Last updated: 2026-10-12 · Version 2.6
Plain-English summary: Perlicom Systems Ltd, an Irish company, runs StellarGauge. We collect only the data we need to operate the Service: your Google account profile (for sign-in), the readings your StellarGauge devices send (level, temperature, signal, battery), and basic billing records when you subscribe to Premium. We host everything inside the European Union. We never sell, rent or share personal data for cross-context behavioural advertising.
"Service" in this policy means StellarGauge, accessible at stellargauge.com and via our official Android (and, in future, iOS) applications.
The table below is our full Article 13/14 GDPR disclosure: each row sets out a category of personal data, why we process it, the lawful basis under Article 6, and how long we keep it.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Google account profile (Google ID, email, display name, profile picture) returned by Google OAuth | Authenticate you, populate your account, send service email | Performance of contract (Art. 6(1)(b)) | While your account exists; deleted within 30 days of account closure |
| Device data: BLE device IDs, friendly names, capacity (litres), tank shape, calibration values, firmware version | Match readings to your devices, render correct level/% on screen, push firmware OTA updates | Performance of contract (Art. 6(1)(b)) | Until you remove the device from your account, then 30 days |
| Readings: level, temperature, signal strength (RSSI), battery voltage, timestamp, location-of-reading (which device) | Show live state and history; trigger smart alerts; analytics dashboards (Premium) | Performance of contract (Art. 6(1)(b)) | Kept until you clear a device's history in the app, remove the device from your account (its readings are deleted with it) or delete your account. The app shows the last 14 days on the free tier and the last 365 days on Premium; older readings stay stored and become visible again if you upgrade. |
| Alert configuration (thresholds, contact email/phone for notifications, alert history) | Send you the alerts you opted into | Performance of contract (Art. 6(1)(b)) | Until you delete the alert, or 90 days after account closure |
| Subscription / billing: subscription tier, status, start date, renewal date, last 4 of card, Revolut order id | Run your subscription, comply with VAT/invoicing rules | Legal obligation (Art. 6(1)(c)) for invoicing; Performance of contract for billing operations | 7 years (Irish revenue requirement) |
| Audit logs: account-significant events (login, password reset, billing change, device added/removed) | Security, fraud-detection, regulatory accountability | Legitimate interests (Art. 6(1)(f)) — protecting account security | 2 years |
| Diagnostic logs (anonymised request paths, error counts, app version) — no payloads, no PII | Find and fix bugs, capacity-plan | Legitimate interests (Art. 6(1)(f)) | 30 days |
| Usage counts: for each day, how many times each screen or feature of the app was used, with the first and last time that day, the app, its version and build, the platform and a random install identifier, linked to your account. Never a device ID, a tank name, a reading, your location or anything you type | See which features are used, fix what is not working and decide what to build next. A condition of using the app, not an optional setting; the counts are sent to our Perlicom account service | Legitimate interests (Art. 6(1)(f)) — you can object by writing to us; because the app cannot work without them, the way to stop them entirely is to stop using the app and delete your account | 13 months (395 days), then deleted automatically; at once if you delete your account |
| Feature suggestions you send from the app’s Settings: your text, the category, the app, version and platform, the time, and your account’s name and e-mail address | Answer and act on your suggestion; similar suggestions are grouped together | Legitimate interests (Art. 6(1)(f)) | 24 months, then deleted automatically; at once if you delete your account |
| IP address on each request. An IP address can show your approximate location (roughly your country or region and your internet provider). We do not look up or store a location from it, and your billing country for VAT is the one you give us | Rate-limit abuse, fraud prevention and security | Legitimate interests (Art. 6(1)(f)) | 30 days for live logs; redacted in long-term audit |
| Permission | Why | If you decline |
|---|---|---|
| Bluetooth scan / connect | Required to discover and read StellarGauge BLE devices | The app cannot connect to any device — no live readings |
| Location (precise and approximate; on some phones “Allow all the time”) | Android 11 and below only lets apps scan for nearby Bluetooth devices with location permission, and the app also declares background location so that, on those versions, scans can continue while the app is closed. On iPhone, “Always” lets iOS reopen the app when it is near your sensor. The app uses the permission only for Bluetooth scanning: it never reads, logs or uploads your GPS position | Bluetooth scanning may be blocked by the phone, depending on version; without “all the time” / “Always”, readings update only while the app is open |
| Notifications | Show alerts (low-level, battery low, lost-signal) outside the app | You won't receive in-app or system alerts; everything stays in-app |
| Run in background (battery optimisation exemption, Workmanager) | Periodic background scans so a device away from the phone still updates | Readings only update while the app is in the foreground |
| Internet | Sync readings, sign in with Google, download firmware | App is unusable without it |
| Processor | Purpose | Country |
|---|---|---|
| Google LLC (OAuth identity) | Sign-in | EU/US (SCCs in place) |
| Hetzner Online GmbH | Hosting (compute, storage, network) | Germany / Finland (EU) |
| Revolut Payments UAB | Subscription billing | EU (Lithuania) |
| ChemiCloud (SMTP) | Service email (alerts, invoices, password resets) | EU |
Each processor operates under a written Data Processing Agreement and may only process the data we specifically instruct them to.
We do not sell, rent or share personal data for advertising. We disclose data only:
You can:
We respond to verified rights requests within 30 days at no cost (extended by up to 60 days only for complex requests).
This section applies if you live in a US state with a general consumer privacy law: California (the CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and any state with a similar law. It adds to the rest of this policy.
In the last 12 months these categories of personal information were collected through StellarGauge. Each is used only for the purposes, and kept only for the periods, described earlier in this policy.
Sensitive personal information: none.
We do not sell personal information, and we do not share it for cross-context behavioural or targeted advertising. StellarGauge shows no adverts.
E-mail support@stellargauge.com with the subject "US privacy request", saying which right you want to use and which state you live in. Please write from the e-mail address your account uses, so we can match it to you. We answer within 45 days. If we need longer, we tell you why within those 45 days and may extend once by up to another 45 days. An authorised agent can make a request for you with your signed permission; we may ask you to confirm your identity with us directly.
Appeals. If we turn a request down, reply with the subject "Appeal" and we will answer within 45 days. If you are still not satisfied, you can contact your state Attorney General.
The web dashboard uses one strictly-necessary session cookie to keep you signed in. We do not use third-party cookies, ad pixels or session replay tools. We collect anonymised request counts (no IPs, no user-agent fingerprinting) for capacity planning only. The app itself sends the daily usage counts described in section 2, linked to your account; this is a condition of using it and cannot be switched off. There is no third-party analytics SDK.
StellarGauge is not directed at children. We do not knowingly create accounts for users under 16. If you believe a child has registered, contact us and we will delete the account.
We use TLS 1.2+ for everything in transit, AES-256 at rest, hashed/peppered passwords (when applicable), least-privilege access to production, and audit logging of admin actions. Despite all reasonable measures, no system is unbreakable; if a breach affects you, we will notify you and the Data Protection Commission within 72 hours of confirmation, as required by Article 33 GDPR.
All primary processing is in the EU. The only material US transfer is Google OAuth metadata; that transfer is covered by Standard Contractual Clauses (SCCs) and Google's EU-US Data Privacy Framework certification.
The sections above describe in detail what StellarGauge collects and why. In summary, and where the detailed sections above are more specific they apply:
Accepting the StellarGauge terms of use is not consent to personalised advertising.
We send e-mails with news and offers about Perlicom Systems Ltd's own apps and services. We never send offers from, or on behalf of, other companies, and we never share your e-mail address with anyone for their marketing.
Under the StellarGauge terms of use you keep ownership of your content and give us a licence to use content that you publish (for example publicly or with a public link), including in marketing and promotion of our apps. Content that you keep private and content you send privately to particular people (such as messages, calls, meetings, recordings or files sent to named recipients) is used only to provide StellarGauge. That licence does not change how we handle personal data: any personal data in your content is used only as this policy describes. We will not feature content that identifies you or anyone else in marketing unless that person has agreed, and you can ask us not to feature your content at all by e-mailing support@perlicom.com with the subject "Do not feature my content".
We may turn information into anonymised or aggregated statistics that do not identify you or anyone else and cannot reasonably be linked back to a person (for example, how many people use a feature in a month). Such information is not personal data. We own it and may use, publish, share, license or sell it. We will not try to re-identify anyone from it, and anyone we give it to must agree not to try either. We do not sell your personal data for money.
If we withdraw StellarGauge or shut down the servers behind it (see the Terms of Use), we will tell you in advance where practicable, and where StellarGauge lets you download or export your content you can do so during the notice period. After the shutdown we delete the personal data and content kept on our servers for StellarGauge, including from our backups as they expire, except anything the law requires us to keep (for example purchase and tax records) and anonymised or aggregated information. Data kept only on your own device stays there until you delete it.
We will update this policy when StellarGauge or the law changes, and change the effective date (and version, where shown) at the top. If a change materially affects how your personal data is used, we will tell you in the app, by e-mail or on the store listing before it takes effect, and where the law requires it we will ask for your consent again.
Perlicom Systems Ltd (company number 546999, Ireland) is the data controller. E-mail: support@perlicom.com. We reply within one month.
You have the right to complain to the Irish Data Protection Commission (www.dataprotection.ie) or to the supervisory authority where you live or work. See also the StellarGauge Terms of Use.