Where an astrology app does its computing sounds like a detail for engineers. It quietly decides two things at once: who gets to see your birth data, and whether your chart is real.
The privacy half
Your birth date, time, and place are among the more identifying facts about you. An app that computes in the cloud sends that data off your device to do the work. An app that computes on your device does not need to. The chart is calculated where you already are, so the math never depends on shipping your birth details off to a server first.
Why birth data is worth protecting
A birth date on its own is shared with millions of people. Add the time and the town and it narrows fast, and add a name and it points at one person. Banks, doctors' offices and account recovery forms still use date and place of birth to confirm who you are. That is reason enough to treat a birth chart as personal data rather than a fun fact, and to prefer an app that does not need to collect it in the first place. Unlike a password, you cannot change your birth date after a leak.
The accuracy half
The same choice tends to protect accuracy. When a chart is worked out locally by a real astronomical engine, it is derived from actual positions rather than pulled from a generic horoscope feed or improvised by a language model. On-device, done properly, means the numbers are genuinely yours. Not a lookup keyed to your sun sign, dressed up to feel personal; it is the difference that decides whether an astrology app is accurate at all.
What leaves your phone, and when
On-device should mean nothing leaves unless you choose it, and you know what it is. Beyond Apple's own purchase handling, most of what can leave the phone in Celestium is optional, and the privacy policy lists it. Three matter most here. The app sends a short list of anonymous usage signals, like the app being opened, with no user ID, device ID or account attached, and you can switch them off in Settings. If you turn on AI synthesis, your chart details go straight from your device to Anthropic using your own API key, after a consent prompt that names the data and the destination.
Inviting someone to compare charts works differently again. Your chart is encrypted on your device before it goes anywhere, and the key travels only inside the link you share, so the relay that carries it cannot read it.
Two things go to Apple without a tap. If iCloud is on, your saved charts sync through your own private iCloud database. And to confirm your birth city's time zone, the app sends that city's coordinates, with no name, date or time, to Apple's location service. We are replacing that lookup with one that runs on your device.
Nothing on that list is your chart in readable form reaching a Celestium server. The full detail is in our privacy policy.
Where AI fits, honestly
None of this rules out AI. It puts it in its place. A synthesis layer can be genuinely useful for turning a dense chart into plain language, as long as it interprets positions that were computed correctly rather than inventing them. The trustworthy arrangement keeps the two jobs separate and asks first: the astronomy is exact and local, and any AI works on top of it, never underneath it.
What on-device costs
There is a real trade here, and it is worth naming. Your saved charts live on your device, and in your own private iCloud if iCloud is on. Without iCloud, deleting the app deletes them. There is no account to recover them from, because there is no account. For most people that is the point. It is still worth knowing before you enter the birth details of everyone you love. It also means nobody on our side can look at a chart that seems wrong. The fix starts with you, checking the birth time and place you entered.
Common questions
Does Celestium see my birth data? No. Your birth details are stored on your device and your chart is computed there. Celestium's servers can read your birth data only if you buy a Natal Reading, and we delete it 7 days after the reading is delivered. A couples invite passes through our relay encrypted, so we cannot read it. To confirm your birth city's time zone, the app also sends that city's coordinates, with no name, date or time, to Apple's location service. If you choose AI synthesis, the request goes directly from your device to Anthropic with your own key, and Celestium never sees it.
Is AI astrology safe for my data? It depends on where the AI runs and what it receives. Many AI astrology apps send your birth details to their own servers to generate readings. A safer arrangement computes the chart locally, asks before any data leaves, and sends it only to the provider you chose. Read an app's privacy policy for the word consent and a named destination.
Does computing on my phone make the chart less accurate? No. The math behind a birth chart is light work for a modern phone. Celestium's engine runs on your device and is checked against the Swiss Ephemeris across dates from 1900 to 2090. Where the computing happens decides who sees your data, not how good the numbers are.
Why does an astrology app ask for my location? Some features, like relocated transits and planetary hours, depend on where you are right now rather than where you were born. In Celestium that location is processed on your device and never sent to us. To show your city's name, the app sends your coordinates to Apple's location service each time your location updates.
That is how Celestium is built. Every position is computed on your device by a verified engine rather than fetched from a feed. Its AI synthesis is optional, consent-gated, and runs on your own key, and it only ever interprets engine-verified positions; it never calculates them. The full design is on our Methodology and Accuracy page. Celestium is free on the App Store for iPhone, iPad, and Mac.