Privacy Policy

1. In short

The account is created without registration, under a pseudonymous identifier — we don't ask for your name, email or phone number. The data you enter (name if you wish, date/time/place of birth, questions, dreams) is stored on your device and in your private cloud copy in the EU that only you can see. We don't sell data and there are no ads in the app. Measuring the performance of our own ads (Meta) works only if you turn it on yourself — see “Ad measurement”.

2. Controller

The data controller is 365 LAB DOO, Belgrade, Serbia; the contact address is shown in your Profile and at the end of this text. The processing of data of persons in the European Union is governed by the General Data Protection Regulation (GDPR), and of persons in Serbia by the Serbian Personal Data Protection Act. We do not have a representative in the European Union — all data-related requests are handled directly by the controller at the contact address. You can lodge a complaint with the supervisory authority of your country or with the Commissioner for Personal Data Protection in Serbia.

3. What we process

Data you enter yourself: name or nickname (it can be made up), date of birth, optionally time and place of birth, gender, questions and dream descriptions. Data on people close to you that you add yourself under "My People": name, date, optionally time and place of birth, and optionally that person's gender and their relationship to you (partner, crush, friend or family) — only you add them, and you confirm that you have that person's consent (for a child, as a parent or guardian). Gender and relationship type are optional and exist solely so the reading doesn't have to guess: without them, the text assumes neither that person's gender nor that you are romantically involved. We do not pass them on to any third party and they are not used for ad measurement. All of this data is used only for your comparative readings, is stored with your profile, and is deleted when you remove it or delete your account. Data the app creates: saved readings, the "living file" (the themes of your questions — you can see it in full within the app, and it can be turned off and deleted), a pseudonymous account identifier, daily usage counters to prevent abuse, a technical error log (screen, app version and a technical description of the error, without content), a push notification token if you use Telepathy and — if you buy a subscription or credits — purchase status linked to the pseudonymous identifier. To prevent abuse of gift credits (reinstalling to get new credits), the app sends the server a device identifier, which we keep in one-way encrypted form for no more than 12 months. We do NOT collect: email, phone number, location, contacts. The device advertising identifier is used only if you enable ad measurement (see "Ad measurement"). We do not store the photo of your cup — it is processed immediately, only for that single reading, and is never written anywhere (see "AI processing").

4. Why and on what legal basis

For running the app (profile, readings, credits, Telepathy, notifications you turn on yourself): performance of the contract with you. For the error log, protection against abuse and usage counting: our legitimate interest in keeping the app working and free from abuse — you can object to this processing. For ad measurement (Meta): your consent, which you can withdraw at any time. The “living file” is the personalization of readings based on your themes and questions; it makes no decisions with legal effects on you, and you can turn it off on the “What it knows about you” screen.

5. Where it's stored and transfers outside the EU

On your device (primarily) and in a private cloud copy (Google Firebase, EU region — europe-west1); security rules guarantee that only your account can read and write your data. The texts are written by Anthropic, PBC (USA) as our processor, on the basis of the European Union's standard contractual clauses. Your subscription and credit status is managed for us by RevenueCat, Inc. (USA) — it receives only your pseudonymous account identifier and purchase data; payment is processed by Google Play (Google Ireland Limited). Neither we nor RevenueCat can see your card details. Ad measurement, if you turn it on, is processed by Meta Platforms Ireland Limited as an independent controller.

6. AI processing

For written readings the app sends to our server (EU) the astrological facts calculated from your birth date, your question or dream and, if enabled, a summary of your living file. For a coffee cup reading, a photo of the cup that you choose yourself is also sent — without location data; it is used solely for that one reading and is not stored by us; only the text of the reading remains in your history. The server forwards everything to Anthropic (Claude API), which writes the text. Anthropic doesn't use your data to train models; it may retain inputs and outputs for at most 30 days for safety checks and then deletes them — this also applies to the photo of the cup.

7. Telepathy

If you start Telepathy, the other person who enters your code can see your name (as you entered it), your date of birth and the daily states you enter, and you see theirs. That data is stored in our database in the EU for as long as the pair lasts, and is deleted when either of you leaves the pair, deletes their account, or after 180 days without activity. Give your pair code only to the person you want to connect with. For the “you're connected” notification your phone gives us a push notification token, which we delete together with your account.

8. Ad measurement

Measuring the performance of our ads works only with your consent — a switch in the intro or in your Profile, off by default. When you turn it on, the app sends Meta Platforms Ireland signals: the event name (for example tarot opened or offer shown), the device's advertising identifier and the purchase amount. Neither your name, nor your date of birth, nor the content of your questions and dreams is sent. Meta processes that data as an independent controller under its own privacy policy. You withdraw consent with the same switch; from that moment nothing more is sent, and the app works exactly the same.

9. Deletion, retention periods and your rights

You can see and change all of it in the app. The “Delete all my data” button (Profile) immediately deletes your profile, readings, “My People”, living file, your Telepathy pair, notification token, counters and your account — from the device and from the cloud. Without any personal content we keep only: purchase records that Google Play and RevenueCat retain under tax and accounting regulations; the device fingerprint, unlinked from any account, for up to 12 months so that deletion can't be used to claim gift credits again; the technical error log without account identifiers for up to 90 days; reports of disputed AI content without account identifiers. Telepathy pairs without activity are deleted after 180 days, and push tokens that haven't been refreshed after 90 days. You have the right of access, rectification, erasure, restriction of processing, portability of the data you entered and objection to processing based on legitimate interest; we respond within 30 days. Send your request to the contact address in your Profile; you also have the right to lodge a complaint with a supervisory authority.

10. Children and the nature of the content

The app is intended for adult users (18+) and is not intended for children; age is checked from the date of birth at first entry. All interpretations are for entertainment and self-reflection — they are not facts, event predictions, or a substitute for medical, legal, or financial advice. Don't rely on them when making important life, health, legal or financial decisions.

11. Reading memory on the server

So the AI astrologer knows what it has already told you and doesn't repeat itself, our server writes a short trace into our database after every AI reading (Google Firebase, EU region — europe-west1), under your pseudonymous identifier: the type of reading, the date, the language, our line of advice and our closing question, the cards drawn, the symbols from the cup, the transit of the day or the dream motifs from our symbol database — never the full text of the reading and never the text of the dream. With tarot, the cup and conversation, the topic of your question is also written, shortened to 120 characters; the writer sees it for at most 7 days, and if the question contains words about health, pregnancy, death, sexual life, faith or politics, it isn't written at all. The whole trace is deleted after 90 days. Before every new reading, a summary of the trace goes to the writer of the text (Anthropic) together with the other facts, in the same way and on the same basis as the dossier — as part of the personalized reading service. The "Personalization" switch on the "What it knows about you" screen turns off both the dossier on your device and this trace: from that moment nothing new is written or read, and existing traces expire or are deleted immediately along with the account. The trace isn't displayed in the app; you receive it on request, at the contact address from your Profile, within 30 days. Whatever you yourself tell the astrologer about your life in conversation (who is who to you, the situation, a deadline) is kept as short facts for 90 days, or 7 days if you choose that on the "What it knows about you" screen; there, too, nothing is written about health, pregnancy, death, sexual life, faith or politics.

Contact

365 LAB DOO · Stevana Filipovića 100G, Beograd (Čukarica), Serbia · Registration no. 20854766 · Tax ID 107699456 · kontakt@astro365.app · Delete account