Privacy Policy

Last updated 1 September 2026

LEGAL REVIEW REQUIRED — draft, not approved by counsel

This document was written to describe what the product actually does, accurately and in plain language. It has not yet been reviewed by a lawyer for compliance with GDPR, UK GDPR, CCPA, PIPEDA, Law 25 (Quebec), LGPD. It is published in this state deliberately rather than withheld, because operating without a stated policy would be worse. It will be replaced by a reviewed version before any paid acquisition begins.

The short version

We collect what the product needs to work and nothing we cannot justify to you in a sentence. We do not sell personal data. We do not buy it. Analytics is off unless you turn it on, and you can export or delete everything we hold, from inside the product, without asking us.

What we collect

Your birth details — date, time (or the fact that you do not know it) and place. This is the input to every calculation in the product. Without it there is no chart.
People you add— with a subscription you can save up to 24 other people: a name, an optional note on who they are to you (“my sister”), and their birth date, time and place. The birth details are what their charts are computed from; the name and the note are there so your lists and readings can say who is who. You enter all of it yourself, we ask you to have that person's permission first, and none of it is visible to anyone but you. These people have no account here, and we never contact them.
Your name and email address — your name so readings are written to you, your address so your account exists and so we can send the 24-hour notice before any charge.
Quiz answers— the seven questions at the start, used to frame your readings. While you are taking the quiz they live in your own browser's storage; they are cleared when the funnel completes.
Subscription state— tier, period dates and the provider's reference. Card details are never sent to us: they go directly to the payment provider, and we never see or store a card number.
Product usage — which screens were reached, so we can tell where the product is confusing. Counted, not profiled.

Cookies and storage

Strictly necessary only, unless you say otherwise. Those are: a sign-in cookie after you authenticate, your quiz answers while you are answering them, your theme choice, and your answer to the consent banner itself.

The product analytics SDK — which sets its own cookies and records interactions — loads only if you choose “Allow analytics”. Choosing “Essential only”, or closing the banner without choosing, means it never loads at all. Funnel counters sent to our own server carry a random per-visit identifier that dies with the browser tab and is never linked to you across sites.

Who else sees it

Only processors we need to operate: the payment provider, the transactional email provider, the hosting provider, the error reporter, and the model provider that generates interpretation text. Text sent for interpretation is structural — a sign, a house, an aspect — and deliberately carries no name, email or identifier, which is also why one generated reading can be reused across everyone with the same placement.

How long we keep it

For as long as your account exists — at most. Some of it goes sooner: remove a person you added and their details go with them, and a chart nothing references any more is swept by the nightly clean-up about thirty days later. When you delete your account, the account is marked for deletion immediately, you are signed out at once, and the data is purged by the deletion job. Billing records are retained where tax and accounting law requires it.

Your rights

Access, correction, deletion, portability and objection. Two of these are buttons rather than requests: your account page exports everything we hold as a JSON file and deletes your account outright. For anything else, write to help@heyselene.app.

If you do not have an account here but someone added your birth details to theirs, those rights are still yours. The honest limit: a name alone is rarely enough for us to tell which saved record is you, so the fastest route is to ask the person who added you — they can remove you in a moment, and that deletes your details from their account and from every group. If asking them is not an option, write to help@heyselene.app and we will work out together which record is yours and delete it.

If you are in the EEA or the UK, you also have the right to complain to your local data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we do not discriminate against anyone for exercising their rights.

Children

This product is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has an account here, or that someone added a child's birth details to theirs, write to help@heyselene.app and we will remove it.

Attribution

Changes

If this policy changes in a way that affects what we collect or why, the change is written into this page in plain words, and the date at the top moves with it. We collect nothing new under an old date.