Privacy Policy
Last updated 25 July 2026
LEGAL REVIEW REQUIRED — draft, not approved by counsel
This document was written to describe what the product actually does, accurately and in plain language. It has not yet been reviewed by a lawyer for compliance with GDPR, UK GDPR, CCPA, PIPEDA, Law 25 (Quebec), LGPD. It is published in this state deliberately rather than withheld, because operating without a stated policy would be worse. It will be replaced by a reviewed version before any paid acquisition begins.
The short version
We collect what the product needs to work and nothing we cannot justify to you in a sentence. We do not sell personal data. We do not buy it. Analytics is off unless you turn it on, and everything we hold can be exported or deleted by you, from your account page, without asking us.
What we collect
- Birth details — date, time (or the fact that you do not know it) and place. This is the input to every calculation in the product. Without it there is no chart.
- Your name and email address — your name so readings are written to you, your address so your account exists and so we can send the 24-hour notice before any charge.
- Quiz answers— the seven questions at the start, used to frame your readings. While you are taking the quiz they live in your own browser's storage; they are cleared when the funnel completes.
- Subscription state— tier, period dates and the provider's reference. Card details are never sent to us: they go directly to the payment provider, and we never see or store a card number.
- Product usage — which screens were reached, so we can tell where the product is confusing. Counted, not profiled.
Cookies and storage
Strictly necessary only, unless you say otherwise. Those are: a sign-in cookie after you authenticate, your quiz answers while you are answering them, your theme choice, and your answer to the consent banner itself.
The product analytics SDK — which sets its own cookies and records interactions — loads only if you choose “Allow analytics”. Choosing “Essential only”, or closing the banner without choosing, means it never loads at all. Funnel counters sent to our own server carry a random per-visit identifier that dies with the browser tab and is never linked to you across sites.
Who else sees it
Only processors we need to operate: the payment provider, the transactional email provider, the hosting provider, the error reporter, and the model provider that generates interpretation text. Text sent for interpretation is structural — a sign, a house, an aspect — and deliberately carries no name, email or identifier, which is also why one generated reading can be reused across everyone with the same placement.
How long we keep it
For as long as your account exists. When you delete your account, the account is marked for deletion immediately, you are signed out at once, and the data is purged by the deletion job. Billing records are retained where tax and accounting law requires it.
Your rights
Access, correction, deletion, portability and objection. Two of these are buttons rather than requests: your account page exports everything we hold as a JSON file and deletes your account outright. For anything else, write to help@heyselene.app.
If you are in the EEA or the UK, you also have the right to complain to your local data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we do not discriminate against anyone for exercising their rights.
Children
This product is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has an account here, write to help@heyselene.app and we will remove it.
Attribution
Place data © GeoNames, CC BY 4.0.
Changes
If this policy changes in a way that affects what we collect or why, we will email you before it takes effect rather than silently updating the date at the top.