Privacy Policy

Updated September 30, 2026.

Starr Creek Inc. (“Starr Creek,” “we,” “us”) provides software and websites. This policy explains our shared privacy practices and the additional details that apply to particular products. You can contact us at support@starrcreek.com about this policy or your information.

Where this policy applies

This policy applies to Starr Creek websites, applications and internal business integrations that link to or expressly identify it. Read the relevant product section below alongside the shared sections. Product sections explain differences in the information used and the features offered; they do not authorize unrelated uses of your information.

A product may provide an additional notice when you use a particular feature. We will identify that notice and the activity it covers. A new product does not automatically gain access to information you supplied to another product. We will explain any new collection, sharing or purpose and obtain consent where required before it begins.

Third-party services you use independently, including payment providers, have their own privacy notices. This policy describes Starr Creek's handling of information, not every practice of those providers.

Information we use and why

Account and contact information: names, email addresses and account identifiers to register and authenticate users, manage access, communicate about the service and respond to requests.
Information you enter or share: records, files, preferences and other content needed to provide the particular features you choose. The product sections describe these categories more specifically.
Subscription and business records: plan, payment status, invoices, transaction identifiers and related tax information to administer subscriptions, resolve billing issues and maintain company accounts. Payment card processing is handled by our payment provider; Starr Creek does not store card numbers.
Technical and security information: IP addresses, browser information, request timestamps, sign-in activity and error logs to operate the service, investigate problems and protect accounts.
Support correspondence: information you send us to answer questions or investigate an issue. Include only what is needed for the request.

We use information for the stated service, support, security and accounting purposes, to maintain and improve the service, and to meet applicable legal obligations. The information involved depends on the product and features you use. We do not sell your personal information.

Within a product, information may be made available to people you choose to share with, subject to that product's permissions. Shared account sign-in does not itself grant another user access to your records.

We use service providers for functions such as hosting, payment processing and message delivery. We share information needed for those functions and require providers to protect it and use it for the purposes for which it was supplied. Access by Starr Creek personnel is limited to authorized service, support, security and business purposes.

We may disclose information where required by law or where permitted to protect legal rights, investigate misuse or protect people's safety. If a merger, acquisition or business sale involves a transfer of information, we will notify affected users by email or a notice on this website and explain relevant changes.

Cookies and local storage

Our applications use cookies for authentication and session management. Product interfaces may also store settings on your device, such as a display preference. These are different from advertising cookies. We do not use advertising or tracking cookies. Blocking necessary cookies may prevent sign-in or other requested features from working.

Email delivery and tracking

We use Mailjet to send email. Mailjet processes recipient addresses, message content and delivery information for this purpose. Our current email configuration also uses open tracking, and some messages contain links rewritten for click tracking. A tracking image can report when an email's remote images load; a tracked link can report when it is followed. These events may include a message or recipient identifier, timestamp, IP address and email-client information. We use this information to understand email delivery and engagement. Email tracking is separate from website cookies.

An open event does not prove that a person read the message: email software may load images automatically or block them. You can usually block remote images in your email software, although this does not prevent tracking when you follow a tracked link. Contact support@starrcreek.com with questions or requests about email tracking and your information.

Where information is processed and how it is protected

Our hosted services and service providers process information in Canada, the United States and the European Union. Mailjet states that it stores personal data in Google Cloud data centres in Frankfurt, Germany, and Saint-Ghislain, Belgium. This storage location does not describe every location from which a provider or its subprocessors may provide support or process information. Internal business records may also be stored on computers used by authorized personnel. Information processed outside your country may be subject to that country's laws and lawful access requests.

We use safeguards appropriate to the information and its use, including HTTPS connections and access controls. Specific safeguards for a local tool differ from those for a hosted service. No storage or transmission method is completely secure.

Retention and deletion

We retain information for as long as it is needed for the purposes described in this policy, including providing the service and meeting legal obligations. Relevant considerations include account status, unresolved support or billing issues, security needs and required recordkeeping. Retention details for particular products appear below.

Cancellation of a paid subscription, deletion of an account and disconnection of an external integration are different actions. Disconnection stops that integration's authorized access; it does not by itself delete records already created in another system. Contact us if you want to request deletion or understand which records remain.

Your choices and privacy requests

You may ask what personal information we hold, request access or correction, request deletion, or raise a concern about its use. You may also ask to withdraw consent or restrict or object to processing where those rights apply. Some information may be necessary to provide a requested service, and legal recordkeeping obligations may limit deletion.

Contact support@starrcreek.com. We may need to verify your identity and authority over the information before acting. We will respond within 30 days, or explain any extension permitted by applicable law. You may raise a concern with the Office of the Privacy Commissioner of Canada or another applicable privacy authority.

Product-specific details

Starr Creek Life

Starr Creek Life is a household management application. Depending on the features you use, records can include family and household details, schedules, appointments, reminders, medication and medical information, pet information, and files you choose to upload. Health information and information about other people can be sensitive. Enter only what you need and have the authority to provide.

We use these records to provide the organization and reminder features you select. When you use household or family sharing, the people authorized through that feature can access the information made available to them. Configured notifications may convey information through email or other enabled delivery channels, so consider who can access the destination.

Adults and family records: account holders must be at least 18. An adult may enter information about a child or dependent as part of managing their household, where the adult has the necessary authority and consent. The service is not offered for children to create independent accounts. Contact us about information supplied without appropriate authority.

Subscriptions: Stripe processes subscription payments. Starr Creek keeps the subscription and transaction records needed to administer access and account for payments.

Account closure: we delete your personal data within 30 days of account closure unless retention is required by law. Cancelling renewal alone does not close your account.

Starr Creek Retirement

Starr Creek Retirement helps individuals and couples model retirement income, spending and tax-aware withdrawals. Planning information can include household roles, names or display labels, birth month and year, residency, planned retirement and longevity assumptions, investment account types and balances, contributions, pensions and government benefits, other income, expenses, property, debts and estate goals. We use this information and your selected assumptions to calculate, save and compare the planning results available in your plan.

Financial information: enter the amounts and planning details needed for your projections. The initial version uses manual entry, not bank or brokerage connections. Do not enter official account numbers, institution login credentials, Social Insurance Numbers or government account identifiers, or upload statements, tax returns or benefit documents. Use descriptive account labels instead of official identifiers.

Household access: planning records belong to the relevant household. Invited members can access information according to their assigned permissions. Invite only people you intend to authorize to see sensitive financial information. Shared sign-in alone does not share your Starr Creek Retirement plan with Starr Creek Life or another product. Any optional cross-product sharing must be explained and authorized separately.

Reports and requests: downloaded planning reports contain sensitive financial information; protect copies you save or share. Planning report access depends on the available features and household permissions. Privacy access and deletion requests are separate from paid report features and can be made through our support contact.

Retention after access ends: when a household's last active trial, paid or promotional access ends, planning data is retained for recovery and privacy handling for 60 days. This retention does not provide continued access to the planning workspace. At the end of that period, household planning inputs, scenario results and annual snapshots are deleted from active systems. Qualifying renewed access before the deadline cancels expiry-scheduled deletion; signing in or exporting information does not extend the deadline. Renewed access does not cancel an explicit deletion request or restore already deleted data.

Minimal billing, consent, fraud-prevention and security records may be retained where necessary for their stated purposes or required by law. Starr Creek Retirement planning-data deletion is separate from your shared sign-in account and unrelated Starr Creek Life records. Starr Creek Life's 30-day account-closure commitment does not apply to Starr Creek Retirement's expiry-recovery period. Contact us about deletion requests, shared household records or copies held in backups.

Where a product uses shared Starr Creek sign-in, the identity service handles authentication and provides the account identifier and authorized identity information that product needs. Products retain their own access permissions. Using the same sign-in does not mean household, health or financial records are automatically shared between products.

Additional products and features

Before another product begins collecting information under this policy, we will add or identify the relevant product details. Those details will explain its information categories, purposes, sharing and any retention differences. A product's inclusion in this policy is not a promise that it is publicly available.

Changes to this policy

We will publish revisions on this page with an effective date. We will provide appropriate notice of material changes and seek consent for new purposes or disclosures where required. Merely updating this page does not itself authorize a new use of your information.