Privacy Policy

What we collect, why, where it is stored, and how you stay in control of it.

Last updated 2026-10-14

Lunastra ("we") is operated by Sangwoo Lee. This policy explains how we handle personal data when you use lunastra.app. We collect only what we need to run the service and we do not sell personal data.

1. Data we collect

  • Account: email address and password (stored only as a secure hash by our authentication provider).
  • Birth data: the name or label you enter, birth date, birth time, birthplace (place name, coordinates and time zone). Without an account, this is used to calculate your chart and is not stored.
  • Charts, AI conversations and reports you create while signed in, including the messages you send to the AI astrologer.
  • Purchase records: product, date and status. Payment card details are handled by the app store or payment provider and never reach us.
  • Technical data: IP address, browser type and request logs, collected automatically by our hosting provider for security and troubleshooting.

2. Why we use it

  • To calculate and display your birth chart and readings (performance of the service you request).
  • To save your charts, conversations and reports to your account and let you open them again.
  • To generate AI conversations and full reports from your chart.
  • To send account emails such as sign-up confirmation and password reset.
  • To prevent abuse, enforce usage limits and keep the service secure (our legitimate interest).
  • We do not use your data for advertising, and we do not use your birth data or conversations to profile you for third parties.

3. How long we keep it

We keep account data, charts, conversations and reports until you delete them or delete your account. Deleting a chart also deletes its conversations and reports. When you delete your account, your data is deleted immediately and any remaining copies in backups are erased within 30 days, except records we must keep by law (for example, purchase records under consumer protection law are kept for 5 years). Server logs are kept for a limited period by our hosting provider.

4. Service providers and international transfer

We do not sell or share personal data with third parties for their own purposes. We use the following providers to run the service. They process data on our behalf, under contract, and are located in the United States, so your data is transferred there over encrypted connections when you use the service:

  • Supabase, Inc. (USA) — account authentication and database storage of charts, conversations, reports and purchases. Kept until account deletion.
  • Vercel Inc. (USA) — website hosting and server functions; processes request data and logs.
  • Anthropic, PBC (USA) — generates AI conversations and reports. Receives your chart data and messages when you use these features; under its commercial terms it does not use them to train models.
  • Resend, Inc. (USA) — delivers account emails; processes your email address.

5. Your rights

You can view, correct or delete your data at any time. Charts can be deleted directly in My charts. You can delete your account in My charts → Account. To access a copy of your data, correct it, or restrict or object to processing, contact support@lunastra.app. Depending on where you live (for example under the GDPR or Korea's Personal Information Protection Act) you may also have the right to data portability and to lodge a complaint with your local data protection authority.

6. Cookies and local storage

We use only essential cookies to keep you signed in. We use your browser's session storage briefly to remember a chart you calculated before signing in, so it can be saved afterwards. We do not use advertising or analytics cookies.

7. Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Database access is restricted per user with row-level security, so each account can read only its own data. Passwords are never stored in readable form.

8. Children

Lunastra is not intended for children under 14, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.

9. Contact and changes

Privacy officer: Sangwoo Lee · support@lunastra.app

If we change this policy, we will post the new version here with a new date, and notify signed-up users by email of significant changes.