Lunara

Privacy Policy

Last updated October 1, 2026

Draft text under legal review. It is not final, and items in [brackets] must be completed before launch.

Lunara calculates your birth chart and daily readings on your own device. When you take the quiz, we also save your answers on our servers. This policy explains what we collect, why, who helps us run the service, how long we keep it, and the choices you have.

1. Who we are

Lunara (the “service”) is operated by Rafique AI, CNPJ 41.854.739/0001-48, based in Brazil. We decide why and how your personal data is used, which makes us the “controller” (or “business”) under data protection laws.

Company
Rafique AI (CNPJ 41.854.739/0001-48)
Address
Rua Perú, 817, Canoas - RS, CEP 92420-300, Brasil
Privacy contact
privacidade@rafiqueai.com.br

The service is offered in the United States and in other countries. Depending on where you live, the EU and UK GDPR, Brazil’s LGPD and US state privacy laws (such as the California Consumer Privacy Act) may give you additional rights, described in section 9.

2. The short version

  • Your birth chart and daily readings are calculated on your device, and your birth details are kept in your device’s storage so the app can open offline.
  • When you reach your quiz result, we save your quiz answers and birth details in a record on our servers, linked to your email if you give one. We use it to give you your reading and to understand how the quiz performs. If you sign in, we also keep a copy of your birth details and quiz answers in your account, so they come back on your other devices. We keep that copy until you delete your account or use “Clear local data” in your profile, which deletes it.
  • Payments are handled by Stripe. We never see or store your card number.
  • We do not sell your personal data for money. Outside the United States, we only run ad measurement if you accept it. In the United States you can switch it off at any time (section 10).
  • We do not ask for health, religion, sexual orientation or other sensitive information.
  • You can ask us to access or delete your data at privacidade@rafiqueai.com.br.

3. What we collect

Information you give us

  • Quiz answers: the areas you want guidance on and four short personality questions.
  • Birth details: date, time (optional) and place of birth. The place you type is turned into coordinates and a time zone. When you reach your quiz result, these details are saved with your quiz record on our servers. The place search runs on our own server with a public place database, so what you type is not sent to any other company.
  • Email address, when you ask us to save your chart or when you subscribe, and whether you also want tips and offers.
  • Your name, only if you use the withdrawal form (see “Right to withdraw and refunds” in the Terms).
  • Messages you type to the AI astrologer or dream chat, when that feature is enabled.

Information we create

  • Your chart (Sun, Moon, Rising and other placements), your numerology numbers and your daily readings. These are computed on your device. A short summary (your Sun, Moon and Rising signs and Life Path number) is saved with your quiz record.

Information collected automatically

  • Technical data: IP address, browser and device type, and the country your request comes from (from our hosting provider).
  • Funnel events: which quiz steps you reach, which answer buttons you press, and whether you reach the payment page.
  • Campaign data: the link you came from, including UTM parameters and advertising click IDs (for example fbclid).

Payment information

  • Payments are processed by Stripe. We receive your email, plan, price, currency, subscription status, renewal date and a Stripe customer ID. We never receive your full card number.

Sensitive information

We do not ask for health, religion, sexual orientation, political views or similar information. Please do not type it into the chat. If you do, you are choosing to share it with the AI provider described in section 6.

4. Why we use it, and our legal basis

  • To run the service: calculate your chart, show readings, keep your account, and give you premium features you pay for. Basis: performing our contract with you.
  • To send you sign-in links and account emails, and your reading where we offer to email it. Basis: contract and, for the quiz email, your consent.
  • To send tips and offers. Basis: your consent, which you can withdraw at any time by using the unsubscribe link or contacting us.
  • To process payments, prevent fraud and meet tax and accounting duties. Basis: contract, legal obligation and our legitimate interests.
  • To understand how the quiz and the app perform, fix problems and improve them. Basis: our legitimate interests, and consent where the law requires it for storing identifiers on your device.
  • To measure our advertising (for example, which ad led to a sign-up). Basis: your consent where required (EU, UK, Brazil and similar), and your right to opt out in the United States.
  • To answer your requests and comply with the law. Basis: legal obligation and legitimate interests.

We do not make decisions about you that have legal or similarly significant effects by automated means. The AI astrologer is a tool for reflection, not a decision-maker.

5. Cookies and storage on your device

To work, the service stores small pieces of data on your device. These are needed to give you the features you asked for:

  • Your birth details and chart settings, so the app can show your readings without asking again.
  • Your quiz progress, so you can continue where you stopped.
  • Your sign-in session and a cached copy of your premium status, so the app works offline.
  • A random device identifier, used to apply the daily limit on AI messages, and counters for those messages.
  • Your language preference and your privacy choice.
  • A cache of the app’s files, so it can open offline.

If you allow ad measurement, the Meta Pixel also sets cookies (such as _fbp and _fbc). You can clear all of this from your browser settings at any time; the app will then ask for your birth details again.

6. Who we share data with

We use service providers who process data on our behalf, under contracts that limit how they may use it:

  • Supabase: database and sign-in. Quiz records, your account profile, emails and subscription status are stored there. Our database is hosted in Paris, France.
  • Vercel: website hosting. It processes request data such as IP address and user agent.
  • Stripe: payments, subscriptions and the billing portal.
  • Meta (Facebook and Instagram): ad measurement, only if you allow it (or, in the United States, have not opted out). Meta receives events such as “started the quiz”, “left an email” and “paid”, your hashed email, your IP address, browser details and Meta cookie identifiers. It does not receive your birth details or quiz answers.
  • Anthropic: AI replies, when the AI feature is enabled. It receives your message and a short summary of your chart (Sun, Moon and Rising signs, Life Path number and today’s Moon sign). We do not send your name or email, and we do not store your messages on our servers.
  • Resend: sends our emails (your reading, withdrawal confirmations and account emails).

We may also share data with professional advisers, with authorities when the law requires it, and with a successor if the business is sold or merged, with notice to you. We do not sell your personal data for money.

7. International transfers

We are based in Brazil, and our providers may process data in the United States, the European Union and other countries. When data leaves your country, we rely on safeguards that the law accepts, such as adequacy decisions or standard contractual clauses, to give it a comparable level of protection.

8. How long we keep it

  • Quiz records without an email or purchase: 12 months.
  • Quiz records with your email (leads): 24 months after your last interaction, or until you ask us to delete them or unsubscribe.
  • Subscription and billing records: for the period tax and accounting laws require.
  • Withdrawal requests: 5 years, to evidence that we complied with the law.
  • Technical logs and daily message counters: 90 days.
  • Data stored on your device stays there until you clear it.

When these periods end, we delete or anonymize the data.

9. Your rights

Everyone. You can ask us to access, correct or delete your data, and to stop sending you marketing. Write to privacidade@rafiqueai.com.br. We may need to verify your identity first, and we respond within the time the law requires (generally 30 days; 15 days under the LGPD; 45 days under California law).

EU, UK and EEA. You also have the right to restrict or object to processing, to receive your data in a portable format, to withdraw consent at any time (this does not affect earlier processing), and to complain to your data protection authority.

Brazil (LGPD). You may ask us to confirm that we process your data, to give you access, to correct it, to anonymize, block or delete unnecessary data, to port it, to tell you who we shared it with, and to revoke consent. You can complain to the ANPD.

California and other US states. You may ask what personal information we collect, use and disclose, to delete or correct it, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell data for money; letting Meta measure ads may count as “sharing” under some laws, and you can opt out in section 10. We will not discriminate against you for using these rights. You may use an authorized agent; we will ask for proof of the authorization.

10. Your privacy choices

You decide whether we measure our ads with the Meta Pixel. Outside the United States this is off until you accept it. In the United States it is on by default, and you can switch it off here. We also honor the Global Privacy Control signal sent by your browser.

You can unsubscribe from emails with the link in any message, and you can clear the data on your device at any time from your browser settings or from your Profile.

11. Security

We protect data with encryption in transit, access controls and database rules that stop one person’s data from being read by another. No system is completely secure. If a breach affects you, we will notify you and the authorities as the law requires.

12. Children

The service is for people aged 16 or older, and the quiz does not accept a birth date that would make you younger. We do not knowingly collect data from younger people. If you believe a child has given us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.

14. Contact

For questions or to use your rights, write to privacidade@rafiqueai.com.br or to Rafique AI, Rua Perú, 817, Canoas - RS, CEP 92420-300, Brasil.

You can also complain to your local data protection authority, for example the ANPD in Brazil, your national authority in the EU, the ICO in the UK, or your state attorney general in the United States.