Last updated: January 25, 2026

1. Information We Collect

We collect information you provide directly:

• Account Information: Email address, name (optional)
• Profile Data: Birth date, birth time (optional), birth place (optional)
• People Directory: Names and birth dates of people you add
• Usage Data: Boards, groups, and relationships you create

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Calculate symbolic mappings (Dreamspell, Tzolkin, Astrology, etc.)
• Store your preferences and created content
• Send service-related communications (if you opt in)
• Improve and develop the Service

3. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security measures including encryption at rest and in transit. We implement Row Level Security (RLS) to ensure you can only access your own data.

4. Data Sharing

We do not sell your personal information. We may share data only:

• When you explicitly choose to share (e.g., shared boards)
• With service providers who help operate the Service
• If required by law or to protect our rights

5. Third-Party Services

We use the following third-party processors to operate the Service:

• Auth0: Authentication and sign-in
• Supabase: Database and secure data storage
• Apple App Store / Google Play: Payment processing and merchant of record for in-app purchases (billing, tax, refunds)
• RevenueCat: Purchase and subscription status, so your plan unlocks on every device
• Resend: Transactional and newsletter email delivery
• PostHog: Privacy-respecting product analytics
• Cloudflare: Hosting, content delivery, and bot protection

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt out of marketing communications

7. Your GDPR Rights (EEA & UK)

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR: access, rectification, erasure, restriction of processing, data portability, and the right to object. Our legal bases for processing are your consent, performance of our contract with you (providing the Service), and our legitimate interests in operating and improving Pleiad. You may lodge a complaint with your local supervisory authority. To exercise any right, contact us at privacy@pleiad.io.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion of your personal information, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights. To make a request, contact us at privacy@pleiad.io.

9. Data Retention

We retain your data as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

10. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

11. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the Service.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@pleiad.io.