Privacy Policy

Celestium is an astrology app built to keep your chart yours. This policy explains what data the app keeps, what (little) leaves your device and why, and how to delete all of it.

The Short Version

• Your charts, journal, check-ins, rituals and draws live on your device, and in your own iCloud if iCloud is on. We can't read your iCloud.
• There are no accounts in the Celestium app. Nothing you do in the app is tied to who you are.
• Our servers see data only from features you choose to use (notifications, paid readings, feedback), plus identifier-free usage signals and a one-time ad-attribution token. Each is described below.
• You can erase everything the app holds from Settings.

Data on Your Device and in Your iCloud

Birth Chart Data

Your name, birth date, birth time and birth location are stored on your device. If iCloud is on for Celestium, your charts sync through Apple's iCloud (your private CloudKit database) so they follow you to your other devices. That database belongs to your Apple ID; Celestium's servers never see it.

Journal, Check-ins, Rituals and Draws

Journal entries, check-ins, ritual reflections, and tarot and I Ching draws are stored on your device and sync through your private iCloud database in the same way. They are never sent to Celestium's servers.

Location

Celestium asks for location to calculate relocated transits and planetary hours for where you are. Location is processed on your device and is not sent to us.

Your Own AI Key

If you add your own Anthropic API key, it is stored on your device (in app preferences) and never sent to Celestium's servers.

Data That Leaves Your Device, and Why

Anonymous Usage Signals

The app sends a small set of anonymous signals to our server, such as "the app was opened today", "a chart was created" or "a ritual was completed". They carry no identifiers: no user ID, no device ID, no advertising ID, no stored IP address, no fingerprinting. They never include birth data, charts or location, and the server rejects anything outside a short fixed list of event names. This is on by default; turn it off in Settings with "Share anonymous usage".

Crash and Performance Reports

When the app crashes, freezes or launches slowly, Apple's on-device diagnostics tell the app, and it sends us a short anonymous report: how long things took, in coarse ranges, and for a crash or freeze, which one place in our own code it happened in (by name, or by its position in the app's program file), with the kind of crash. Nothing else from the report leaves your phone: no device details, no memory contents, no identifiers, nothing about your chart. These reports travel with the anonymous usage signals above and turn off with the same switch.

How Long We Keep Usage Data

We delete anonymous usage signals and crash and performance reports 13 months after we receive them.

App Store Ad Attribution

If you installed Celestium from an Apple Search Ads ad, the app sends Apple's opaque attribution token at most once per install so we can tell which campaign worked. It reads nothing about your chart, birth data or location.

Time Zone and City Names

To confirm your birth city's time zone, the app sends that city's coordinates, with no name, date or time, to Apple's location service. If you allow location, the app also sends your current coordinates to Apple each time your location updates, to show your city's name. Neither request reaches our servers.

No Accounts in the App

There are no accounts in the Celestium app. Nothing you do in the app is tied to who you are.

Notifications

If you turn on notifications, the app registers an anonymous push token with our server, along with your time zone and language, so we can send New Moon and Full Moon alerts. It is not tied to you or to your chart. Your personal transit alerts are worked out and scheduled on your phone; your chart never leaves it.

Paid Readings (Natal Reading)

When you buy a Natal Reading, the app sends that chart's birth data, and the name you want on it, with your purchase receipt to our reading server, which writes your reading. We delete the birth data 7 days after your reading is delivered; the reading itself, which carries your name, is kept so you can open it again. The written narrative is composed with Anthropic's AI models. We use this data only to produce and deliver the reading you paid for.

Premium on the Web

You can create an account on celestium.me, with Sign in with Apple, to use Premium on the web. That account, and what it stores, lives on the website only; the app never signs in.

If you subscribe in the app, you can use Premium on celestium.me too: the app sends proof of your purchase to our server, which gives your browser a key. We keep only a fingerprint of that key, the App Store transaction id and when your subscription ends, not who you are. The key stops working when your subscription ends and is deleted 30 days later.

Couples Invites

If you invite someone to compare charts, the app encrypts your chart on your device with a one-time key and sends only the encrypted result through a relay. The key travels only inside the link you share; the relay can't read the chart, the blob expires on its own, and you can revoke an invite.

AI Synthesis (Your Own Key)

If you turn on AI Synthesis with your own Anthropic key, your chart data (name, birth date, time and location) goes directly from your device to Anthropic's API, never through Celestium's servers. The app asks for your consent before the first request. Anthropic's privacy policy governs those requests.

Feedback

If you send feedback, we receive what you choose to send: the tags you tap, any note you write, and your email only if you add it. If you add an email, we may write back and may add it to our Celestium email list; every email has an unsubscribe link. Feedback never includes chart, birth or location data.

On Our Website

celestium.me uses Google Analytics to count page visits and see which links and campaigns bring people to the site. It runs without cookies, so it can't recognize you from one visit to the next, and we never send it a user ID, your name, or any chart, birth or location data. Google signals and ad personalization are turned off. It doesn't run on your web account pages (sign-in and Premium on the web), on couples invite links, or on redeem pages. The app itself contains no analytics.

What We Don't Do

• No third-party analytics, tracking or advertising SDKs in the app
• No tracking across apps or websites
• No third-party crash reporting: crash reports go only to us, as described above
• No selling or sharing of your data for advertising

Service Providers

• Apple: iCloud sync, App Store purchases, push delivery, time zone and city-name lookups
• Clerk: sign-in for web accounts on celestium.me only; the app never uses it (privacy)
• Stripe: web subscription billing; we never store card data (privacy)
• Anthropic: writing paid readings; your own-key AI Synthesis (privacy)
• Fly.io and Cloudflare: host and route our servers and website
• Google: cookieless page-visit analytics on celestium.me only; the app never uses it (privacy)

Subscriptions

Payments are processed by Apple (in the app) or Stripe (on the web). We receive a purchase receipt to confirm Premium; we never see your payment details. Manage or cancel a subscription in the App Store, or in Settings.

Keeping and Deleting Your Data

• Erase all my data (Settings) erases everything Celestium holds on this device and in your iCloud. That covers charts, journal, check-ins, rituals, draws and progress, and it can't be undone.
• Notifications: turning notifications off in Settings, or Erase all my data, removes the push token from our server.
• Web accounts: to delete an account you created on celestium.me, email us (below).
• Deleting the app removes on-device data; iCloud copies remain until you erase them in Settings or in your iCloud settings.
• Billing records stay after you delete a web account: if you had a web subscription and cancelled it, we keep your Stripe subscription id and a note of which follow-up email we sent you, and when. Email us and we'll erase them.
• To have paid-reading data or feedback erased, email us (below).
• Need an export, or want us to erase something by email? Write to hello@withjhinna.com and we'll complete verified requests within 30 days.

Children's Privacy

Celestium is not directed at children under 13, and we do not knowingly collect information from children.

Changes to This Policy

We'll post changes here with a new date.

Contact

Questions about privacy? Reach us at hello@withjhinna.com.

← Back to Home