Privacy Policy
How the StellarKiosk app handles information when it is used for guest check-in, registration, and checkout on the StellarAegis platform.
1. Overview
StellarKiosk is a companion app for the StellarAegis platform. It turns an iOS device into a self-service kiosk that an organization (the “Host”) uses at its premises to manage guests — including guest check-in, guest registration, and guest checkout.
This Privacy Policy explains what information the app processes, how it is used, and the choices available to guests and Hosts. It applies to the StellarKiosk iOS application and is provided to satisfy the privacy disclosure requirements of the Apple App Store.
Where your data lives. StellarKiosk is designed for on-premises deployments. Guest information collected through the app is transmitted to and stored on the Host organization’s own StellarAegis servers, which the Host operates and controls. StellarAegis does not operate a central cloud database of guest records collected through StellarKiosk.
2. Who is responsible for your data
The Host organization that deploys StellarKiosk is the data controller — it decides what information to collect, why, and how long to keep it. StellarAegis provides the software and acts as a data processor on the Host’s behalf.
Because guest records are stored on the Host’s on-premises StellarAegis servers, requests about a specific visit (access, correction, or deletion of records) are handled by the Host organization. If you checked in at a particular location and want to exercise a privacy right, contact that organization directly. StellarAegis will assist the Host as needed.
3. Information the app collects
StellarKiosk collects information that a guest or a Host staff member enters or captures at the kiosk during check-in, registration, or checkout. Depending on how the Host configures the app, this may include:
- Name and contact information — such as full name, email address, phone number, and company or organization.
- Photo and identification — a photo captured at the kiosk and/or a scan or image of a government-issued ID or business card, where the Host requires it for guest verification.
- Host and visit details — the person or team being visited, the purpose of the visit, badge or pass information, and check-in and checkout timestamps.
- Signatures and agreements — a captured signature or a record that the guest reviewed and accepted documents such as a non-disclosure agreement (NDA) or site safety policy.
- Device and operational data — basic information needed to run the kiosk reliably, such as the kiosk device identifier and app configuration set by the Host.
The exact fields collected are determined by the Host organization that configures the kiosk. StellarKiosk does not request access to a guest’s personal contacts, location, or browsing activity, and does not use the information for advertising.
4. How the information is used
Information collected through StellarKiosk is used only to provide guest-management functionality, including to:
- Register and verify guests and create a visit record;
- Check guests in and out and notify the relevant Host contact;
- Print or issue guest badges or passes;
- Record acceptance of NDAs, safety policies, or other Host agreements;
- Maintain an accurate guest log for the Host’s security, safety, and compliance needs.
The app does not sell personal information, and it does not use guest information for marketing or advertising purposes.
5. Camera and device permissions
If the Host enables photo or ID capture, the app will ask for permission to use the device’s camera. The camera is used solely to capture the guest photo or identification image at the moment of check-in or registration. You can decline the permission, though some verification features may then be unavailable. Permissions can be reviewed at any time in the iOS Settings app.
6. Storage, retention, and security
Guest information entered at the kiosk is transmitted to the Host organization’s on-premises StellarAegis servers and stored there under the Host’s control. Retention periods are set by the Host organization in accordance with its own policies and applicable law.
StellarAegis applies industry-standard safeguards in the software, including encryption of data in transit between the app and the Host’s servers, and role-based access controls. Because data resides on the Host’s infrastructure, the physical and network security of the stored records is also governed by the Host’s own security program.
7. Sharing of information
Guest information is made available to authorized staff of the Host organization for the guest-management purposes described above. StellarAegis does not share guest records with third parties for their own purposes. Information may be disclosed only where required by law, or where the Host directs disclosure as the data controller.
8. Your privacy rights
Depending on your location, you may have the right to access, correct, or request deletion of your personal information, and to object to or restrict certain processing. Because the Host organization controls the guest records, please direct these requests to the organization where you checked in. StellarAegis will support the Host in responding to verified requests.
9. Children’s privacy
StellarKiosk is intended for use by businesses and organizations to manage guests and is not directed to children. The app does not knowingly collect information from children except where a minor is registered as a guest by an accompanying adult or Host staff member.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to the app or to legal requirements. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the app or to Host organizations as appropriate.
11. Contact us
If you have questions about this Privacy Policy or about how StellarKiosk handles information, contact:
StellarAegis
Email: info@stellaraegis.com
For records relating to a specific visit, please also contact the organization where you checked in, as it controls that data.