Privacy Policy
Effective 24 July 2026
This policy explains what personal data Retrolune collects, why, who it is shared with, and the rights you have over it. Retrolune is operated from Romania (European Union), and we act as the data controller for the information described here.
1. Data we collect
- Account: your email address and either an encrypted password (handled by our auth provider) or, if you use Sign in with Apple or Google, a sign-in token from that provider.
- Profile & preferences: your stated goals and focus areas, voice preference, notification settings, and timezone.
- Your content: journal entries, ritual completions and streaks, retrograde checklist state, and — if you use it — your messages to the AI astrologer.
- Billing: subscription status and identifiers from our payment processors. On the web this is Stripe; in the mobile apps, purchases are processed by Apple or Google and reconciled through RevenueCat. We never receive or store your full card number.
- Usage analytics: anonymous, cookieless product-usage events before you sign in, and account-linked usage events afterwards. We do not send your journal text to analytics.
2. How we use your data
To provide and secure your account; to generate the personalized rituals, retrograde guidance, and astrologer responses you request; to send the notifications you enable; to process your subscription; and to understand and improve the product in aggregate.
Our legal bases (GDPR Art. 6) are: performance of our contract with you (providing the service), your consent (notifications you opt into), and our legitimate interests (securing the service and improving it via privacy-preserving analytics).
3. AI processing (Anthropic / Claude)
Personalization and the astrologer chat are powered by Anthropic's Claude API. When you use these features, we send Anthropic your stated goals, excerpts of your journal entries, the current moon and retrograde context, and the messages you send the astrologer, so it can generate a relevant response. This data leaves our systems to be processed by Anthropic in the United States. If you would rather this never happen, use the free tier, which relies on our static content library instead of the AI.
4. Who we share data with
We do not sell your data. We share it only with the processors below, each acting on our instructions to run part of the service:
| Processor | Purpose & data | Region |
|---|---|---|
| Supabase | Hosting, authentication, and database (your account + content). Email, profile, journal entries, streaks, subscription status. | EU / United States |
| Anthropic (Claude API) | Generating personalized rituals and retrograde guidance, and powering the AI astrologer chat. Your stated goals, excerpts of your journal entries, today's moon/retrograde context, and the messages you send the astrologer. | United States |
| Stripe | Subscription payments and billing on the web. Email, payment details (handled by Stripe — we never see card numbers), subscription status. | United States |
| RevenueCat | Processing in-app subscription purchases and entitlements in the iOS and Android apps. Your account id, purchase history, and subscription status (payment is handled by Apple/Google — we never see card numbers). | United States |
| OneSignal | Push notifications on web and mobile (phase changes, retrograde countdowns, reminders). A push subscription tied to your account id (we do not store device identifiers). | United States |
| PostHog | Product analytics to understand and improve the app. Anonymous, cookieless usage events before you sign in; account-linked usage events after (never your journal text). | European Union |
Where a processor is outside the EU (for example, in the United States), transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
5. Data retention
We keep your account data and content for as long as your account is active. When you delete your account, your profile, journal entries, streaks, checklist state, subscription record, and chat history are removed from our database automatically — account deletion cascades to every row we hold about you. Backups and processor-side logs age out on their own schedules; analytics data is retained per our analytics provider's policy.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- erase your data — you can delete your account and all its data at any time from Profile → Delete account;
- receive your data in a portable format — download everything we hold about you as a JSON file from Profile → Download my data — and ask us to transfer it;
- restrict or object to certain processing;
- withdraw consent for notifications at any time; and
- lodge a complaint with your supervisory authority — in Romania, the ANSPDCP (dataprotection.ro).
7. Cookies & local storage
We use a single essential cookie to keep you signed in. Analytics run in a cookieless, anonymous mode until you sign in, so no consent banner is required to browse the site. We do not use advertising trackers.
8. Children
Retrolune is not directed at children under 16, and we do not knowingly collect their data.
9. Changes & contact
We may update this policy; material changes will be reflected in the effective date above. Questions or requests about your data: [email protected].