Your words stay yours

Encrypted before it is stored

Your diary notes and the personal answers you gave during setup are encrypted with AES-256-GCM on our server before they ever touch the database. What is stored is unreadable ciphertext.

Only you can read it

Entries are unlocked only inside a request you made, while signed in as you, to write your reading, your weekly reflection or your companion's reply. No one at Celestial browses, exports or reads your writing.

We only see anonymous numbers

To improve the app we look at counts and patterns — how many people opened a notification, how often readings are generated. Never the words you wrote, never who wrote them.

You can delete it

Delete your diary from Settings at any time and every entry is permanently removed. Deleted means gone, not archived.

1. Who is responsible for your data

Celestial is made and operated by Team Celestial. We decide what data the app collects and why. For anything in this policy — including access, correction or deletion requests — email Leonbell101@gmail.com.

2. What we collect

• Account details: your email address and an encrypted password hash, or your Google account identifier if you sign in with Google.
• Birth details: date, and where given time and place of birth. These are needed to calculate your chart and are stored in plain form.
• Setup questionnaire answers: your circumstances, aspirations, habits, hobbies, living arrangements and health status. Stored encrypted.
• Diary entries: everything you write, its mood and any moment tag such as gratitude or hard day. Stored encrypted.
• Generated content: your daily readings, weekly reflections, companion messages and unlocked milestones.
• Usage signals: streaks, check-in dates, notification preferences, your timezone, and which alerts were delivered, opened or tapped.
• Technical data: standard server logs such as IP address, device type and timestamps, kept transiently for security and debugging.

3. Why we use it

• To create your account and keep you signed in.
• To calculate your chart and generate a reading, affirmation, weekly reflection or companion reply that is genuinely about you.
• To run streaks, milestones and the notifications you have switched on.
• To understand how the app is used in aggregate so we can improve it.
• To keep the service secure and to respond when you contact us.

4. Our legal basis

We process your data to perform the service you asked for when you created an account. Sensitive details you volunteer — such as health status — are processed only with your explicit consent, given when you complete the questionnaire, and you can withdraw that consent by clearing those answers or asking us to delete your account. Aggregate usage analysis rests on our legitimate interest in improving the app.

5. How your writing is protected

Diary entries and questionnaire answers are encrypted with AES-256-GCM on our server before they are written to the database, so the stored value is ciphertext. They are decrypted only inside a request you made while signed in as you, for the sole purpose of generating your own guidance. All traffic to the app runs over HTTPS. Access to production systems is limited to Team Celestial and is not used to read user writing.

6. Who we share it with

We do not sell your data, and we do not share it with advertisers or data brokers. We use a small number of processors purely to run the app:

• Lovable Cloud (Supabase) — database, authentication and hosting for your account and encrypted content.
• Google Gemini, accessed through the Lovable AI Gateway — generates your readings, reflections and companion replies. The relevant excerpt of your decrypted writing is sent for that single request and is not used to train the model.
• Apple and Google — only if you install the app from their stores or receive push notifications through their delivery services.

7. Where it is stored

Our infrastructure providers operate globally, so your data may be processed on servers outside your own country, including the United States. Where that happens, transfers rely on the providers' standard contractual protections.

8. How long we keep it

Your account data and diary stay until you remove them. Deleting your diary in Settings erases those entries immediately and permanently. Asking us to delete your account removes your profile, questionnaire, diary, reflections and companion history within 30 days. Anonymous, non-identifying usage counts may remain in aggregate statistics because they can no longer be traced back to you.

9. Your choices and rights

You can request a copy of your data, correct it, delete it, withdraw consent, or object to how we use it — email Leonbell101@gmail.com and we will action it within seven days and no later than 30. In the app you can delete your diary, change or clear questionnaire answers, turn off any notification category, and use Quiet Mode to silence the companion.

10. Notifications

Push notifications are only sent after you grant permission, and each category — companion unlocks, journal reactions and weekly reflection reminders — can be turned off separately in Settings. We record whether an alert was delivered, opened or tapped so we can see which reminders are actually useful. Revoking permission in your device settings stops them entirely.

11. Analytics and tracking

We use our own first-party counts only. There are no third-party advertising SDKs, no cross-app or cross-site tracking, no advertising identifiers, and no cookies beyond the strictly necessary one that keeps you signed in.

12. Children

Celestial is not intended for anyone under 13 and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

13. Changes to this policy

If we change how we handle your data in a meaningful way, we will update this page and tell you in the app before the change takes effect. The date below always reflects the current version.