NALORA ASTRO (“NALORA”, “we”) is operated by [Company legal name], [Registered business address]. This policy explains what we collect when you use our website and apps, why, who we share it with, and the choices you have. We are the controller of your personal information.
In short
- We use your birth details to calculate your chart and answer your questions. That's the product.
- We don't sell your information, and we don't use it for advertising.
- Your questions go to our AI provider to write answers — without your name, email, birth date, time or place.
- Product analytics never include your questions or your birth details.
- You can export or permanently delete your data from your Profile at any time.
1. What we collect
Birth details you give us: birth date, birth time (and whether it's exact, approximate — with an optional range — or unknown), and birth place. For the place we store its name, coordinates and time zone, taken from our place list rather than from your device's location. We never ask for your current location.
Optional profile details: a first name or nickname, up to two interests, and, if you choose to share them, your relationship status and career stage. We ask you not to enter medical, financial, political, religious or other sensitive information.
Your account: your email address, when you save your chart. Sign-in uses one-time email links, so there is no password. We store only scrambled (hashed) versions of sign-in links and session tokens.
What you do in NALORA: the questions you ask and the answers, your feedback on answers, daily insights, reports, share links you create, and memories — but only memories you have confirmed.
Other people you add: when you explore a relationship, you enter a nickname and that person's birth details. Only enter them if you have the person's permission — you confirm this before adding someone. Deleting the person deletes their details and any reports about them.
Purchases: your plan, subscription status and billing dates. Card details are handled by Stripe (web) or Apple (App Store); we never see or store them.
Technical information: your IP address is used briefly in memory to prevent abuse (rate limiting) and isn't stored with your profile. Our servers keep short logs with request IDs and error types — never the text of your questions or your birth details — for [30 days]. In the apps, your sign-in is kept in your device's secure keychain.
2. How we use it
- To calculate your chart. Planet positions are computed by our own calculation service from your birth details.
- To answer your questions and write readings, daily insights and reports (see section 3).
- To check every answer for safety and quality before you see it.
- To run your account: sign-in emails, free-question limits and subscriptions.
- To keep NALORA secure and prevent abuse.
- To understand how the product is used, through counts of events such as “chart created” or “question asked”. These never include your questions, answers or birth details.
We don't sell or rent personal information, we don't share it for cross-context behavioural advertising, and we don't use it to train AI models.
If you're in the EEA or UK, our legal bases are: performing our contract with you (the chart, answers, account and purchases); our legitimate interests in keeping the service secure and improving it (rate limiting, logs, aggregate analytics); and your consent where we ask for it (for example, before you add another person's details). You can withdraw consent at any time.
3. How AI answers work
Your chart is calculated by our own software, not by AI. To write an answer, we send our AI provider, Anthropic, a structured summary of the relevant chart factors (for example “Venus in Libra, square Saturn”), your question, the interests, relationship status and career stage you chose, short summaries of up to three of your recent questions, and any memories you've confirmed.
We do not send your name, email, birth date, birth time, birth place or the nicknames of people you add. Anthropic processes this data to provide the service to us under its commercial terms.
AI answers can be wrong. Astrology is a framework for reflection, not a scientifically established way to predict events.
4. Who we share it with
We use service providers that process data on our behalf, under contracts that limit their use of it:
- Anthropic — writes answers, readings and reports (section 3).
- Stripe — web payments, subscription billing, invoices and, where enabled, sales tax calculation. Stripe receives your email and billing details.
- Apple — App Store purchases. Apple handles payment as its own controller; we receive a signed record of your subscription.
- Resend — sends sign-in emails.
- PostHog — product analytics (event counts only, as described above), when enabled.
- Hosting and database providers — run our website, calculation service and database.
Share links are public. If you create a share card or share a report, anyone with the link can see it. Share cards never include names, birth dates, times or places. A shared report shows its full text. You can revoke any share link from your Profile.
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or acquisition (in which case this policy continues to apply).
5. How long we keep it
We keep your chart, questions and other account data until you delete them or your account. Anonymous charts (created without an email) are linked to a sign-in credential that expires after 180 days of not being renewed. Sign-in links expire after 15 minutes and account sessions after 30 days.
When you delete your account, we delete your profile, chart, questions, answers, relationships, reports, memories, daily insights and share links straight away, cancel any web subscription, and remove your identity from analytics events. Stripe keeps its own payment records, which we retain where the law requires us to keep financial records. App Store subscriptions are billed by Apple, so cancel those in your device Settings first.
6. Your rights and choices
- Export: download everything we hold about you as a file from your Profile.
- Delete: permanently delete your account from your Profile, in the web or the app.
- Correct: change your birth details on the web (your chart is recalculated).
- Depending on where you live, you may also have the right to access, correct, restrict or object to processing, and to data portability. You can complain to your local data protection authority.
- To use any right, or if you can't use the in-product tools, email [privacy@your-domain]. We won't treat you differently for exercising your rights.
California residents: we collect the categories described in section 1 for the purposes in section 2. We don't sell or share personal information and don't use sensitive personal information to infer characteristics about you.
7. Children
NALORA is for people aged 13 and over. We don't knowingly collect information from anyone younger — the sign-up flow stops if a birth date shows someone is under 13. If you believe a child has given us information, email [privacy@your-domain] and we will delete it.
8. Security
Data is encrypted in transit. Sign-in links and session tokens are stored only in hashed form, sign-in links in the app work only on the device that requested them, and access to our systems is restricted. No system is perfectly secure, but we work to protect your information and will tell you about a breach where the law requires.
9. International transfers
Our providers may process data in the United States and other countries. Where the law requires, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
10. Cookies and device storage
We use only what the product needs. There are no advertising or third-party tracking cookies.
| Name | Purpose | Lasts |
|---|---|---|
| nalora_sid | Keeps your chart before you add an email | 180 days |
| nalora_session | Keeps you signed in | 30 days |
| nalora_ref | Remembers which share link brought you, until you create a chart | 30 days |
| Browser session storage | A random analytics session ID and a suggested question you tapped | Until you close the tab |
| Browser local storage | Whether you've visited before | Until cleared |
11. Changes
If we make material changes, we'll update the date above and tell you in the product or by email before they take effect.
12. Contact
[Company legal name], [Registered business address]. Email: [privacy@your-domain].