Constello

Last updated: August 16, 2026

Constello reads the collections you bring it — writing of your own, what you listen to, what you post — for the world underneath them, and returns a reading. This policy explains what it stores, what it sends to other services, and how to have your data removed. It's a small, alpha-stage project; the practices below are deliberately narrow.

What we collect

• The collections you submit. Text you paste or upload, and — only when you ask for it — content fetched on your behalf from services you name: your Last.fm listening history, your public X (Twitter) posts, and your Pinterest boards and pins. We fetch only public or explicitly authorized data, through each service's official API.
• What we generate from it. The readings written about your collections, and numeric vector representations (embeddings) of those readings used to relate one constellation to another.
• Files you attach in chat. Images, audio, video, and documents you choose to send are stored with the conversation. In a Claude-enabled constellation or pair chat, attachments are processed as context for Claude; Google Gemini first converts audio and video into a timestamped dossier. Direct-message attachments remain human-to-human and are not sent to either AI provider.
• Contact details you choose to give. An email address, an X handle, a Discord account identifier, or — if you give it — a phone number, kept only so we can tell you when a reading is ready.
• Account and safety information. Your password is kept only as a one-way salted hash. We also retain the blocks and reports you create, moderation decisions, and a record of your AI-processing permission.
• Security identifiers. For abuse enforcement, we use an essential random device cookie and keyed hashes of the device token and exact network address used for protected actions. Raw network addresses are not retained in Constello's database.
• Billing and subscription records. Stripe or Apple provides transaction, subscription, and payment-status information. For web subscriptions, we keep the recurring offer you accepted, its policy version, the acceptance time, confirmation-delivery state, and cancellation/reminder history. Constello does not store full card numbers.

Your constellation is your account and may be protected by a password. We use essential signed session and device cookies to keep you signed in and enforce access restrictions. We don't use advertising or analytics cookies, and we don't track you across other sites.

How we use it

• To produce your readings and the cross-collection essence.
• To notify you, on a channel you opted into, when a reading is ready.
• To operate sharing, chat, safety reports, blocking, and moderation.
• To enforce account, device, network, and Discord access restrictions.
• To fulfill purchases, document subscription consent, send required confirmations and reminders, and process cancellations or refunds.

We do not sell your data, use it for advertising, or use it to build profiles for anyone other than you.

Services we share it with

To run, Constello passes data to a small set of providers, each acting on our behalf:

• Vercel — application hosting.
• Supabase — database storage.
• Cloudflare R2 — storage for media you upload.
• Anthropic (Claude), claude-api.io, Abhibots, and aimodel.lol — generating readings, syntheses, and chat responses.
• Voyage AI — generating embeddings of the readings.
• Google Gemini — analyzing the visual and audio content of videos and audio you choose to add to an AI-enabled surface.
• Stripe — payment processing and subscription management.
• Apple — App Store purchases, subscription management, and signed transaction verification in the iOS app.
• The platforms you connect (Last.fm, X, Pinterest) — to fetch the content you ask us to read. Your use of those platforms remains governed by their own privacy policies.

Your AI-processing choice

Before Constello sends your chosen material or related context to a third-party AI provider, it asks for your explicit permission and names the providers and purposes. Your decision is recorded with the current notice version and time. You can withdraw permission at any time in Settings in the Constello iOS app. Withdrawal stops future AI processing; existing data remains available to you until you delete it.

Pinterest data

If you connect Pinterest, Constello accesses your boards and pins only with your authorization and only to generate your reading. We do not sell or share Pinterest data, do not use it for advertising, and retain it only as long as needed for your constellation. You can revoke access at any time in your Pinterest account settings, and request deletion as below. We handle Pinterest data in accordance with the Pinterest Developer Guidelines and Terms.

Retention and deletion

We keep your data while your constellation exists. You can permanently delete your account from Settings in the Constello iOS app, without contacting us. Account deletion cancels active Stripe subscriptions and removes your collections, readings, embeddings, conversations, media, contact details, credentials, and ordinary commerce records. A minimized, pseudonymous record of subscription consent may remain for the legally required retention period; account deletion removes its contact details and provider identifiers. Reports may retain a limited snapshot needed for safety and abuse review after the reported account or content is gone. Opaque device and network hashes may also be retained while an access restriction remains necessary so deleting an account does not silently defeat that restriction. App Store subscriptions are managed by Apple and must be canceled separately before or after account deletion. You can also email the address below for help.

Children

Constello is not directed to children and is not intended for anyone under 16. We don't knowingly collect data from them.

Changes

If this policy changes, we'll update the date at the top of this page.

Contact

Questions or deletion requests: [email protected].