Privacy Policy
Effective date: November 14, 2026 Version: 2026-11-14.1 Operator: JXR Labs LLC, 42020 Village Center Plaza, Ste 120, PMB 780, Stone Ridge, VA 20105 Contact: support@jxrlabs.app
ZodiacFolk (formerly Starlight Guide) is an astrology app for reflection and entertainment, on the web at app.zodiacfolk.app and, when it is available, on Android through Google Play. This policy explains what we collect, why, who helps us run the service, how long we keep it, and how you can see or delete it.
We don’t sell your information, and we don’t use it for advertising or to follow you across other sites. We do count how the app and website are used: see “Usage totals” and “Our website”.
At a glance
- We don't sell your information, and we don't use it for advertising or to follow you across other sites. We do count how the app and website are used: see "Usage totals" and "Our website".
- ZodiacFolk is for people aged 13 and older.
- If you're 18 or older with Plus and AI answers on, questions you type go to Anthropic, whose AI writes your guide's answer.
- Purchases: Stripe handles payments on the web; we keep your plan, its status and renewal date. The Android app does not offer purchases or use Google Play billing.
- Delete everything: "Delete all my data" (in You, then Your Profile) deletes your account and the information saved with it, photos first, and ends any web Plus subscription.
This is a summary. The full text below is the version that applies.
Who can use ZodiacFolk
ZodiacFolk is for people aged 13 and older. You enter your birth date when you set up the app. If it shows you’re under 13, the app stops and nothing is saved to an account. Our server also refuses a profile with an under-13 birth date. We don’t verify ages. If you believe a child under 13 has used ZodiacFolk, contact us and we’ll delete the account and everything saved with it. (The web app remembers the stop in your browser for 7 days; see “On your device”.)
Signing in
- Email: you sign in with your email address. We email you a six-digit code; there’s no password. Our account provider, Supabase, stores your email address, when you signed in, and how.
- Sign in with Apple or Google (web and Android): if you choose one of these, Apple or Google tells us your email address and confirms who you are. With Apple’s Hide My Email, we receive a private relay address instead of your real one.
- Without an account: you can use the app without signing in. We then use a random ID for your device to keep your own records, such as tarot draws, streaks and daily-note settings. Your birth details stay on your device and are sent with each request. If you later sign in, those records move to your account. Plus requires signing in.
Your sign-in session is kept in your browser’s storage until you sign out or it expires. The Android app uses Chrome’s storage for app.zodiacfolk.app and can share the same sign-in session with that site in Chrome.
Information you give us
- Your profile: your first name or nickname, birth date, and optionally your birth time (and how sure you are of it) and birthplace. A birthplace is saved with its coordinates and time zone. We also save your chosen guide and reading length. We use your birth details to calculate your readings.
- Your age group: from your birth date, our server records whether you’re 13 to 17 or 18 and over. It stores only the group, not a second copy of your birth date.
- Your photo, if you add one. Our server re-encodes each photo before storing it, which removes location and other hidden details from the file.
- Your Circle: for each person or pet you add, we store the name you give, your relationship, and, if you choose to add them, their birth date, time and place, a pet’s species and a photo. This is information about someone else. Please add people only with their permission, and don’t add anything you wouldn’t want stored. We never contact the people in your Circle.
- Your Chinese zodiac animal’s look, and its name if you give it one. They’re kept with your account until you change them or delete your account.
- Journal: whatever you choose to write, which may include a dream and may reveal sensitive things about you, such as your health or your beliefs. We use it only to provide ZodiacFolk to you. We link it to a reading if you choose to.
Journal consent. When you first open the journal, we ask for your consent to keep your entries. Your entries may reveal sensitive things about you, such as your health, beliefs or relationships. We use them only to provide ZodiacFolk to you. You can withdraw your consent and delete your journal entries at any time in your settings. If you withdraw consent, we stop saving new entries and delete the ones you have.
- Saved readings and lesson progress: the readings you save, and which lessons you’ve completed and when.
- Questions you ask: Ask offers a list of questions. We save which question you chose with its answer, so you can reopen it. If you’re 18 or older, you can also hear it in another guide’s voice.
- Questions you type: if you’re 18 or older, have Plus and have turned on AI answers, you can also type your own question. We save your question with its answer, like any other reading.
- Feedback: if you use Send feedback in the app, we save your message with the screen and guide you were on and the app version. It never includes your birth details.
- Purchases: if you buy Plus on the web, Stripe handles the payment; we receive and keep your plan, its status, its renewal date and next charge (amount, currency and billing period), whether you’ve used your free trial, which billing reminders we’ve sent, whether you’re a founding member, and a Stripe customer reference. We never see or store your card number. The Android app does not offer purchases or use Google Play billing. If you already have Plus on your account, you can use it in the Android app. We use your account’s existing plan status for that access; we do not receive a Google Play purchase for it.
Information we create
- Readings and yearly outlooks: our server calculates them from your birth details and planet positions calculated from data published by NASA’s Jet Propulsion Laboratory. We save each reading to your account with when it was made. A reading about someone in your Circle also stores their name and relationship. The birth details used for the calculation aren’t copied into the reading.
- Activity for Year in Review: a count of what you did, such as a reading, a question or a lesson, with the guide and time. It contains no text from your readings or journal. We keep the most recent 2,000 entries.
- Your time zone: the app sends your device’s time zone so “today” means your today. We save it with your account. If you’re signed out, we save it under a random ID for this device. We use it for features that follow the date, such as daily card draws and the daily note.
- Usage totals: to understand how the app is used, we count steps such as finishing setup, hearing a reading or starting a trial, and how many people come back after a day, a week or a month. These counts are mostly daily totals. We also keep the date you first used the app, linked to your account or device, to measure who comes back. We don’t use third-party product analytics or advertising trackers.
- Guide lines you’ve heard: which recorded guide lines you’ve heard in the past month, so a guide doesn’t repeat one. It’s deleted after about a month.
Birthplace search
When you type a birthplace, your text goes to our own server, which searches a place list we host (GeoNames data). Nothing is sent to a map service, and we don’t keep what you typed. Only the place you choose is saved with your profile.
Guide voices
Guide voices are AI-made, recorded in advance and part of the app, and they’re for people 18 and older. Playing one doesn’t send your readings, questions or answers anywhere. We don’t create new audio from your readings, questions or answers. If you’re under 18, or we don’t know your age, the app doesn’t play guide voices.
Typed questions and AI answers
Typed questions and live AI generation are not available in the Android app. The AI-processing descriptions in this section and the next section apply to the web features when enabled. This does not change that the fictional guides and prerecorded voices are AI-made.
Typed questions are for people 18 or older with Plus who have turned AI answers on. When you type a question, we first remove the names of people in your Circle, your own name and birth details if you typed them, and anything that looks like contact details. Anthropic’s AI then checks the question for safety, and we send your question, with a short summary of today’s reading (its theme and guidance), to Anthropic, whose AI writes your guide’s answer and checks it before you see it. If you ask about someone in your Circle, we send only how they’re related to you, such as “friend”, never their name. For a question to Rook, we also send the numerology numbers described under “AI-written profiles and daily readings”, which together can reveal your birth date. For a question to Kiran, the summary is today’s Vedic reading and can include your birth Moon sign; for a question to Mira, it’s today’s card. We never send your name, email address or photos, or your birth date, time or place themselves. Anthropic doesn’t use this information to train its models, under its commercial terms, and it deletes these requests within 30 days, except content it flags for safety review, which it can keep longer. You can turn AI answers off at any time in your settings.
AI-written profiles and daily readings
Your written profile and daily readings, written by AI. If you’re 18 or older and turn on AI, the written profile your guide keeps about your chart, and your daily readings, are written by Anthropic’s AI from facts about your chart. We save the written profile with your account and delete it when you delete your account or turn AI off. Deleting it does not delete your birth details, your chart or your account: we calculate your chart from the details you entered, and if you turn AI on again a new written profile can be made. Anthropic doesn’t use this information to train its models, under its commercial terms, and it deletes these requests within 30 days, except content it flags for safety review, which it can keep longer. We check each text before you see it; if one looks unsafe, you see your regular reading instead. AI can make mistakes. With AI off, or if you’re under 18 or we don’t know your age, nothing is sent to an AI provider.
For Western astrology, your daily reading uses today’s facts for your chart in plain words, such as the area of life it’s about, how strongly it shows and what it means for you, and which planet is moving for you today. Your written profile uses the signs of your Sun, Moon, Mercury, Venus, Mars, Jupiter and Saturn. These come from your birth date, and sometimes your birth time and place, so they can hint at them. We don’t send the birth details themselves.
For Vedic astrology, your daily reading uses today’s facts for your chart in plain words, such as the area of life it’s about, how strongly it shows and what it means for you. These come from your birth date, time and place, so they can hint at them. We don’t send the birth details themselves.
For the Chinese zodiac, your daily reading uses today’s facts for your chart in plain words, such as the area of life it’s about, how strongly it shows and what it means for you. These come from your birth details, so they can hint at them. We don’t send the birth details themselves.
For numerology we send your personal day, month and year numbers and your life path number. They’re calculated from your birth date, so they can hint at it. We send the numbers, not your birth date. If you type a question to Rook, we also send the day of the month you were born (your birthday number), the steps that work out your life path number, your current pinnacle and the ages it covers, and your challenge and karmic-debt numbers, plus your name numbers if you’ve saved a name. Together these can reveal your birth date. We never send your name itself.
For tarot we send the cards you drew, where each one sits in the spread, and the kind of spread. We don’t send your birth details.
We keep your written profile, the text your guide wrote about your chart, until you delete it, or until 90 days after you last opened ZodiacFolk, then we delete it, along with the AI-written readings and answers you haven’t saved, and any pre-written text. If you turn AI off, we delete the same things at once and clear your AI settings, so we’ll ask you to confirm again if you turn it back on. Readings you saved stay until you delete them. This never deletes your birth details, your chart, your Circle, your journal or your account.
If you turn on “Have tomorrow’s reading ready,” we write your next reading the evening before, even if you’re not using the app, and send the same facts to Anthropic then. We only do this if you’ve opened ZodiacFolk in the past week, and we write at most one reading ahead. Otherwise we write it when you open ZodiacFolk.
If you’re under 18, or we don’t know your age, no AI is used for you. You can still use Circle and your readings, written from the app’s own text. Guide voices are for people 18 and older.
What happens when you ask about harm
Ask is for reflection and entertainment. It isn’t a crisis or support service. The guides are AI characters, not people, and the app says so wherever you talk to a guide. If you type a question about hurting yourself or someone else, or about being in danger, the app shows you a card instead of a guide’s answer. The card has help lines for where you are.
If you’re in immediate danger, call your local emergency number.
Typing your own questions is for adults 18 and older. If you’re under 18, or we don’t know your age, your typed words are not sent to an AI model, and you can still use the questions we offer. Answers from the AI are checked before you see them. If an answer looks unsafe, you see a fixed message instead.
These checks are automatic and can miss things. We don’t monitor you, and we can’t contact anyone for you. If you’re in crisis, please reach out to someone directly.
How we handle thoughts of suicide or self-harm
Notifications
If you turn on the daily note, it’s delivered by your browser’s push service on the web. Daily-note push notifications are not available in the Android app; the Android app does not create a push subscription or send a device token for daily notes. To send it, we store the address your device or browser gives us for notifications, your chosen guide and send time, your time zone, and which note we last sent, so we don’t repeat one. We keep these until you turn notifications off, your device stops accepting them, or you delete your account or use “Delete all my data”.
Our website
Our website and web app use Cloudflare Web Analytics to count visits and page views. That service doesn’t use cookies or track you across other sites.
Our email list (formerly launch updates)
If you join our email list on zodiacfolk.app, which was called our launch updates list before ZodiacFolk opened, we collect your email address, the date you signed up and confirmed, whether you confirmed you’re 13 or older, how you found us (for example TikTok or Instagram, if you came from a link there), the country your connection appears to come from (so we follow the rules of each country we send to), and, if you tell us, whether you use iPhone or Android. We don’t ask for your name, age or birthday.
- Consent: we send one email asking you to confirm. We send nothing else unless you confirm.
- Use: news about ZodiacFolk, such as new guides and features. This includes people who joined when it was our launch updates list. We don’t sell your email or use it for ads.
- Who handles it: Cloudflare stores the list in the United States, and Resend sends the emails.
- Unsubscribing: every email has an unsubscribe link, and it takes effect right away, and always within 10 business days. We keep a record that you unsubscribed so we never email you again. To have that record deleted too, email support@jxrlabs.app.
- Unconfirmed sign-ups: if you don’t confirm, we delete your address after about 7 days (within 8 days).
Service providers
These companies process information for us, only to run ZodiacFolk:
| Provider | What it does | What it handles | Where |
|---|---|---|---|
| Supabase | Accounts, database and photo storage | Everything saved to your account | United States (West US, Oregon) |
| Render | Runs our server | Your requests while they’re processed; request logs | United States (Oregon) |
| Cloudflare | Hosts the website and web app; counts website visits and page views (Cloudflare Web Analytics) | Page requests and request logs | Global network |
| Resend | Sends sign-in emails and our email-list emails | Your email address and the six-digit code; for the email list, your email address | United States |
| Anthropic | Writes answers to typed questions (ages 18 and older, with AI answers on) | Your question, with Circle names and contact details removed, and a short summary of today’s reading. For Rook, also the numerology numbers described under “AI-written profiles and daily readings”. It may keep requests for a limited time and review them for safety. | United States |
| Anthropic | Writes your written profile and daily readings (ages 18 and older, with AI on) | The facts for your school, as listed above. Deletes requests within 30 days, except content flagged for safety review | United States |
| Stripe and Link | Web payments for Plus. Link, a service of Stripe, is the seller and decides how it uses your payment details | Your payment details (entered with Stripe or Link, never with us), email address and plan | United States |
| Apple | Sign in with Apple, if you use it | Your Apple sign-in | Apple’s services |
| Sign in with Google, if you use it | Your Google sign-in | Google’s services | |
| Your browser’s push service (Google, Mozilla, Microsoft or Apple) | Web notifications | Your browser’s push address and the encrypted note | That provider’s services |
Logs
Our server logs record each request’s time, address and result, and the IP address it came from. They don’t record the contents of your requests or your sign-in tokens. Our hosting and email providers keep their own logs for a limited period.
On your device
- Browser storage: the web app keeps your sign-in session, appearance and voice settings, and a random ID used for fair-use limits on questions. While you’re signed in, it also keeps a copy of your account there (your email address, your profile with your birth details, your settings, saved items, finished lessons and activity) so the app can open while our servers are slow; signing out or deleting your data removes it. If you finish setup before signing in, your profile waits there until you sign in; then it’s removed from the browser.
- Android: the app uses Chrome’s storage for app.zodiacfolk.app for the sign-in session and saved settings described above. Its Play-mode flag is kept only for the tab session.
- Cookie: the web app sets one small cookie, called sgAgeStop, only if a birth date is entered that is under our minimum age. It holds only the time it was set and lasts 7 days. It is used only to keep sign-up from starting over. We don’t use cookies for tracking or ads.
- Under-18 setting: the web app may keep a small setting that marks an account as under 18, so that analytics never run for it.
How long we keep information
- Account data (your profile, photos, Circle, journal, saved readings and lesson progress) stays until you delete it or delete your account.
- Readings, yearly outlooks and question history are deleted automatically after 400 days, unless you’ve saved the reading or linked it to a journal entry. Deleting your account removes them sooner.
- Safety reports: if we find, or are told of, what appears to be child sexual abuse material, US law requires us to report it to the National Center for Missing & Exploited Children, and we do. We keep that material and related account data, such as upload details and the account email, for at least one year, even if you delete it or delete your account. Law enforcement may receive it.
Seeing, changing and deleting your data
- Change: edit your profile, Circle and journal in the app at any time.
- Delete pieces: remove people from your Circle, journal entries, saved readings and photos at any time.
- Delete everything: “Delete all my data” (in You, then Your Profile) deletes your account and the information saved with it, photos first, and ends any web Plus subscription. It then clears the app’s data on your device. Uninstalling the Android app alone doesn’t delete your account. After deletion we keep: (1) server and hosting logs for as long as our providers keep them; and (2) if you accepted our terms in the app, a record of that acceptance, kept with your consent record (see below). Stripe and Link keep their own records of your payments, for as long as the law requires them to. We don’t use these records to rebuild your account or profile.
- What we keep after you delete your account (AI-written profiles and readings): Besides the items listed under “Delete everything”, we keep a record that we must not email you again and a minimal record of your consent choices and the deletion date (up to 3 years). Stripe and Link keep payment records under their own policies and the law. None of these records is linked to your readings, journal or birth details. Backups clear within 7 days. Anthropic may keep a copy of AI requests for up to 30 days, or longer for content it flags for safety review; our other providers keep data under their own policies.
- How fast we answer: we answer requests to see, correct or delete your information within the time the law requires: one month for people in the EU and UK, and 45 days elsewhere. If we need more time, we’ll tell you.
- A copy of your data: email support@jxrlabs.app from the address on your account, and we’ll send a copy of what we hold.
Copies can briefly remain in our providers’ systems after deletion, for example in their logs, until those expire.
Your US state privacy rights
Depending on where you live, a US state law may give you rights over your personal information. We offer these to everyone who uses ZodiacFolk in the US:
- Know and get a copy. Ask what personal information we hold about you and get a copy. Email support@jxrlabs.app from the address on your account.
- Correct. Fix your profile, Circle and journal in the app at any time, or ask us to fix something you can’t.
- Delete. Remove pieces in the app, or use “Delete all my data” in You, then Your Profile. Providers may keep a copy for a short time, as described above.
- Move your information. We’ll send a copy in a common, machine-readable format (JSON).
- Opt out of sale, sharing and targeted advertising. We don’t sell your information, we don’t share it for advertising, and we don’t use it for targeted advertising, so there is nothing to opt out of.
- Limit use of sensitive information. Your journal and birth details can reveal sensitive things about you. We use them only to provide ZodiacFolk to you, and you can delete them any time.
- Profiling. We don’t use your information to make decisions that have legal or similarly significant effects on you.
- No unfair treatment. We won’t treat you differently for using these rights.
How to use your rights. Email support@jxrlabs.app from the address on your account, or use the controls in the app. We may ask you to confirm it’s you by replying from your account email or confirming in the app. An authorized agent can ask for you if you send us their written permission and confirm it’s you.
How fast. We answer within 45 days. If we need more time, we may take up to 45 more days, and we’ll tell you why.
If we say no. You can appeal by replying to our answer with the word “Appeal”. We’ll answer your appeal within 60 days. If you’re still not satisfied, you can contact your state’s attorney general.
Children. We don’t knowingly collect personal information from children under 13; ZodiacFolk is for people 13 and older.
Security
- Encrypted connections: information travels over encrypted connections.
- Access controls: each account’s records and photos are protected by rules in our database that refuse access from any other account.
- Limited access: only JXR Labs can reach the systems that store your data.
No system is perfectly secure. If something goes wrong that affects your information, we’ll tell you as the law requires.
Where your information is processed
ZodiacFolk stores and processes information in the United States. If you use it from outside the United States, your information is transferred to the United States.
Changes to this policy
When our practices change, we’ll update this policy and its effective date. If a change matters, we’ll let you know in the app before it takes effect.
Contact
JXR Labs LLC
42020 Village Center Plaza
Ste 120, PMB 780
Stone Ridge, VA 20105
support@jxrlabs.app