Privacy Policy

We collect the following information:

• Account information: your name and email address. Authentication credentials are stored in encrypted form only — we cannot access, view, or recover your password under any circumstances.
• Profile information: date of birth, time of birth (optional), place of birth (optional), gender at birth, and zodiac sign — used solely to personalize your readings.
• Journal entries and personal reflections you write within the Service.
• Payment information: processed securely by our payment processor. We do not store full payment card details on our servers.
• Usage data: features used, readings generated, and time spent on the Service.
• Device information: browser type, operating system, device type, and IP address.
• Log data: server logs including access times and error reports.
• Cookies: used for session management and anonymous analytics only.

If you sign in with Google, we receive your name and email address from Google in accordance with your Google account permissions.

We do not sell your personal information. We share data only with trusted third-party service providers who help us operate the Service:

• Supabase — database hosting and user authentication.
• Anthropic — AI API for generating personalized readings. Only card context and reading parameters are sent — no personally identifying information is transmitted to Anthropic.
• Resend — email delivery service for transactional emails.
• Payment processors — to process subscription and one-time payments securely.

All service providers are contractually required to protect your information and use it only for the purposes we specify. We may disclose your information if required by law, court order, or government regulation. In the event of a business acquisition or merger, we will notify you by email before your data is transferred.

You have the following rights regarding your personal information. To exercise any of them, email hello@mslumira.com and we will respond within 30 days:

• Right to access: request a copy of all personal information we hold about you. We will export and send it to you within 30 days.
• Right to correction: request correction of inaccurate or incomplete information in your profile. You can also update most information directly in your account settings.
• Right to deletion: request permanent deletion of your account and all associated data. We will process this within 30 days.
• Right to data portability: request a machine-readable copy of your data in CSV or JSON format.
• Right to object to processing: if you wish to object to a specific way we use your data — for example analytics or service improvement — email hello@mslumira.com describing what you object to and we will accommodate your request where technically feasible.
• Right to withdraw marketing consent: every marketing or promotional email we send includes an unsubscribe link at the bottom. Clicking it immediately removes you from all future marketing communications. Transactional emails related to your account such as security notices or subscription confirmations are not affected.