Privacy Policy

Luminary (“we”) is an astrological life-coaching product at theluminary.xyz and in the Luminary iOS app. This policy describes what we collect, why, who processes it, and how you can export or delete it.

What we collect

• Account: email, password hash (held by Supabase Auth), optional Google or Apple account id if you use those sign-in options.
• Chart: birth date, optional birth time and location, computed Sun / Moon / Rising, display name and optional username.
• Practice data you create: journals, chats, goals, breathwork sessions, relationships you enter, briefings.
• Billing: Stripe customer and subscription ids, plan tier on the website. On iOS, App Store / StoreKit purchase tokens and original transaction ids. We do not store full card numbers.
• Optional newsletter email if you subscribe from a public page.
• Technical: IP-derived rate-limit keys, route-visit counts for navigation, Vercel request logs, Google Tag Manager / Analytics page-view data (pages visited, approximate location, device and browser), and Google reCAPTCHA scores used to block bots on sign-up, sign-in, password reset, and newsletter forms.

The iOS app collects the same account, chart, and journal data through our public API. It does not keep a separate personal-data store.

How we use it

To run your account, compute a natal chart, generate AI readings grounded in that chart, enforce plan quotas, process payments, send transactional mail (confirm, reset), (if you opt in) a newsletter, and measure how the site is used. Birth date, time, and location are used to compute a natal chart, not for advertising. We do not sell personal data.

AI processing

Journal text, chat messages, and chart context are sent to model providers (currently Anthropic and Google Gemini) to generate readings. Do not put secrets or anyone else’s private data into journals or chats. Model output is for self-reflection. It is not medical, legal, financial, or professional advice.

Who processes data

• Supabase (Postgres, Auth, storage) — us-east-1.
• Vercel (app hosting and functions).
• Stripe (payments on the website).
• Apple (Sign in with Apple; App Store subscriptions on iOS).
• Resend (email).
• Anthropic and Google (AI generation).
• AstroAPI.io (ephemeris). Nominatim / OpenStreetMap (geocoding).
• Google Tag Manager and Google Analytics (site usage measurement).
• Google reCAPTCHA (bot protection on public forms).

Access control

User tables use Postgres row-level security scoped to your account. Public share pages expose only a fixed projection (for example username and Big Three), never birth time or journals.

Retention and deletion

We keep your data while the account exists. You can export a copy and delete the account from Coordinates (web) or Profile → Delete account (iOS app). Deletion removes the Auth user; profile and related rows cascade. If you revoke Sign in with Apple or delete your Apple Account, Apple notifies us and we delete the matching Luminary account. Stripe may retain invoices as required by payment law. Newsletter signups can be removed by emailing us. Account deletion is also described at /support, the page App Store review uses for deletion instructions.

Cookies

We use essential cookies for sign-in (Supabase session) and a local sidebar preference. Google Tag Manager loads Google Analytics, which sets first-party analytics cookies (for example _ga) to measure how the site is used. Google reCAPTCHA may set cookies used to distinguish people from bots; Google's Privacy Policy and Terms of Service apply to that widget. We do not run third-party advertising cookies.

Apple App Privacy

We do not use the advertising identifier (IDFA). Google Tag Manager and Google Analytics run on the website only — the native iOS app must not embed them. If we later add native crash reporting, those logs would be listed here.

Data collected to run the iOS app, linked to your account, not used for tracking:

• User ID
• Email address
• Name
• Date of birth (natal chart)
• Physical address (birth place as you type it — not GPS)
• User content (journal, chat, goals, relationships)
• Purchase history (App Store original transaction id and/or Stripe)

Children

Luminary is for people 18 or older. We do not knowingly collect data from children.

Contact

Privacy questions: hello@theluminary.xyz. See also the Terms of Use and Support.