Privacy Policy

Data Controller

Zenith: Cosmic Guide is operated by [YASAL AD/ÜNVAN], [ADRES].

For any privacy inquiries or to exercise your statutory data protection rights, please contact our privacy team at privacy@zenithalign.com.

Zenith: Cosmic Guide (“we,” “us,” or “our”) is committed to safeguarding your personal data and respecting your privacy. This Privacy Policy explains our practices regarding the collection, processing, transfer, storage, and deletion of information when you use the Zenith: Cosmic Guide mobile application and website (collectively, the “Service”). For our Turkish Personal Data Protection Law disclosure, please review our KVKK Aydınlatma Metni.

If you do not agree with the terms of this Privacy Policy, please discontinue your use of the Service.

1. Information We Collect

We operate on an anonymous account model. No account registration, email address, password, or third-party login credentials are required or collected to access the Service. An anonymous identifier is generated automatically on your device.

1.1 Personal and Astrological Information

• ✦Profile & Birth Details: Name or nickname, date of birth, time of birth, place of birth, gender, focus areas (e.g., love, career, spiritual growth), and astrological signs (sun, moon, ascendant).
• ✦User-Generated Inputs: Tarot and astrology questions you write, dream journal descriptions, and conversation messages submitted in chat sessions.
• ✦Palm Reading Photos: When you use the palm reading feature, your photo is transmitted securely to our AI partner (OpenAI) solely to generate the reading in real time. We do not store your palm photos on our servers.
• ✦Soulmate Drawing Preferences & Generated Output: User-selected preferences (preferred gender, appearance or ethnic preferences, artistic style) and the resulting generated portrait.

1.2 Purchases and Virtual Currency

• ✦Subscription & Coin History: Records of virtual coin balances, coin consumption for AI readings, and active subscription tiers managed through RevenueCat and Apple StoreKit. We never receive or store your credit card or financial payment details.

1.3 Usage, Telemetry & Session Replay

• ✦In-App Events & Analytics: Feature interactions, button clicks, screen navigation, and technical performance metrics tracked via Mixpanel. Analytics events are associated with your app identity, and profile attributes (name, date of birth, and gender) are sent to Mixpanel to personalize your journey.
• ✦Mixpanel Session Replay: Visual screen session replays used to detect technical errors, UI issues, and optimize user experience. All sensitive text inputs, images, and web views are masked during recording.
• ✦AI Request Records: Prompts submitted and generated AI responses are logged alongside your anonymous user identifier for session continuity and troubleshooting.
• ✦Device Data: Operating system version, app build version, device language, and time zone. We do not use the advertising identifier (IDFA) and do not track you across third-party apps or websites.

2. Purposes and Legal Bases for Processing

Depending on your location (including the European Economic Area under GDPR and Turkey under KVKK), we process your data under the following legal bases:

• ✦Performance of a Contract (GDPR Art. 6(1)(b) / KVKK Art. 5(2)(c)): To deliver core features, generate natal charts and horoscopes, manage in-app coin balances, process subscriptions, and fulfill user requests.
• ✦Explicit Consent (GDPR Art. 6(1)(a) / KVKK Art. 5(1)): For transmitting personal data, prompts, dream logs, and palm photos to artificial intelligence processors (OpenAI) to generate AI-powered readings and interpretations. You grant consent on first AI use and may withdraw it at any time in app Settings.
• ✦Legitimate Interests (GDPR Art. 6(1)(f) / KVKK Art. 5(2)(f)): App analytics, performance monitoring, masked session replay for bug diagnostics, fraud prevention, and maintaining service stability.
• ✦Legal Compliance (GDPR Art. 6(1)(c) / KVKK Art. 5(2)(ç)): Compliance with statutory accounting, regulatory inquiries, and legal processes.

3. AI Guides — Fictional Personas Disclosure

All spiritual and tarot guides within Zenith: Cosmic Guide—including Sofia, Maya, Elena, Rafael, Aylin, Lucia, Noor, Daniel, Priya, Camila, Vera, and Zenith—are fictional AI personas. Their portraits are generated using artificial intelligence, and their biographies and specialties are fictional creative constructs.

There are no human readers, psychics, clairvoyants, or mediums employed or accessible through the Service. All readings, chats, and interpretations are generated algorithmically by artificial intelligence in approximately one minute. All content is intended strictly for entertainment, personal reflection, and spiritual contemplation.

4. Artificial Intelligence & In-App Consent Controls

Zenith: Cosmic Guide utilizes state-of-the-art third-party artificial intelligence infrastructure provided by OpenAI (USA) to power chat guidance, palm readings, tarot card interpretations, and dream analysis.

• ✦First-Use Explicit Consent: The app displays an explicit consent screen before you use any AI-powered feature for the first time, detailing what data is shared.
• ✦Revocation via In-App Settings: You can withdraw your consent for AI data processing at any time by navigating to Settings → “AI data sharing” and toggling the switch off. When disabled, AI-powered features will become inactive, but all non-AI features (such as standard charts, offline content, and journal viewing) will remain fully functional.
• ✦No Model Training: Under our enterprise API agreements, your inputs, prompts, and personal data are contractually barred from being used by OpenAI or other providers to train foundational machine learning models.
• ✦Abuse Monitoring Retention: Data transmitted via the API may be retained by OpenAI for up to 30 days solely for the purpose of detecting abuse and ensuring safety, after which it is purged.

5. Service Providers and International Data Transfers

We do not sell, rent, or trade your personal data. We disclose information only to vetted infrastructure service providers subject to strict confidentiality and data protection obligations:

• ✦Supabase Inc. (AWS Tokyo, Japan): Cloud database hosting, user profile storage, and file storage.
• ✦OpenAI, LLC (United States): AI inference for prompt responses, palm reading analysis, and dream interpretations. Data retained up to 30 days for safety screening only.
• ✦Mixpanel, Inc. (United States): Product usage analytics and masked session replay for quality assurance. Identity attributes (name, birth date, gender) are synchronized for cohort segmentation.
• ✦RevenueCat, Inc. (United States): In-app purchase verification, receipt validation, and subscription status synchronization.
• ✦Apple Inc. (United States): In-app payment processing via StoreKit.

Cross-Border Transfers: Because our servers and third-party partners operate in Japan and the United States, your personal data is transferred internationally. For users in the European Economic Area (EEA), UK, and Switzerland, transfers are protected by European Commission Standard Contractual Clauses (SCCs). For users in Turkey, transfers comply with Article 9 of the KVKK through standard contracts and statutory safeguards.

6. Data Retention and Account Deletion

• ✦Active Accounts: Your profile data, preferences, and reading histories remain stored as long as your account is active on your device.
• ✦Immediate & Permanent Deletion: You may delete your account and all associated data at any time directly within the app by going to Settings → Delete Account. Upon confirmation, all personal information, AI conversation logs, soulmate drawings, and Mixpanel analytics profiles are permanently and immediately erased from our live databases. There is no 90-day recovery window.
• ✦Subscriptions Notice: Deleting your app account does not automatically cancel an active App Store subscription. Subscriptions must be cancelled separately through your Apple ID settings in iOS (Settings → Apple ID → Subscriptions).
• ✦AI Provider Logs: Prompts sent to OpenAI are retained by OpenAI for a maximum of 30 days strictly for security and abuse audits, after which they are deleted automatically.

7. Your Statutory Privacy Rights

Depending on your jurisdiction, you enjoy specific legal rights regarding your personal information:

• ✦Under GDPR / UK GDPR: Right of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing.
• ✦Under KVKK (Article 11): Right to learn whether personal data is processed, request information, learn the purpose of processing, know third-party recipients, request correction or deletion, and object to adverse outcomes. Please consult our KVKK Aydınlatma Metni for detailed procedures.
• ✦Under CCPA / CPRA (California): Right to know categories of personal data collected, right to delete, right to correct, and right not to receive discriminatory treatment. We do not sell personal data.
• ✦Right to Withdraw Consent: You may revoke AI consent at any time via Settings → “AI data sharing” without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please email us at privacy@zenithalign.com. We will review and respond to verifiable requests within 30 days.

8. Age Restrictions (18+)

Zenith: Cosmic Guide is strictly intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we discover that personal information has been collected from a minor under 18, we will immediately delete that information. If you believe a minor has accessed the Service, please contact us at privacy@zenithalign.com.

9. Data Security

• ✦All network communications between the mobile application, our servers, and third-party APIs are encrypted using TLS 1.3.
• ✦Database records and stored assets are encrypted at rest using AES-256 standards.
• ✦Session replay data is masked at the client level to ensure private text, personal inputs, and images are never recorded.
• ✦Access to production systems is restricted under role-based access control and least-privilege principles.

10. Cookies & Web Tracking

The Zenith: Cosmic Guide mobile app does not use cookies and does not utilize Apple’s IDFA for advertising tracking. Our marketing website uses only essential session cookies and performance telemetry to monitor site availability. We do not engage in cross-site tracking or behavioral targeted advertising.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our features or changes in applicable laws. We will notify you of material changes by updating the “Last Updated” date at the top of this page and, where appropriate, through an in-app banner. Your continued use of the Service following such updates signifies your acceptance of the revised policy.

12. Contact Information

If you have questions, feedback, or requests regarding this Privacy Policy or our data practices, please reach out to us: