Privacy Policy

1. Data We Collect

• Account data: Your email address and name, collected when you register or are invited to the app.
• Birth data: Birth date, birth time, and birth location (including latitude/longitude) that you enter to generate astrological charts. This is personal data and, depending on context, may be considered sensitive.
• Health data: If you use the Lunar Almanac cycle tracker, the period start date, cycle length, and optional notes you log. See section 2 below for full details.
• Saved content: Saved charts, reading history (tarot/rune draws), and any notes you attach to charts.
• Usage & analytics: approximate geo-location (country/region/city estimated from your IP address, which is used only for that lookup and not stored), browser user-agent, entry path, referrer, and a session identifier — used for aggregate analytics shown in the admin dashboard.
• Feedback: Comments and ratings you submit through the in-app feedback form.
• Local storage: Theme preference, language, birth form entries, and session data stored in your browser's local/session storage.

2. Health Data (Lunar Almanac Cycle Tracker)

• If you use the Lunar Almanac cycle tracker, we store the period start date, cycle length, and any optional notes you log. This data is tied to your account and is visible only to you.
• It is used solely to display lunar-cycle predictions and moon-phase insights within the app.
• Health data is never used for advertising, tracking, or profiling, and is never shared with third parties.
• It is retained until you delete your entries or delete your account, at which point it is permanently erased.

3. Legal Basis for Processing

• Consent (Art. 6(1)(a)): You consent to the collection and processing of your birth data and usage data by using the app. You can withdraw consent at any time by deleting your account.
• Explicit consent (Art. 9(2)(a)): Menstrual cycle entries are a special category of health data under GDPR and are processed only with your explicit consent. Logging cycle data is entirely optional, and you can withdraw consent at any time by deleting your cycle entries or your account.
• Contract (Art. 6(1)(b)): Processing your account data and saved content is necessary to provide the service you requested.
• Legitimate interest (Art. 6(1)(f)): We process anonymized analytics (IP, geo, session) to understand app usage and improve the service.

4. How We Use Your Data

• To calculate and display your natal chart, horoscopes, and astrological readings.
• To save and retrieve your charts and reading history across sessions.
• To send daily horoscope emails if you opt in (Premium feature).
• To process subscription payments (via Stripe on the web, or via Apple App Store / Google Play Billing on native apps).
• To aggregate anonymous usage statistics for service improvement.
• We do not sell your personal data to third parties.

5. Data Retention

• Account & birth data: Retained for as long as your account is active. Deleted when you delete your account.
• Saved charts & reading history: Retained until you delete them or delete your account.
• Health data (cycle tracker): Retained until you delete your entries or delete your account, then permanently erased.
• Analytics (VisitLog): Retained for up to 24 months for trend analysis, then automatically purged.
• Payment records: Retained as required by tax and accounting law (typically 7 years).

6. Data Sharing & International Transfers

Your data is stored on Base44's cloud infrastructure and may be processed in countries outside the EU/EEA (including the United States). We rely on Standard Contractual Clauses (SCCs) and provider-level safeguards to ensure appropriate data protection. Third parties with limited access to your data:

• Base44: Hosting, database, and authentication infrastructure.
• Payment processors: Stripe (web), Apple App Store, and Google Play Billing (native apps) receive your payment details directly; we do not store card numbers.
• Google AdSense: If ads are enabled for free-tier users, Google may set cookies and process data per its privacy policy. You can remove ads by upgrading to Premium.

7. Your Rights Under GDPR

To exercise any of these rights, go to Settings → Delete Account for erasure, or contact us using the details below. We respond within 30 days.

8. Children's Privacy

Heavenly Insight is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data, including encrypted transit (HTTPS), secure authentication, and access controls. No method of transmission or storage is 100% secure, but we strive to protect your data using commercially acceptable means.

10. Contact & Data Protection Officer

For privacy enquiries, data requests, or to report a data protection concern, contact the app owner: Positive Vibrations Web Design at info@positivevibrations.com or via the in-app feedback form. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted in the app.