Privacy Policy
Last Updated: August 04, 2026
Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your personal information when you use the Zodiac application and services.
2.1 Overview
This Privacy Policy explains how Zodiac collects, uses, and protects your personal data. We comply with GDPR, CCPA (where applicable), and other data protection laws.
Data Controller: Tanțău Ștefan-Nicolas, Bucharest, Romania. Contact: contact@tryzodiac.app.
2.2 What Data We Collect
We collect data to provide acceptance and functionality of the Service. This includes:
- •Account Info: Email or account ID via Apple/Google Sign‑In.
- •Verification Data (Ephemeral): Facial scan data used strictly for liveness checks and anti-bot verification.
- •User Content: Profile photos, bio, interests, and birth data (Date, Time, Place) [Mandatory for astrology features].
- •Precise Location (GPS): Collected for proximity-based daily matching and discovery.
- •Match Preferences: Age range, distance, and the genders you want to be introduced to.
- •Device & Identifiers: Advertising Identifier (IDFA), Device ID, usage analytics.
- •Chat Content & Metadata: The messages you send in daily chats, plus timestamps and participant IDs.
2.3 Biometric Verification (Face Check)
To ensure user safety and prevent fake profiles, we use a "Face Check" feature (optional—toggle in settings).
How it works:
The app uses your camera to detect movements and verify you are a real person.
Data Handling:
This process happens locally on your device. We do not upload, store, or retain your biometric face scan on any server. By enabling the Face Check feature, you explicitly consent to the on-device capture and processing required. You may disable this feature at any time.
Retention:
The data is discarded immediately after the verification status (Verified/Not Verified) is determined.
2.4 How Data Is Used
We use data to:
- •Introduce you to one nearby, astrologically compatible person per day.
- •Provide core features (birth charts, horoscopes, compatibility, community, chat).
- •Generate astrological readings and interpretations using AI (see 2.7).
- •Authenticate and verify users (Anti-Fraud).
- •Process subscriptions.
- •Display relevant advertising (via Google AdMob).
- •Investigate reports and keep the community safe.
- •Improve performance and stability.
| Feature | Legal Basis (GDPR Art. 6) |
|---|---|
| Daily matching / Horoscopes / Community | Contractual necessity (b)—essential for service. |
| AI-generated readings | Contractual necessity (b)—the reading is the product. |
| Safety mirror / Moderation | Legal obligation (c) & legitimate interests (f)—abuse handling. |
| Biometrics/Fraud | Legitimate interests (f)—security (LIA available on request). |
| Ads | Consent (a)—explicit, withdrawable. |
| Analytics | Legitimate interests (f)—anonymized improvement (opt-out via settings). |
2.5 External Processors
We share user data with third-party service providers solely for the purposes described above. These service providers are contractually obligated to protect user data in accordance with applicable privacy laws and no less protectively than described in this privacy policy.
- •Hosting, database & storage: Google Firebase
- •Proximity search: Supabase (stores an approximate location and profile fields used to find nearby people)
- •AI generation: Google Gemini via Firebase AI Logic (see 2.7)
- •Subscriptions: RevenueCat
- •Advertising: Google AdMob
- •Analytics & crash reporting: Google Analytics, Firebase Crashlytics
2.6 Message Security & Chat Lifecycle
Your messages are encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting provider (Firebase). They are NOT end-to-end encrypted: because we are legally required to be able to investigate reports of abuse, messages are stored on our servers in a form we can access. Please do not share information in chat that you would not want us to be technically capable of reading.
During the match:
Each daily introduction comes with a shared chat that is visible to the two participants for 24 hours.
If you both keep it:
If both people choose 'Stay in touch', the chat becomes permanent and stays available until either of you deletes it or your account.
If you don't:
The chat is removed from your view. A copy is held for approximately 30 days in a restricted safety mirror so we can act on abuse reports, and is then permanently deleted.
2.7 AI Processing
Zodiac uses Google's Gemini models (via Firebase AI Logic) to generate astrological interpretations, compatibility reports, daily horoscopes, and the 'what you have in common' reading attached to each daily introduction. To produce these, your birth chart data and the derived astrological summary are sent to Google for processing. We do not send your private chat messages to the AI. Google processes this data as our service provider and does not use it to train its models.
2.8 Data Retention
We retain data only as long as necessary:
- •Verification Data: Deleted instantly (not stored).
- •Expired chats: ~30 days in the safety mirror, then permanently deleted.
- •Kept chats / Account data: Retained until you delete them or your account.
- •Analytics/Ad Data: Retained for 14 months (or as defined by Google Analytics/AdMob settings) to analyze long-term trends, after which it is automatically deleted or anonymized.
2.9 User Rights (GDPR)
You have the right to Access, Export, Delete, or Correct your data. You may export or delete your data directly in the App settings (portability: JSON/CSV format, delivered within 30 days). For CCPA: Opt out of sales via settings or email. Complain to us or Romanian authority (ANSPDCP.ro).
2.10 Children's Privacy
The Service is strictly for users 18 years and older. We do not knowingly collect personal data from minors. If we discover a minor's account, we will immediately delete it and notify guardians if required.
2.11 Data Breaches
We notify the relevant authority (e.g., ANSPDCP) within 72 hours of becoming aware of a breach if it poses a risk. Users will be notified (via email/push) if high-risk to rights/freedoms.
2.12 Law Enforcement
We disclose data only on valid legal order (e.g., court warrant). We'll notify you unless prohibited, and challenge improper requests where possible.
2.13 Precise Location
We collect precise GPS location to discover nearby users. Location access is optional and requested only when needed for proximity-based features. Users may disable location access at any time via device settings.
2.14 Advertising & Tracking (ATT)
We may use the device’s advertising identifier (IDFA) to deliver personalized advertising. iOS users will be prompted via the App Tracking Transparency (ATT) prompt to allow or disallow tracking. Users may opt out of personalized ads at any time via their device settings.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@tryzodiac.app.