Privacy Policy

Almanac — last updated [TBD: date of publication]

This app is published by [TBD: legal entity — your own name if you enrol with Apple as an individual, the company name if as an organization], contactable at [TBD: contact email, e.g. privacy@mobnlink.com].

This policy describes what the app actually does. It was written against the code, not from a template, and where something is not collected it says so because it is not collected.

The short version

To draw a chart, the app needs a birth date, a birth time, and a birth place. That is the whole of what it asks for. There is no account, no email address, no name unless you type one, no advertising identifier, no analytics, and no third-party tracking of any kind. Deleting a chart erases it and everything computed from it. Nothing is sold or shared for marketing.

What is collected, and why

Birth data. A date, a time (or a note that the time is unknown), a place as a latitude, longitude and time zone, and a label for that place in your language. Optionally a gender, which some four-pillars methods use to direct the luck cycles. Without these there is no chart; they are used for nothing else.

The birth place is something you search for and choose. The app does not request or read your device's location, and holds no location permission.

A device identifier we create. A random value generated on first launch and kept in the iOS keychain. It is not your device's serial number, not the advertising identifier, and not derived from any hardware value. It exists so that your charts are still yours after you reinstall the app.

The language you chose, so that readings are written in it.

What is computed from your birth data: the chart itself, the luck timeline, the dimension scores, and the written readings. These are stored so that opening the app again does not recompute and rewrite everything, and so that the same question is answered with the same words rather than a second, subtly different reading.

Your conversations, when you use the message screen. What you ask is sent to the server so it can be answered.

Questionnaire answers, if you choose to take the twenty-item personality questionnaire. Raw answers rather than scores, because the scoring will change and stored answers can be re-scored while stored scores cannot.

Feedback, if you tap whether a reading landed. A rating, optionally which part, and optionally a note you write.

Subscription status, if you subscribe: the transaction identifier Apple issues, which product it was, when it expires, and a count of how many readings were generated this month. Apple does not tell us your name, your email address or your payment details, and we do not ask for them.

What is not collected

No name, email address, phone number, postal address, contacts, calendar or photo library. No device location. No advertising identifier and no fingerprinting. No analytics SDK, no crash-reporting SDK, no social login, no tracking pixels — there are no third-party SDKs of this kind in the app at all.

Photographs stay on your device. The message screen lets you attach a photo, and the app says at the time that it has not been sent. It is not uploaded, not stored on the server, and not sent to any model.

Who else sees any of it

A language model provider. The readings are written by a large language model, which means the material a reading is based on is sent to that provider for processing. What is sent is the derived chart — symbol identifiers, signs, houses, degrees, aspects — and your question when you ask one. Your birth date, your birth time and your birth place are not sent. The one exception is a comparison between two charts, where each side is named by whatever you have called it, and the name a chart is given by default is its birth place; renaming a chart before comparing it changes what is sent.

The provider processes this to produce the reading and does not use it to train models. [TBD: name the provider once production is switched from the development model — the plan is Anthropic.]

Apple, for purchases. Apple handles the payment and tells us only that a subscription exists and when it expires.

Our hosting provider, which stores the database. [TBD: name the provider and the region — this determines the jurisdiction your data is held in and has to be stated.]

Nothing is sold. Nothing is shared with advertisers, data brokers or social networks. There is no such integration to share it through.

Improving the product

Feedback ratings and, in aggregate, which readings people found accurate, are used to make the writing better. The personality questionnaire's answers are also used in aggregate to calibrate the norms every future answer is scored against — until there are enough of them, the app says so rather than showing a comparison it cannot justify.

Aggregate means aggregate: what informs a change is a pattern across many people, not the contents of your chart.

Keeping and deleting

Charts and readings are kept for as long as the chart exists, because that is what makes them free to re-read.

Deleting a chart deletes everything computed from it — the chart, the readings, the written text, the questionnaire answers attached to it and the feedback given about it. It is a real deletion, not a flag, and it is immediate. Press and hold a chart in the list, or swipe it.

"Forget this device" in Settings discards the key held in the keychain and every local copy. It is what you want if you are handing the phone on. Note what it does not do: it does not reach the server, so if you want the data there gone as well, delete the charts first — that erases every piece of personal data, since a chart is the only thing that holds any.

[TBD: state a retention period for accounts that are never used again — e.g. "an account with no charts left is deleted after 12 months". Somebody will ask, and "indefinitely" is a bad answer.]

Your rights

Where the GDPR or a comparable law applies, you have the right to access, correct, delete and export your data, and to object to processing. Deleting a chart in the app exercises the right to erasure directly and immediately. For anything else, write to [TBD: contact email] — you will need to be able to reach the same installation of the app, since the account is anonymous and there is no other way to establish that data is yours.

The legal basis for processing is the performance of a contract with you: you asked for a chart, and the data listed above is what drawing one requires. Feedback and questionnaire answers are given voluntarily, and their basis is your consent, which you can withdraw by deleting the chart they belong to.

Children

The app is not directed at children and is not designed for them. [TBD: confirm the minimum age you will set in App Store Connect. 16+ is the usual choice for a product where a model writes to a person about their life.]

Changes

If this policy changes in a way that affects what is collected or who sees it, the app will say so before the change takes effect rather than silently updating a page nobody has open.