Privacy Policy

1. Who we are

The data controller responsible for your personal data is RS Labs Dev (Rasul Sönmez). You can contact us about anything related to privacy at rslabsdev@gmail.com.

2. Data we collect

Depending on how you use the App, we process the following categories of personal data:

• Account data: your name or display name, email address and, if you choose to provide it, your phone number.
• Sign-in identifiers: the identifiers provided by Apple or Google when you sign in with those services.
• Birth data: your date, time and place of birth, used to calculate your horoscope and natal chart.
• Your content: the questions you ask, dream descriptions, chat messages, and the photos of coffee cups or palms you upload for a reading.
• Reading history: the readings you have requested and the interpretations generated for you.
• Purchase data: your purchase and transaction history and your coin balance. We do not receive or store your full payment card details; payments are processed by Apple or Google.
• Device and diagnostic data: device identifiers and basic diagnostic information (such as app version, operating system and error logs).

The energy journal feature is stored only on your device. We do not receive or store its contents on our servers.

3. How we use your data

• To provide the readings and features you request, including generating AI-based interpretations.
• To create and manage your account and let you sign in.
• To process in-app purchases and keep your coin balance accurate.
• To keep the App secure, prevent fraud and abuse, and diagnose technical issues.
• To respond to your requests and provide customer support.

We do not use your data for advertising tracking, we do not sell your personal data, we do not share it for cross-context behavioral advertising, and we do not work with data brokers.

4. Legal bases (EEA, UK and similar laws)

• Performance of a contract: to provide the App, your account, readings and purchases.
• Consent: where required, for processing the photos you upload and your birth data. You can withdraw your consent at any time; this does not affect processing carried out before withdrawal.
• Legitimate interests: to keep the App secure, prevent fraud and improve reliability, where these interests are not overridden by your rights.
• Legal obligation: to keep transaction records and comply with applicable laws.

5. Service providers we share data with

We share personal data only with the following service providers, and only as necessary to operate the App:

• Anthropic and OpenAI (AI providers): process your questions, messages, dream text and photos to generate your readings. Under their API terms, data submitted through the API is not used to train their models.
• Adapty: manages in-app purchases and coin transactions.
• Apple and Google: provide sign-in and process in-app payments.
• Hostinger: hosts our servers and databases.

We may also disclose data where required by law, to protect our rights or the safety of users, or in connection with a business transfer, subject to this policy.

6. International transfers

Some of our service providers process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) to protect your data during these transfers.

7. How long we keep your data

We keep your personal data for as long as your account is active. If you request account deletion, we delete your personal data within 30 days. Transaction records are kept for the period required by applicable tax and accounting laws and then deleted.

You can request deletion of your account at any time — see Delete your account.

8. Your rights

Depending on where you live, you have the following rights. To exercise any of them, email rslabsdev@gmail.com. We may need to verify your identity before responding.

• EEA / UK (GDPR): access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent at any time, and the right to lodge a complaint with your local data protection supervisory authority.
• California (CCPA/CPRA): the right to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.
• Brazil (LGPD): confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, withdrawal of consent, and the right to petition the ANPD.

9. Children

Madame Luna is intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

10. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest for secrets and credentials, and access controls. No system is completely secure, but we work to protect your information and to respond promptly to any incident.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date and, where changes are significant, notify you in the App or by email.

12. Contact

RS Labs Dev (Rasul Sönmez) — rslabsdev@gmail.com