Skip to content

Explore Lunara

Privacy Policy

Last updated: 2026-10-02

Lunara generates all readings, daily messages, tarot interpretations, compatibility analyses, and guide replies using Artificial Intelligence. To do that, we send a minimum slice of your data (mostly your birth-chart placements and your message) to third-party Artificial Intelligence providers (currently OpenAI). We do not sell your personal data and we do not let the providers train their models on your inputs.

Who controls your data

The data controller for Lunara is the individual listed in the Impressum. You can reach the controller at hello@lunaraguide.com for any privacy request.

What data we collect

  • Account data: email address, display name, authentication provider
  • Profile data: language, country, gender (optional), avatar
  • Birth data: date, time, place, latitude and longitude
  • Calculated astrology data: planetary positions, houses, aspects
  • Readings and cosmic profiles generated for your chart
  • Tarot readings, daily entries, journal responses
  • Compatibility reports, including birth data of partners you enter
  • Cosmic guide chat history
  • Purchase records (SKU, status, Gumroad order references)
  • Device and usage analytics, only with your consent (PostHog, Vercel Analytics)
  • Advertising measurement data (Meta Pixel, TikTok Pixel), only with your consent and only while we run advertising campaigns

Why we process your data (lawful bases)

  • Contract performance (GDPR Art. 6(1)(b)): to provide the service you signed up for, generate your readings, deliver purchases.
  • Legitimate interest (Art. 6(1)(f)): to operate, secure, and improve the service, including aggregated analytics and abuse prevention.
  • Consent (Art. 6(1)(a)): for non-essential analytics cookies and any optional communications. You can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): to retain records for tax, accounting, and consumer-protection purposes.

Use of Artificial Intelligence and what is sent to providers

Lunara’s readings, daily messages, tarot interpretations, compatibility analyses, and guide replies are generated by Artificial Intelligence systems operated by third-party providers, currently OpenAI, L.L.C. To produce these outputs, we send the minimum context required for the request, which typically includes:

  • your selected language;
  • a non-identifying first name or the display name you chose;
  • your computed birth-chart placements (Sun, Moon, Rising, planetary positions, key aspects), not your raw birth date or address;
  • for compatibility readings: the birth-chart placements of the partner whose data you entered;
  • for the guide chat: your current message, recent messages from your conversation, short excerpts of your messages from earlier conversations, and short summaries of what you keep in Lunara (your tarot spreads, your journal answers, the placements of people you entered for compatibility readings, and your monthly forecast), so the guide can keep context;
  • for the monthly forecast: your birth-chart placements and the computed planetary events of that month;
  • system instructions that describe the persona and style of the response.

We do not send your email address, payment information, password, street address, or government identifiers to Artificial Intelligence providers. We instruct providers, where the option is available, not to use submitted data to train or fine-tune their models. According to OpenAI’s current data-handling commitments for API customers, prompts and completions are retained by OpenAI for up to 30 days for abuse-monitoring purposes and are not used to train OpenAI’s models. We do not control the providers’ own processing once data leaves our infrastructure; refer to their privacy policy for details.

You acknowledge that the response you receive is generated by an Artificial Intelligence model and may be inaccurate, fabricated, or biased, as described in the Terms of Service. You should not enter information you would not be comfortable being processed by an Artificial Intelligence provider, including sensitive health, financial, or third-party data.

Who we share data with

We do not sell your personal data. We share data with the following processors strictly to operate Lunara:

  • Supabase (EU region): database, authentication, storage.
  • Vercel: hosting, CDN, built-in web analytics.
  • Cloudflare: network and DNS layer in front of the site.
  • PostHog (EU region, eu.posthog.com): product analytics, only with your consent.
  • Meta Platforms Ireland Ltd. (Meta Pixel) and TikTok Technology Ltd. (TikTok Pixel): advertising measurement, only with your consent and only while we run advertising campaigns. The pixels report which pages you visit, whether you started or completed a purchase and the amount, so that we can see which advertisements work. The platforms may use this data for their own purposes, including showing you Lunara advertisements again, under their own privacy policies.
  • OpenAI, L.L.C.: third-party Artificial Intelligence provider used to generate readings and guide replies. We send only the minimum context needed for each request. We do not allow OpenAI to train models on your data.
  • Gumroad, Inc.: Merchant of Record for all payments. Gumroad receives your email and transaction data and issues your receipt.
  • Google: sign-in provider (only if you use Google OAuth).

International transfers

Some processors, including OpenAI, are based outside the EU/EEA. Where that is the case, we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards as required by GDPR Chapter V.

Retention

We retain your account, chart, readings, journal, and chat history for as long as your account is active. If you delete your account, we delete personal data within 30 days except where we are legally required to keep records longer (for example, tax receipts for up to 10 years in some jurisdictions). Prompts and responses sent to third-party Artificial Intelligence providers are retained by those providers according to their own retention policies (for OpenAI: currently up to 30 days for abuse monitoring).

Your rights

If the GDPR applies to you, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any right, contact us at hello@lunaraguide.com.

Automated processing

The generation of your readings is fully automated by Artificial Intelligence. This processing produces creative entertainment content and does not produce decisions that have legal or similarly significant effects on you. We do not use the output of any Artificial Intelligence model to profile you for targeted advertising or to take any automated decision that affects your legal rights.

Cookies

Lunara uses strictly-necessary cookies for authentication and session management. Analytics (PostHog) and, while we run advertising campaigns, advertising measurement pixels (Meta, TikTok) run only after you accept the cookie banner. You can withdraw your consent at any time under Settings, “Cookie preferences”, or from your browser settings.

Children

Lunara is not intended for users under 18. We do not knowingly collect data from minors. If you believe a child has created an account, contact us and we will delete it.

Changes

We may update this policy, including to reflect changes in the third-party Artificial Intelligence providers we use or in applicable law. Material changes will be announced in-app or by email.