Privacy Policy

1. Who we are

Lumen ("we", "our", "us") is an astrology and tarot app for iOS. This Privacy Policy explains what we collect, why, and the controls you have. We are the data controller for your account data. Lumen is designed to be data-minimal: we collect as little as we need to draw your chart and let you keep it across devices.

2. Information we collect

• Anonymous device identifier: a randomly generated install ID used to associate your subscription entitlement and (optionally) sync your saved charts. Not tied to your name or email by default.
• Birth data: the date, time, and place you provide for yourself and any additional charts (e.g. partner, family). Stored locally on your device by default. If you enable cloud backup, an encrypted copy is uploaded to our server.
• Saved readings & tarot history: charts you've computed, transit notes you've saved, and tarot spreads you've drawn. Stored locally; backed up only if cloud backup is on.
• Purchase history: subscription entitlement status from RevenueCat / Apple. We do not see your card details.
• Diagnostics: anonymous crash logs and aggregated usage events (you can opt out in Settings).

We do not include third-party advertising SDKs, third-party analytics SDKs, IDFA tracking, or marketing pixels.

3. How we use your data

• Compute your natal chart and ongoing transit readings.
• Persist your saved charts and tarot spreads across your devices when backup is enabled.
• Send transactional push notifications you've opted into (daily horoscope, new-moon nudges, transit reminders).
• Enforce subscription entitlements and prevent abuse.
• Improve interpretation quality and fix bugs.
• Provide customer support when you contact us.

We do not sell your data, share it with advertisers, or train third-party AI models on your birth data or saved readings.

4. Sub-processors

• RevenueCat — subscription receipt validation and entitlement state.
• Apple (APNs) — push notification delivery.
• Hetzner Cloud (EU) — application servers and optional encrypted backup hosting.

Astrological calculations (Swiss Ephemeris) and tarot card interpretations are performed on-device or on our own servers. We do not pipe your birth data to third-party AI providers.

5. Where your data is stored

Birth data and saved readings live on your device by default. If you turn on cloud backup, an encrypted copy is stored on our servers in the European Union (Hetzner, Germany). Subscription entitlements pass through RevenueCat (US/EU). Data may therefore be transferred outside your country of residence; where required, we rely on Standard Contractual Clauses.

6. How long we keep it

• On-device data: kept until you delete the app or clear it from Settings.
• Cloud-backup data: kept while backup is enabled; removed within 30 days of disabling.
• Diagnostic events: 90 days, then aggregated.
• Backups: encrypted database snapshots retained for 30 days.
• Deletion requests: processed within 30 days, except where law requires us to retain receipts.

7. Your rights (GDPR, UK GDPR, CCPA)

You can exercise the following rights at any time, directly inside the app under Settings → Privacy, or by emailing us:

• Access & portability: tap "Export my data" to receive a JSON archive with your charts, readings, and account info.
• Erasure: tap "Delete my data" — local data is wiped immediately, cloud backups within 30 days.
• Rectification: edit your birth profile or any saved chart directly in-app.
• Object / restrict: contact us at the email below.
• Deletion request by email: write to support@lumen.app with subject "Delete my data" — we'll confirm within 72 hours and complete within 30 days.
• Lodge a complaint with your local supervisory authority.

8. Children

Lumen is rated 12+ and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

9. Security

Data in transit is encrypted with TLS 1.3. Cloud backups are encrypted at rest using AES-256. Refresh tokens are stored as salted hashes. We follow OWASP top-10 mitigations and rotate secrets quarterly.

10. Changes

We may update this policy. Material changes will be announced in-app at least 14 days before they take effect.

11. Contact

Questions or rights requests: support@lumen.app