functionality, troubleshooting and abuse prevention. These records can remain after a request ends. Email and Apple sign-in rate limits retain HMAC-derived IP identifiers, counts and expiry fields; these are not used for advertising tracking or location inference. A rate-limit window ending does not mean the stored record has been physically deleted.
Manage or delete your content in the app. Account deletion in Me → Account requires recent sign-in. The independent database removes personal content and revokes sessions; Sign in with Apple authorization is revoked through the available Apple endpoint. A separate background job erases Dify requests by this account’s exact mapping, after in-flight requests finish. The app displays pending while that work is underway and completed only after a zero-remaining readback; failures are retried or require support. Necessary financial records retain a random account reference, which is pseudonymous rather than anonymous. Encrypted backups may retain data for their retention period; deletion records must be replayed on restoration. Account deletion does not cancel an Apple subscription. Use Apple's subscription management to cancel it.
Starot is for adults 18+. It supports reflection, not medical treatment, diagnosis, financial or legal advice, or guaranteed predictions. Contact support@noonwake.com for access, correction or deletion requests.