Open app →
☕
🌙
Sign in

Legal information

Privacy Policy

Effective date: 2025-11-17

1. Data Controller

The controller responsible for processing your personal data under the GDPR is:

Judith Perl – Sole Proprietorship
Josef-Steinberger-Weg 17
8054 Graz
Austria
Email: gaistnet@gmail.com

If you have questions regarding this privacy policy or about data protection in general, you can contact us at any time using the contact details above.

2. Categories of Personal Data Processed

We process the following categories of personal data:

Account and identity data:

  • Name or pseudonym
  • Email address

Account settings:

  • Login data (e.g. email and password hash)
  • Preferences (e.g. language, theme, notification settings)

Usage data:

  • In-app interactions and accessed sections
  • Time stamps and technical log data

Content data:

  • Chat messages with your spiritual companion
  • Inputs for horoscopes and tarot readings (e.g. birthdate, birthplace, card selections)

Device and technical data:

  • Device ID and device type
  • Operating system, app version
  • (optional) push notification token

We do not actively request special categories of personal data according to Article 9 GDPR. If you voluntarily provide such information in chats, it will be processed as part of your content data.

3. Purposes and Legal Bases

We process your data for the following purposes and on the following legal bases:

3.1 Providing the app and core features

  • Operating the app, enabling login, managing your account and displaying content.
  • Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

3.2 AI-based features (chat, horoscopes, tarot)

  • Processing your input through AI services (large language models) in order to generate responses.
  • Legal basis: Article 6(1)(b) GDPR; where required, Article 6(1)(a) GDPR (consent).

3.3 Personalisation of content

  • Tailoring horoscopes, tarot interpretations and chat responses to your information (e.g. birth data, preferences).
  • Legal basis: Article 6(1)(b) GDPR.

3.4 Communication with you

  • Handling support requests, feedback and error reports.
  • Informing you about important changes (e.g. terms of use, privacy policy).
  • Legal basis: Article 6(1)(b) GDPR.

3.5 Push notifications

  • Sending optional push notifications (e.g. daily horoscopes, content suggestions).
  • Legal basis: Article 6(1)(a) GDPR (your consent, given for example via device or app settings). You can disable push notifications at any time in the app or device settings.

3.6 Security, stability and further development of the app

  • Ensuring a secure and stable operation of the app.
  • Error analysis, detection of misuse, logging of technical incidents.
  • Legal basis: Article 6(1)(f) GDPR (legitimate interest in the security and stability of the app).

3.7 Billing and payment processing

  • Processing in-app purchases or subscriptions via the respective app stores (e.g. Apple App Store, Google Play Store).
  • Legal basis: Article 6(1)(b) GDPR (performance of a contract).

4. Use of AI Services (Large Language Models)

For generating texts and responses (chat, horoscopes, tarot interpretations) we use external AI services (large language models, LLMs), in particular:

OpenAI, L.L.C.
3180 18th Street
San Francisco, CA 94110
USA
Privacy information: https://openai.com/policies/privacy

Your input (such as chat messages, questions and astrological data) is transmitted to the respective AI provider in order to generate responses.

AI systems may produce incorrect, outdated or biased content. Outputs are generated automatically and, for entertainment features, are generally not reviewed manually.

5. Recipients of Data and Third-Party Services

We only share your personal data with third parties if this is necessary for the purposes mentioned above or if we are legally obliged to do so. Possible recipients include:

  • Providers of AI services (in particular OpenAI)
  • Hosting and cloud providers
  • Providers of logging and monitoring services
  • Payment providers and app stores (such as Apple and Google)
  • External service providers acting as processors under Article 28 GDPR

Where we use processors, we conclude data processing agreements in accordance with Article 28 GDPR.

For advertising we use Google Ads / AdMob, provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google may process, in particular, usage data and device identifiers as an independent controller. Further details are available in Google’s privacy policy (https://policies.google.com/privacy).

6. Transfers to Third Countries

Where data is transferred to service providers in third countries (outside the EU/EEA), in particular the USA, we ensure that:

  • an adequacy decision by the European Commission exists, or
  • appropriate safeguards within the meaning of Article 46 GDPR (such as EU Standard Contractual Clauses) are in place,

and that, where necessary, additional technical and organisational measures are implemented to protect your data.

7. Storage Period

We store personal data only as long as necessary for the respective purposes or as required by law. In particular:

  • Account data: as long as your user account exists.
  • Chat and content data: as long as this is necessary to provide the relevant functions. Where supported by the app, you may delete chats yourself or request deletion.
  • Log and technical data: usually for a short period for error analysis and IT security (typically 30 to 180 days).
  • Data subject to legal retention obligations: for the duration of the applicable statutory periods (e.g. under tax law).

After the relevant periods have expired, data is deleted or anonymised.

8. Your Rights under the GDPR

Under the GDPR you have, in particular, the following rights:

- Right of access (Article 15 GDPR):
 You can request information on whether and which personal data we process about you.

- Right to rectification (Article 16 GDPR):
 You can request correction of inaccurate or completion of incomplete data.

- Right to erasure (Article 17 GDPR):
 You can request deletion of your personal data under the conditions of Article 17 GDPR.

  • Right to restriction of processing (Article 18 GDPR).

- Right to data portability (Article 20 GDPR):
 You can request to receive certain data in a structured, commonly used and machine-readable format and transmit those data to another controller.

- Right to object (Article 21 GDPR):
 You may object at any time, on grounds relating to your particular situation, to processing of your personal data which is based on Article 6(1)(e) or (f) GDPR.

- Right to withdraw consent (Article 7(3) GDPR):
 You may withdraw any consent you have given at any time with effect for the future, for example for push notifications or certain AI features.

To exercise your rights, you can contact us at any time using the contact details set out in section 1.

9. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

10. Children and Minors

Our app is generally intended for individuals aged 16 years and above. Users between 13 and 15 years of age should only use the app with the consent of their legal guardians.

We process personal data of children only within the scope of the legal requirements and, where necessary, on the assumption that consent or approval has been given by the legal guardians.

11. Changes to this Privacy Policy

We may update this privacy policy from time to time, for example if legal requirements or the functionality of the app change. The current version is always available within the app.