Privacy Policy
Last updated: November 4, 2026 (draft)
DRAFT — not legal advice and not yet in force. The owner must complete the business details, choose the policies marked “Owner decision”, and have this page reviewed for each launch market (e.g. U.S. federal and state rules, UK) before public launch.
This policy explains what [Legal entity name — owner to provide] (“we”) collects when you use Alcyona, why, and the choices you have. Contact: [Support email — owner to provide].
What we collect
- Birth details you enter: optional name/nickname, date, local time (or “unknown”), birthplace from our list (with its coordinates and time zone).
- Account data: your email address (for sign-in and account emails), your password if you set one (stored by our authentication provider only as a one-way hash; we never see it) and your display time zone.
- Charts and readings we calculate from your birth details, including saved results of catalog sections (Solar and Lunar Returns, numerology, tarot draws, lesson progress).
- Journal entries you write: notes on saved results and dream entries with their feelings and tags. They are private to your account.
- Other people’s birth details you add for chart comparison, which you confirm you may use with that person’s agreement, and a full name you type for name numerology (stored only with that calculation).
- Billing records: our payment provider’s customer and subscription IDs and status. Card details are handled by Stripe and never reach our servers.
- Usage events, only if you allow analytics: page types and funnel steps, without your birth data, name, email or reading texts.
- Attribution, only if you allow it: campaign parameters (UTM) and, with ad-measurement consent, ad click IDs.
- Security data: keyed hashes of IP addresses for rate limiting (raw IPs are not stored by the app).
What we don’t do
- We don’t ask for your current location.
- We don’t send birth data, names, emails or reading texts to analytics or advertising platforms.
- We don’t use ads personalization or remarketing. We don’t sell personal information.
- We don’t send your birth data to third-party AI services.
Service providers
[Owner to confirm the final list] Database and authentication hosting (Supabase), payments (Stripe), web hosting [provider], email delivery for sign-in links [provider], and Google Analytics 4 only with your consent.
Retention
- Charts calculated without an account are deleted after 7 days.
- Account data is kept until you delete your account.
- Billing records may be kept by our payment provider as required by law. [Owner decision: our own retention period for billing and analytics records.]
Your choices and rights
- Change analytics choices anytime via “Privacy choices” in the footer.
- Edit your birth details in Account; delete your account and data in Account → Privacy. Saved results, notes, dreams and added people can also be deleted one by one in their sections.
- [Owner to review] Additional rights may apply depending on where you live (for example, under California law or UK GDPR). Contact us to exercise them.
Age
[Owner decision] Alcyona is not directed to children under 13. Subscriptions require the account holder to be an adult or have a parent’s permission.