Selunea privacy policy

1. What data we collect

Only what the calculations and your account need: your first name or nickname (optional) and your date, time and place of birth; details of people you add in Compatibility (nickname, date, optionally time); settings (time zone, notification time) and — if you turn them on — your browser notification subscription.

If you sign in on a device where you're viewing a free preview and your account has no birth details yet, we save the preview's details in your account so we can calculate your horoscopes straight away. After you sign in we tell you this clearly and give you a button to delete them; the preview itself is deleted.

We process your dream description and your question to the cards (when these fields are available) only if you tick the separate consent box next to the field — without it, the content never leaves Selunea's server. We don't store the content of these fields; we store only the consent itself (field type, text version and when you gave it).

Your email address and payment details are processed by the Selunea shop (the app doesn't store your email address). We don't collect sensitive data — please don't enter any in free-text fields.

2. Purposes and legal bases

• Free birth chart preview — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); kept for no more than 24 hours.
• Providing the services and your account — performance of a contract (Art. 6(1)(b) GDPR).
• Interpreting your dream or your question to the cards through an external text-processing provider — your consent ticked next to the field (Art. 6(1)(a) GDPR); you can withdraw it by not ticking it next time or by deleting your data in settings.
• Accounting and records of purchase consents (collected by the Selunea shop on the order summary page) — legal obligations and the establishment of claims (Art. 6(1)(c) and (f) GDPR).
• Security and abuse prevention — legitimate interest (Art. 6(1)(f) GDPR); request limits use hashed IP addresses held in server memory, which are never stored.
• Service statistics — aggregated counts of visits to successive pages, with no cookies and no personal data.
• Ad measurement — only with your consent given in the banner (Art. 6(1)(a) GDPR); we don't currently run any such measurement.

3. Who processes data for us

We use providers who process data on our behalf under data processing agreements:

• server hosting (OVH, European Union) and a network with attack protection (Cloudflare);
• the Selunea shop and our payment provider (Stripe or Przelewy24) — for orders and payments;
• an email provider — confirmations, reminders and sign-in links;
• a text-processing (language model) provider: OpenAI — receives chart data (signs, degrees, aspects), never your name, email address, date or place of birth; the content of your dream description or question to the cards (with names, contact details and dates removed) only with your consent ticked next to the field. The provider does not train its models on this data. [Legal basis for any transfer outside the European Economic Area — to be confirmed in the legal review.]

4. How long we keep data

• Preview without an account — no more than 24 hours (you can delete it sooner).
• Account data — until you delete it in your settings.
• Sign-in session — 30 days.
• Consents to process a dream description or a question to the cards — until you delete your data in settings.
• Consents given when ordering are kept by the Selunea shop — for the limitation period for claims.
• Shop data (orders, invoices) — as required by tax law and the shop's terms.

5. Security

Birth details and nicknames are encrypted in our database, which only the app server can access. Connections are encrypted (HTTPS). Page addresses never contain personal data.

6. Your rights

You have the right to access your data, to rectify it (change it in your settings), to erase it (button in your settings), to restrict processing, to data portability, to object and to withdraw consent at any time. You can also lodge a complaint with a data protection authority.

7. Cookies

We only use essential cookies:

• sl_sesja — keeps you signed in (30 days);
• sl_csrf — protects forms against forgery;
• sl_podglad — remembers your free preview (24 hours);
• sl_zgoda — remembers your choice in the banner;
• sl_jezyk — language choice on an address without a language domain (development only).

8. Notifications

You turn notifications on in your account settings; your browser always asks for permission. You can turn them off at any time in Selunea or in your browser settings.

9. Minors

Selunea is intended for adults only. We don't knowingly process data of anyone under 18.