Privacy

Your mobile number, your first name, your house’s name and the first names you give for your housemates. What you send Stella on WhatsApp: messages, photos, screenshots and documents. Voice notes are turned into text and the audio isn’t kept. The bills, mail and documents she reads for the house, and the facts she takes from them. Her notes, what she proposes, who said go, what she did and what came of it. What she’s learned about you from what you tell her, the choices you make and your own mail and calendar (your profile), which you can see and correct under What I know about you on her page. Your lists, your reminders, and the names and numbers you save with her as contacts. Recordings and transcripts of the calls she places and of the calls you make to her. If you connect Google, the household mail, calendar events and files she reads there. If you save a login, bank details or your date of birth, they’re sealed in a vault she can use but never see. When you ask for a sign-in code or join the waitlist, the address your device connects from, kept only as a scrambled code for up to a day, so nobody can flood people with codes.

If you join the waitlist: your first name, mobile number and email, and if you give them, your postcode or area and what you’d like Stella to do. We use them to decide who to let in next and to email you when you’re in. Stella never messages you on WhatsApp first.

To check the number is yours (we send a code to it on WhatsApp), to set up your house, to let your housemates join with their own links, and so Stella can answer you and do what you and your house ask her to. We never sell your information and never use it for advertising. We don’t train or fine-tune AI models on it, and the AI providers we use never train on it.

Unless you turn it off, Stella learns from how houses use her, so she gets better for everyone. That means two things, both done automatically and with names and details taken out: lessons she’s learned in three or more houses, such as which option on a supplier’s phone line reaches a person, shared with every house; and test cases for checking her answers, rewritten so nobody can be identified. Nothing trains or fine-tunes an AI model, and the AI providers never train on your data.

It’s on by default because we think it’s in everyone’s interest that she gets better, and the law calls this legitimate interests. You can turn it off at any time on her page, under You, with Use my data to improve Stella. With it off, nothing of yours is used, including anything you share with your house, and anything of yours already set aside for it that can still be traced to you is deleted. A lesson already shared with every house, or a finished test case, holds nothing about you or your house, so it stays.

With it off, our team can open your conversations, documents or calls only for your safety or someone else’s, when the law requires it, or when you ask us to, such as with a request about your data. Whatever the setting, a person on our team reads your conversations to improve Stella only if you’ve separately said yes to that. Anything from your Google account is never used to improve Stella, and a conversation her safety checks flagged is never used for lessons or test cases.

Nobody in your house sees your private chat with Stella, or anything that’s yours alone. These companies handle what their part needs, under contract with us, some of them in the United States:

Meta carries the messages between you and Stella on WhatsApp.

Linq and Loop Message carry the messages between you and Stella on iMessage. Apple’s own terms and privacy policy also apply to your use of iMessage.

OpenRouter routes what she reads and writes to the AI models that write her replies (mainly Anthropic’s Claude and Google’s Gemini), with zero data retention required on every request.

OpenAI powers her browser, seeing screenshots of the sites she uses; it may keep them for up to 30 days to watch for abuse. Its model is also the voice of her calls.

Retell runs her calls and keeps a recording and transcript for a day; Twilio carries the calls and records nothing.

Fly.io runs Stella and our database in London. Her own computers run on Fly.io’s Sprites, in a region we can’t guarantee, which may be outside the UK.

Webshare gives her browser UK internet addresses. Tigris stores files in London, sealed with your house’s key. Vercel hosts our websites. Resend handles your house’s email, from Ireland. Ideal Postcodes looks up the postcode you type for your address. Logfire keeps our logs for 30 days, in the EU, with no message content. Cloudflare Turnstile checks you’re a person when you sign up.

Google, only if you connect your Google account: see Your Google account, below.

Connecting is optional. If you choose to connect your Google account, Stella asks Google for permission to: read, label and draft emails in your Gmail (gmail.modify); send an email from your Gmail, only after you say go to exactly what she shows you (gmail.send); see and add events in your Google Calendar (calendar.events); read files in your Google Drive (drive.readonly) and create files there (drive.file); and know which account you connected (your email address). You can untick any of these on Google’s screen.

What she reads and why. On her own, Stella reads only household mail in your inbox, such as bills, renewals, deliveries, tenancy, insurance and council tax, to tell you what’s due, what’s changed and what could be cheaper. She never opens password resets, sign-in codes or security alerts, and never reads your sent mail, drafts, spam, bin or promotions on her own. She reads other emails or Drive files only when you ask her to. What she reads is private to you. It’s shared with your house only if you choose to share a kind of thing, such as bills, on your page.

What we keep. Google’s ids for what she read, wrote and sent, and the facts taken from household mail as your own private documents, with card numbers, codes and passwords removed first. We don’t keep copies of whole inboxes. Your Google sign-in token is encrypted in our vault and never shown to anyone, including the AI models.

Who else sees it. The AI models that help Stella answer see what’s needed for your request, through providers that keep nothing (zero data retention). Our hosting (Fly.io, London) and storage (Tigris) hold it encrypted. If you call Stella and confirm it’s you, a short summary of a Gmail, Calendar or Drive lookup is spoken to you through our voice provider (Retell), which keeps the call for a day. We never sell Google data, never use it for advertising, and never let people read it, except with your permission for specific messages, for security, or where the law requires.

No AI training. Data from your Google account is never used to develop, improve or train generalised AI or machine learning models, ours or anyone else’s.

Disconnecting and deleting. Disconnect on your page at any time. We revoke Stella’s access at Google and delete what was read from it straight away. You can also remove access at myaccount.google.com/permissions. If Google ends the connection, we delete what was read after 30 days unless you reconnect.

Limited Use. Stella’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

Only the ones the site needs to work: one keeps you signed in for up to 30 days, and short-lived ones hold your code, your invite link and your answers while you sign up or join the waitlist. No tracking or advertising cookies. On meet-stella.com, nothing loads from Spotify until you press to play her playlist.

Sign-in codes are deleted after a day, and invite links 90 days after they end. A waitlist entry is deleted 90 days after it’s declined, and otherwise a year after it last changed. Call recordings and transcripts are kept for 12 months. Your private things go 7 days after you leave a house. The rest stays while your house uses Stella; closing a house deletes everything within 30 days of its seven-day undo. Backups clear within 35 days. The full list is in Stella’s terms.

You can download your data or delete it from her page at any time, and leave your house there too. You can also ask for your data to be corrected, or object to how we use it. Email my.data@justmovein.com or write to Data Protection, Ethical Introductions Ltd, The Echo, 18 Albert Road, Bournemouth, BH1 1BZ. You can also complain to the Information Commissioner’s Office.

Anything this notice doesn’t cover is covered by the Just Move In privacy policy.