Privacy Policy

1. Data controller

The controller is EJ Software Solutions. For any privacy matter you can write to admin@ejsoftwaresolutions.com.

2. Data we process

• Account: email address and password (encrypted), or the basic details of your Google account if you sign in with Google.
• Profile: name, date, time and place of birth, gender, zodiac sign and profile photo, if you choose to provide them.
• Conversations and questions: the messages you write in the tarot chat, your questions to the stars and the generated answers.
• People you mention: if you add another person (for example, your partner), their name, date of birth and relationship to you. Only add third-party data if you are entitled to share it.
• Face photos: the ones you upload for the morphopsychology or compatibility analysis.
• Purchases: plan type, dates and the Google Play purchase identifier. We never receive your card details; Google handles payment.
• Usage and device: in-app usage events, advertising identifier, notification token, language and time zone.
• Technical errors: app crash reports (without screenshots).

3. Purposes and legal bases

• Providing the service (account, readings, chat, analyses, history): performance of the contract you accept when you sign up.
• Analysing face photos: your consent, given each time you upload a photo. You do not have to use this feature.
• Sending you a daily notification: your consent, given when you allow notifications. You can withdraw it in your phone settings.
• Managing subscriptions and purchases and preventing fraud: performance of the contract and our legitimate interest.
• Measuring and improving the app (analytics and errors): our legitimate interest; you can object by writing to us.
• Showing ads to free-plan users: your consent where the law requires it (for example, in the European Economic Area you are asked in the app).

4. Artificial intelligence

Luna, the app's tarot reader, is an artificial intelligence. To generate each answer we send OpenAI the text of your question, the latest messages of the conversation, relevant profile data (such as your sign or date of birth) and, for face analyses, a temporary link to the photo.

Under OpenAI's API terms, this data is not used to train their models and is kept for at most 30 days for abuse monitoring. We do not make decisions with legal effects based solely on automated processing.

5. Who we share data with

We do not sell your data. It is only shared with the providers we need to run the app, who act on our behalf:

• Supabase: database, authentication and file storage.
• OpenAI: generation of readings, answers and analyses.
• Google (Firebase Cloud Messaging, Google Analytics for Firebase, AdMob and Google Play): notifications, analytics, ads and payments.
• Sentry: technical error reports.
• Meta (Facebook SDK): measuring app installs from campaigns.
• Vercel: website hosting and cookieless web analytics.

We may also disclose data to authorities when required by law.

6. International transfers

Some providers are located in the United States or other countries outside yours. Those transfers rely on the European Commission Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, depending on the provider.

7. How long we keep data

• Chat conversations: automatically deleted after 90 days without activity. Each conversation keeps at most its 60 most recent messages.
• Profile, readings, analyses and photos: while you keep your account, or until you delete them.
• Purchase records: as long as legal and tax obligations require.
• Notification tokens: until they become invalid or you delete your account.
• Analytics data: according to the Google Analytics for Firebase settings, at most 14 months.

When you delete your account we erase all of the above, except data a law requires us to keep.

8. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw any consent at any time. Email admin@ejsoftwaresolutions.com from your account email address; we reply within one month at most.

If you are not satisfied with our answer, you can complain to your country's data protection authority.

9. Children

Lunazea is intended for people aged 18 or over. If we find that a minor has created an account, we will delete it.

10. Security

Communications are encrypted (HTTPS/TLS). In the database, each user can only access their own records. Provider keys are kept on the server and never inside the app. No system is infallible, but we review and strengthen these measures regularly.

11. How to delete your account

• In the app: open Profile, scroll to the Legal section, tap "Delete account" and confirm.
• By email: write to admin@ejsoftwaresolutions.com from your account email with the subject "Delete account – Lunazea". We delete it within 30 days at most.

Your profile, conversations, readings, analyses, photos, statistics and login data are permanently erased. Deletion cannot be undone.

Deleting your account does not cancel a Google Play subscription: cancel it in Google Play > Payments & subscriptions so it does not renew.

12. Changes to this policy

If we make important changes we will let you know in the app or on this page and update the date at the top.