Privacy Policy

1.1 Personal Information You Provide

• Birth data (date, time, and location) — stored in our database, linked to your account, and used to compute your natal chart and ongoing transits
• Email address (for account creation)
• Name or username
• Profile preferences and settings
• Partner birth data you voluntarily provide for compatibility features — also stored in our database and linked to your account
• Your conversations with Luna, the app’s guide, and the chats that follow a reading — stored in our database, linked to your account, and synced between your devices. You can delete any conversation in the app.

1.2 Automatically Collected Information

• Device hardware and software (model, operating system version, app version and build number, device idiom, screen dimensions)
• Locale information (region code, preferred languages, calendar system, timezone)
• Install date and onboarding completion timestamp
• App usage analytics and feature interactions
• Crash reports and performance data
• Push notification tokens

1.3 IP Address, Geolocation & Login Events

On each successful sign-up, sign-in, or session refresh we collect and retain:

• Your IP address
• Approximate geolocation derived from that IP (country, region, city, ASN, and network organization), resolved via a third-party IP intelligence provider (ipinfo.io)
• User agent string and the event type (signup, signin, OAuth provider, device profile refresh)
• A mirror of the device identifiers and app version active at the time of the event

We use this information to detect and prevent fraud and abuse (including multi-account signup-bonus abuse, redemption code abuse, payment chargeback disputes, and suspicious account-takeover activity such as sudden new-country logins), to secure your account, and to comply with our legal obligations. Individual login event records are retained for 90 days and then automatically deleted. A rolling "last login" IP and geo snapshot is retained for the life of your account and overwritten on each new login.

1.4 Location Information

• Birth location for astrological calculations (provided by you)
• IP-derived approximate location, as described in Section 1.3
• Device location (only if you explicitly grant permission)

1.5 Luna’s Memory

When Luna’s memory is on, Luna keeps short notes of what you have told her about your own life — for example your work, the people close to you, a date that matters to you, or how you like her answers — so you don’t have to explain it again. The notes are made by our AI provider (Google Gemini) from a conversation after it ends, stored with your account, and used to shape Luna’s later answers. When a date you mentioned has passed, Luna may ask how it went, in the app and, if you allow notifications, as a notification.

• Luna’s memory is designed never to keep your health, a pregnancy, a death or a loss, your sexuality, gender identity, religion, politics or ethnicity, immigration or legal matters, a secret, money amounts or contact details, and nothing at all from a conversation in which you may be in crisis.
• It is on by default for adults, and off for anyone under 18 or without a birth date in their account. Nothing is noted before the app has told you that Luna remembers, and nothing said while memory is off is noted later.
• In the app (Profile › Luna’s memory) you can see every note, delete any of them or all of them, and switch memory off. Deleting a conversation also deletes the notes made from it, and deleting your account deletes all of them.

2.1 Core App Functions

• Generate personalized natal charts and astrological analyses
• Provide daily insights and horoscopes
• Calculate transit predictions and cosmic events
• Deliver personalized content and recommendations
• Answer your questions to Luna and, while Luna’s memory is on, remember what you have told her (see Section 1.5)

2.2 Account Management

• Create and maintain your user account
• Authenticate your identity
• Send important account notifications
• Provide customer support

2.3 App Improvement

• Analyze usage patterns to improve features
• Debug technical issues
• Develop new functionalities
• Ensure app security and stability

2.4 Fraud Prevention & Security

• Detect and prevent multi-account creation and abuse of signup bonuses, promotional credits, and redemption codes
• Investigate payment disputes, chargebacks, and refund requests
• Identify suspicious login activity and protect accounts from takeover
• Enforce our Terms of Service and rate limits
• Comply with legal obligations and respond to lawful requests

We do not sell, trade, or rent your personal information to third parties.

3.1 We may share information in these limited circumstances

• With your explicit consent
• To comply with legal obligations
• To protect our rights or safety
• In case of business transfer (with user notification)

3.2 Service Providers

• Cloud infrastructure and storage (e.g., Amazon Web Services, including S3 for audio content delivery)
• Analytics services (e.g., Google Analytics, Firebase, RevenueCat)
• Push notification services (e.g., Apple Push Notification service, Firebase Cloud Messaging)
• Authentication services (e.g., Google Sign-In, Apple Sign-In)
• Payment and subscription services (e.g., Apple App Store, RevenueCat, Stripe)
• AI services (e.g., OpenAI ChatGPT API, Google Gemini API)
• IP intelligence and geolocation (ipinfo.io) for fraud prevention and security
• Social sharing integrations (e.g., Instagram Stories — only when you initiate a share)

4.1 Encryption: Your sensitive data is encrypted both in transit and at rest.

4.2 Access Control: Limited employee access on a need-to-know basis.

4.3 Security Monitoring: Regular security audits and monitoring.

4.4 Data Minimization: We collect only necessary information.

5.1 Access: View your personal data we have stored.

5.2 Correction: Update or correct your information.

5.3 Deletion: Request deletion of your account and data.

5.4 Portability: Export your data in a readable format.

5.5 Opt-out: Unsubscribe from marketing communications.

6.1 Account Data: Retained while your account is active.

6.2 Birth Data: Stored in our encrypted application database, linked to your account, and retained for chart calculations while your account is active. Deleted within 30 days of a verified account-deletion request (see 6.5).

6.3 Usage Analytics: Anonymized data retained for app improvement.

6.4 Login Event Logs: Individual login event records (IP, geolocation, user agent, device snapshot) are retained for 90 days for fraud review, then automatically deleted. The "last login" rolling snapshot on your account record is retained for the life of the account and overwritten on each new login.

6.5 Deletion Requests: Personal data is removed within 30 days of a verified deletion request via support contact, except where retention is required for legal, accounting, or fraud-investigation purposes.

6.6 Conversations and Luna’s Memory: Conversations with Luna are retained while your account is active, until you delete them. Notes in Luna’s memory are kept until you delete them, delete the conversation they came from, or delete your account; at most 40 are kept at a time, and the oldest go first.

Our app is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

9.1 We may use cookies or similar tracking technologies in web views for analytics or marketing.

9.2 We use mobile analytics SDKs for app performance.

9.3 You can opt out of analytics in app settings.

9.4 We may use cookies or pixels on our website for marketing purposes.

10.1 Authentication: We may use third-party authentication services.

10.2 Analytics: Privacy-focused analytics to improve user experience.

10.3 Cloud Storage: Encrypted data storage with reputable providers.

10.4 While we carefully select service providers, we are not responsible for the privacy practices of third parties. We encourage users to review their policies.

11.1 You can enable/disable notifications in app settings.

11.2 We send notifications for daily insights and important updates.

11.3 Notification preferences are stored locally on your device.

11.4 We do not track notification interactions for advertising.

In the event of a data breach affecting your personal information:

• We will notify affected users within 72 hours
• We will provide details about the breach and our response
• We will offer guidance on protective measures
• We will work with authorities as required

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don’t sell data)
• Right to non-discrimination for exercising privacy rights

For EU users, we comply with GDPR requirements:

• Lawful basis for processing your data
• Right to access, rectify, or erase your data
• Right to data portability
• Right to object to processing

Our legal bases for processing are: (a) performance of contract — to provide core app features such as chart generation, account management, and subscriptions; (b) legitimate interests — to prevent fraud, abuse, and account takeover, to secure our service, to analyze and improve app performance, and for Luna’s memory, which you can object to at any time by switching it off in the app; (c) legal obligation — to comply with tax, accounting, and lawful-request requirements; and (d) consent — for optional features such as marketing communications and device-location access, which you can withdraw at any time.

Data Protection Officer: contact the DPO

We may update this Privacy Policy from time to time. We will notify you of significant changes through:

• In-app notification
• Email notification (if you have an account)
• Updated version date at the top of this policy

For privacy-related questions or requests:

• Privacy questions: email the privacy team
• General questions: email support

Your privacy is important to us. We are committed to protecting your personal information and being transparent about our data practices.