Privacy Policy

Effective April 24, 2026

1. Introduction and Data Controller

Welcome to Lenari ("App", "we", "our", or "us"). Lenari is an AI-powered tarot and astrology application available on iOS and web platforms. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.

For the purposes of data protection laws (including the GDPR), the data controller of your personal information is:

Legal Entity: N32 Technologies
Registered Address: Młynarska 42/115, 01-171 Warszawa, Poland
Email: [email protected]

(Please include "Privacy Inquiry" in the subject line so we can route your request to the right team.)

2. Information We Collect

2.1 Information You Provide Directly

Name — used to personalise your experience and AI-generated readings.
Date of birth — required to generate astrological charts, birth chart analyses, daily forecasts, and compatibility insights.
Questions and messages you submit to the AI Companion Chat — processed in real time to generate personalised spiritual guidance.

2.2 Information Collected Automatically

Device information (device type, operating system version, unique device identifiers, app version).
App usage data (features accessed, session duration, interaction patterns, in-app events).
Crash reports and diagnostic data.
IP address and approximate location derived from it (city/country level only).
Push Notification ID (device token issued by Apple, used solely to deliver push notifications to your device; does not reveal your identity and is not used for tracking).

2.3 Analytics and Attribution Data

We use third-party analytics and attribution tools to understand how users discover and use the App. This may involve collecting device identifiers and campaign tags. These tools are configured to respect platform privacy settings (e.g. Apple's App Tracking Transparency).

2.4 Payment Information

All payments — including subscriptions and non-consumable in-app purchases — are processed exclusively through Apple's App Store. We do not collect, store, or have access to your credit card or payment details. We receive confirmation of the transaction, its type, date, and status from Apple.

2.5 Sensitive Personal Data

We do not ask you to provide sensitive personal information (such as health data, political views, or government IDs) in any sign-up form or profile. However, you may choose to include sensitive content in your AI Companion Chat messages. Such content is processed solely to deliver the service to you and is not used for any other purpose. Please be mindful of what you share in chat.

2.6 Information We Do Not Collect

Precise GPS location.
Contacts, photos, or camera data.
Financial data beyond Apple's transaction confirmation.

3. Age Restriction

Lenari is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected data from a user under 18, we will promptly delete such information. If you believe we have inadvertently collected information from a minor, please contact us at [email protected].

4. How We Use Your Information

We use the information we collect to:

Provide, operate, and personalise the App and its features (tarot readings, astrology engine, AI companion chat, daily rituals).
Generate AI-powered, personalised spiritual guidance using your name and date of birth.
Manage your subscription and in-app purchase status via RevenueCat.
Deliver push notifications (using your device token).
Monitor and improve App performance and stability using Sentry.
Analyse user behaviour and usage patterns to improve product experience using Amplitude.
Attribute app installs and measure marketing campaign performance using AppsFlyer.
Communicate with you about your account, updates, or support requests.
Comply with legal obligations.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases for processing your personal data are:

Contractual necessity — to provide the App's services as described in our Terms of Use.
Legitimate interests — to improve the App, ensure security, prevent fraud, and conduct analytics. We balance these interests against your privacy rights.
Consent — where required, e.g. for marketing communications or certain tracking under ePrivacy rules.
Legal obligation — where processing is required to comply with applicable law.

6. Third-Party Service Providers

We share your information with third-party service providers solely to the extent necessary to operate the App. These providers act as data processors under our instructions and are contractually required to protect your data.

Our current providers include:

Amplitude — product analytics and user behaviour analysis. Amplitude policy.
Sentry — error tracking and performance monitoring. Sentry policy.
Google Gemini API — AI model powering tarot readings, astrology insights, and companion chat. Gemini policy.
RevenueCat — subscription and in-app purchase management. RevenueCat policy.
AppsFlyer — mobile attribution and marketing analytics. AppsFlyer policy.
Google Ads and Meta (Facebook/Instagram) — user acquisition campaigns. We may transmit limited event data (e.g. install events, subscription conversions) including device identifiers to these platforms. On iOS, we do not access the IDFA without your consent via Apple's App Tracking Transparency framework. Meta policy.
Apple App Store — payment processing.

We do not sell your personal information to any third party.

6.1 Aggregated and De-identified Data

We may generate, use, and disclose aggregated or anonymised data (e.g. overall usage statistics) that cannot reasonably identify you. Such data is not subject to this Policy's restrictions and may be used for analytics, research, and business reporting.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights:

Right to Know — request information about the categories and specific pieces of personal information we have collected about you in the past 12 months.
Right to Delete — request deletion of your personal information, subject to certain legal exceptions.
Right to Correct — request correction of inaccurate personal information we hold about you.
Right to Opt-Out of Sale or Sharing — we do not sell your personal information. Certain analytics/attribution integrations may constitute "sharing" under CPRA for cross-context advertising; you may opt out by contacting us.
Right to Limit Use of Sensitive Personal Information — we use sensitive data only as necessary to provide the service.
Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise any of these rights, contact us at [email protected]. We will confirm receipt within 10 business days and respond substantively within 45 calendar days (extendable by a further 45 days if complex).

8. Other U.S. State Privacy Laws

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another U.S. state with applicable privacy legislation, you may have similar rights to those described above — including rights to access, delete, correct, and opt out of targeted advertising or sale of personal data. You may exercise these rights by contacting us at [email protected].

If we decline to act on a request, you may appeal by replying to our response and requesting a review. We will respond to appeals within 60 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where several of our service providers (including AppsFlyer) maintain operations.

For users in the EEA or UK, we ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission. We also rely on additional measures including encryption in transit and at rest.

By using the App, you acknowledge that your information may be transferred internationally in accordance with the safeguards described above.

10. Data Retention

We retain your personal information for as long as your use of the App continues or as needed to provide services. If you request deletion of your data, we will remove it from our active systems within 30 days of a verified request.

Please note that data may persist in encrypted backup copies for up to 30–90 days after deletion from live systems, after which backups are automatically purged. During this period, backup data is not accessed or used for any purpose.

Transaction records are retained for as long as required by applicable tax and accounting laws (typically 7 years). Analytics data is retained for approximately 12–14 months before deletion or aggregation.

11. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS) and at rest.
Access controls and role-based permissions limiting data access to authorised personnel.
Monitoring and anomaly detection on our systems.
Regular review and update of security practices.

No method of electronic storage or transmission is completely secure. We cannot guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, we will notify affected users and relevant authorities as required by law.

12. Push Notifications

If you enable push notifications, we collect a device token issued by Apple that is necessary to send notifications to your device. This token is a random identifier that does not reveal your identity. We use it solely to deliver notifications. You can opt out at any time through your device's notification settings, after which we will stop sending notifications to your device.

13. EU/UK Supervisory Authorities

If you are located in the EU or UK, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law. For example:

Cyprus: Commissioner for Personal Data Protection (www.dataprotection.gov.cy)
UK: Information Commissioner's Office (www.ico.org.uk)
Germany: Your regional Data Protection Authority (Datenschutzbehörde).

We encourage you to contact us first at [email protected] so we can attempt to resolve your concern directly.

14. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your personal data; object to or restrict the processing of your data; data portability; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or within the timeframe required by applicable law).

15. Cookies and Tracking Technologies

The iOS App does not use cookies. Our web platform may use cookies and similar tracking technologies for core functionality and analytics. You may manage cookie preferences through your browser settings.

On mobile, you can limit ad tracking through your device settings (iOS: Settings > Privacy > Tracking). We and our advertising partners will honour these system-level choices.

16. Data Sharing With Your Consent

In addition to the circumstances described above, we may share your personal information with third parties where you have given your explicit consent or at your direction. For example, if you choose to share a tarot reading or daily ritual via a third-party app, we will transmit that content to the destination you specify. Such sharing is limited to what is necessary to fulfil your request.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify you via in-app notification or email. Your continued use of the App after the updated policy becomes effective constitutes your acceptance of the changes.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: [email protected]
Legal Entity: N32 Technologies, Młynarska 42/115, 01-171 Warszawa, Poland