Privacy Policy
Last updated: April 23, 2026
1. Publisher identity
Lunation is a mobile application published by Astroia.
- App name: Lunation
- Publisher: Astroia
- Contact: [email protected]
2. Data collected
While using Lunation, we collect the following categories of data:
2.1 Account data
- Email address: used for authentication and communication
2.2 Birth data
- Date of birth: required for astrological calculations
- Time of birth: required for astrological calculations (optional)
- Place of birth (name, latitude, longitude): required for astrological calculations
2.3 Journal data
- Journal entries: free-form text entered by the user to track feelings through the lunar phases
2.4 Usage data (analytics)
- Usage events: screens visited, features used, interactions (via PostHog)
- Technical data: device type, operating system version, app version
- Crash reports and diagnostics: when an error occurs, a technical trace is sent to Sentry to fix bugs
- This data is collected in a pseudonymized manner
2.5 Technical identifiers and marketing attribution
To measure the effectiveness of our ad campaigns (Meta Ads, Google Ads) and prevent ad fraud, we collect and transmit the following identifiers:
- Advertising ID (GAID on Android, IDFA on iOS if the user consents via App Tracking Transparency): device advertising identifier, provided by the operating system and resettable by the user
- Device identifier (Android ID, install identifier): to link events to a unique install
- IP address: collected transiently with every request to our servers and attribution partners
- Technical information: device model, OS version, language, country
This data is shared with AppsFlyer (mobile attribution), Meta / Facebook (ad events) and Google (Google Ads / Firebase). It is not used to personalize astrological content.
3. Purposes of processing
- Personalized astrological content: computing lunar returns, natal chart, transits and personalized interpretations
- Personal journal: allowing the user to record and retrieve their reflections
- Service improvement: understanding app usage to improve user experience
- Communication: sending notifications related to lunar cycles (if enabled)
4. Legal basis for processing
- Contract performance: to provide the service (astrological calculations, journal)
- Consent: for analytics data (opt-out available in settings)
- Legitimate interest: for service improvement and security
5. Data storage and security
- Hosting: data is stored on Supabase (PostgreSQL), hosted in the European Union
- Security: communications are encrypted in transit (HTTPS/TLS). Passwords are hashed. Data access is protected by JWT authentication
- Local data: some data (preferences, cache) is stored locally on the device via AsyncStorage
6. Subprocessors and third parties
| Subprocessor | Purpose | Data transmitted | Location |
|---|---|---|---|
| Supabase | Database hosting | All account and content data | European Union |
| PostHog | Usage analytics | Pseudonymized events | EU (eu.posthog.com) |
| Anthropic (Claude) | AI interpretation generation | Birth data | United States |
| RapidAPI | Astrological calculations | Birth data | United States |
| Google (OAuth, Firebase Cloud Messaging, Google Ads) | Authentication, push notifications, ad attribution | Email, Google ID, push token, Advertising ID | United States |
| Apple (Sign in with Apple, APNs push) | iOS authentication and push notifications | Email, Apple ID, push token | United States |
| AppsFlyer | Mobile marketing attribution | Advertising ID, device identifier, IP, install and purchase events | United States |
| Meta / Facebook | Meta Ads campaign measurement | Advertising ID, app events (install, purchase), technical information | United States |
| RevenueCat | Subscription and in-app purchase management | User identifier, purchase events, advertising identifier (for attribution) | United States |
| Sentry | Crash diagnostics and reporting | Pseudonymized error traces, technical info on device and session | European Union (sentry.io — EU region) |
For transfers to the United States, we rely on the European Commission's Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.
7. Retention period
- Account and birth data: kept as long as the account is active. Deleted on request or upon account deletion
- Journal entries: kept as long as the account is active
- Analytics data: kept for 12 months max, then anonymized or deleted
- AI interpretations: cached temporarily to improve performance
8. User rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to analytics processing (opt-out in settings)
- Right to restriction: request restriction of processing in some cases
To exercise these rights, contact us at: [email protected]
We will respond within 30 days.
9. Cookies, trackers and advertising identifiers
Lunation does not use cookies in the traditional sense (mobile app), but uses several SDKs that collect technical identifiers and usage events.
- PostHog (usage analytics): opt-out available in Settings > Analytics. When opt-out is enabled, no event is transmitted.
- AppsFlyer, Meta, Google Ads (marketing attribution): use your device's Advertising ID.
- On iOS: access to the IDFA is subject to your explicit consent via Apple's App Tracking Transparency prompt. You can change this choice in iOS Settings > Privacy > Tracking > Lunation.
- On Android: you can reset or delete the GAID in Android Settings > Google > Ads ("Delete advertising ID").
- Sentry (crash reports): only transmits technical traces in case of error, without any advertising identifier.
10. Minors
Lunation is not intended for users under 16. We do not knowingly collect data from minors. If we learn that a minor's data has been collected, we will delete it.
11. Changes
We may update this policy. In case of substantial change, we will inform you through the app.
12. Contact and complaints
- Contact: [email protected]
- Supervisory authority: you may file a complaint with your local data protection authority (e.g. CNIL in France)