Privacy Policy

1. Who We Are

Celestia ("we", "us", "our") is an astrology and numerology application developed and published by its individual developer. For questions about this policy, contact us at tarotbysana@gmail.com.

For users located in the European Economic Area (EEA), the United Kingdom, or Israel, we act as the data controller in respect of your personal data as defined under the General Data Protection Regulation (GDPR), the UK GDPR, and the Israeli Privacy Protection Law (PPL) respectively.

2. Information We Collect

We collect only what is necessary to deliver personalised astrology and numerology readings.

• Birth data — your name, date of birth, time of birth, and birth location. This data is stored locally on your device and, where cloud features are enabled, securely in Google Firebase under your unique user ID.
• Account data — when you sign in, we store a unique user identifier (UID) provided by Firebase Authentication. We do not store passwords.
• Chat messages — text you send to the AI Oracle. Messages are forwarded to our AI provider (Anthropic) to generate a response and are stored securely in your personal Firebase account record to maintain conversation context across sessions. The developer may access stored conversations solely for the purposes of debugging, improving the service, and safety monitoring. We never share your conversations with third parties.
• Conversation context summaries (optional) — if you enable the "Remember what I share" feature, Celestia may extract short anonymised summaries of events or plans you mention in chat (for example: "social event, evening, follow-up scheduled") in order to send you a personalised check-in notification the following day. We store the summary only — never the verbatim message. You can disable this feature at any time in Settings, and all stored summaries will be deleted immediately.
• Daily insight cache — your personalised daily astrological and numerological insights are cached securely in Firebase by user ID and date to avoid redundant re-generation. This cache is automatically deleted after 7 days.
• Push notification token — if you enable notifications, we store your device push token in Firebase solely to deliver your daily reading and check-in notifications. You can revoke this at any time in your device notification settings.
• Location (optional) — requested only when you choose to use your current location to fill in your birth location. We do not track your ongoing location.
• Purchase information — if you subscribe to Celestia Premium, payment is processed entirely by the Google Play billing system. We receive only a purchase confirmation token via RevenueCat; we never see your payment card details.

We do not collect your device identifiers, browsing history, contacts, camera, microphone, or any data beyond the above.

3. Legal Basis for Processing (GDPR / UK GDPR / Israel PPL)

Where applicable, we rely on the following legal bases to process your personal data:

• Contract performance — processing your birth data and generating readings is necessary to provide the service you signed up for.
• Legitimate interests — caching daily insights to improve app performance and reduce unnecessary data processing, provided this does not override your fundamental rights.
• Consent — storing conversation context summaries for personalised check-in notifications. You provide this consent by enabling "Remember what I share" in Settings. You may withdraw consent at any time and your data will be deleted immediately.
• Legal obligation — retaining subscription transaction records as required by applicable tax and accounting laws.

4. How We Use Your Information

• To calculate your natal chart, Big Three, daily energy scores, and numerology profile.
• To generate personalised AI Oracle responses via the Anthropic API.
• To cache your daily insight and numerology insight so the app loads faster and we avoid unnecessary AI calls.
• To send you personalised daily reading notifications and, with your consent, personalised check-in notifications based on events you mention in chat.
• To process and verify your Premium subscription status via RevenueCat.

We never use your data for advertising, third-party profiling, or sale to any third party.

5. Data Storage and Security

Your birth profile is stored locally on your device. The following data is additionally stored in Google Firebase (Google Cloud infrastructure):

• Your unique user ID and authentication token
• Chat message history (stored to maintain conversation context)
• Cached daily insights (auto-deleted after 7 days)
• Conversation context summaries (only if "Remember what I share" is enabled; deleted immediately upon disabling)
• Push notification token

All data transmitted between the app and our servers is encrypted using industry-standard TLS/HTTPS. Firebase data is protected by strict security rules that ensure each user can only access their own data.

If you uninstall the app, all locally stored data is deleted by the Android operating system. Firebase data is deleted when you request account deletion (see Section 8).

6. Third-Party Services

Celestia uses the following third-party services, each governed by their own privacy policies:

• Anthropic API — powers the AI Oracle chat. Your messages are processed by Anthropic's servers to generate responses. Anthropic does not use your messages to train their models by default. Privacy policy: anthropic.com/privacy
• Firebase (Google) — used for authentication, insight caching, and optional conversation context storage. Google's privacy policy: policies.google.com/privacy
• RevenueCat — manages subscription status and purchase verification. RevenueCat receives your purchase token and subscription state only. Privacy policy: revenuecat.com/privacy
• Google Play Billing — processes all in-app purchases. Google's privacy policy applies to all payment transactions.
• Expo / React Native — the app framework. No additional data is collected by the framework beyond what is described in this policy.

7. Push Notifications

With your permission, Celestia may send:

• Daily reading notifications — a personalised astrological insight delivered each morning.
• Check-in notifications — a personalised follow-up question based on events you mentioned in chat, delivered the following day (only if "Remember what I share" is enabled).

You can enable or disable all notifications at any time from your device's notification settings or within the app. We do not send marketing messages from third parties via notifications.

8. Your Rights

Depending on your location, you have the following rights regarding your personal data. To exercise any of these rights, contact us at tarotbysana@gmail.com. We will respond within 30 days (GDPR requires response within 1 month).

• Access — request a copy of all personal data we hold about you.
• Deletion (Right to Erasure) — request complete deletion of your account and all associated data including birth profile, cached insights, conversation context summaries, and push notification token. To delete your account, go to Settings → Delete Account in the app, or email us. We will confirm deletion within 7 days.
• Portability — request your data in a portable, machine-readable format.
• Correction — correct inaccurate data (you can edit your profile directly in the app at any time).
• Withdraw Consent — withdraw consent for conversation context storage at any time by disabling "Remember what I share" in Settings. All stored summaries are deleted immediately upon disabling.
• Object to Processing — object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
• Lodge a Complaint — if you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority. In Israel, you may contact the Privacy Protection Authority (PPA).

9. Data Retention

• Local device data — persists until you uninstall the app or delete your profile.
• Cached daily insights — automatically deleted from Firebase after 7 days.
• Conversation context summaries — retained until you disable "Remember what I share" or delete your account, at which point they are immediately and permanently deleted.
• Push notification token — retained until you disable notifications or delete your account.
• Subscription records — retained as required by tax and accounting law (typically 7 years), after which they are permanently deleted.

10. International Data Transfers

When you use the AI Oracle, your message is transmitted to Anthropic's servers located in the United States. When using cloud features, your data is stored on Google Firebase servers which may be located in the United States or other countries.

For users in the EEA, UK, or Israel, these transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) as required by GDPR Article 46. By using the app, you acknowledge that your data may be transferred internationally under these protections.

11. Children's Privacy

Celestia is not directed at children under the age of 13 (or 16 in jurisdictions where that age applies). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at tarotbysana@gmail.com and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features or legal requirements. When we do, we will update the "Last updated" date at the top of this page. For material changes — such as collecting new categories of data or sharing data with new third parties — we will notify you via an in-app notice at least 14 days before the change takes effect. Continued use of the app after the effective date constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact:

Celestia Support
Email: tarotbysana@gmail.com
Response time: within 3 business days (rights requests: within 30 days as required by law)