Privacy Policy

Last updated: September 24, 2026

At Zelest (“App”, “we”, “our”), we greatly value the privacy of our users. This Privacy Policy explains how your personal data is collected, used, stored, and protected when you use the Zelest mobile application and related services.

By using the App, you agree to this policy.

1. Data We Collect

1.1 Data Collected Directly From You

Account information: Email address, username
Birth information: Date of birth, time of birth, place of birth (for astrological calculations)
Profile information: Name, gender (optional)

1.2 Automatically Collected Data

Push notification identifier: A push notification token for your device, used to deliver notifications
Location data: Used only to derive coordinates and time zone calculations from the birthplace you enter; your device’s current location is not accessed and no continuous location tracking is performed
Notification preferences: Your settings for which types of notifications you wish to receive

We do not use analytics or advertising tracking technologies (such as analytics SDKs or advertising identifiers) that monitor your in-app behavior.

1.3 Data From Third Parties

Apple/Google account information: Basic profile information when social login is used
Payment information: Subscription status (credit card details are not stored directly by us)

2. How We Use Your Data

The collected data is used for the following purposes:

Astrological calculations: Birth chart creation, transit analyses, synastry calculations
AI-powered interpretations: Transfer to AI models via the OpenRouter infrastructure for generating personalized astrology interpretations
Notifications: Daily horoscope readings, transit alerts, and other personalized notifications
Service improvement: Enhancing user experience, detecting and fixing bugs
Subscription management: Managing payment processes and tracking subscription status
Legal obligations: When required by applicable legislation

3. Third-Party Services

Our App works with the following third-party service providers:

3.1 Supabase

Purpose: Database and user authentication
Shared data: Account information, birth data, user profiles
Privacy policy: https://supabase.com/privacy

3.2 OpenRouter

Purpose: Generating AI-powered astrology interpretations
Shared data: Astrological calculation results and interpretation requests. This data is not sent together with your name, email address, or account information.
Privacy policy: https://openrouter.ai/privacy

OpenRouter routes requests to model providers such as Anthropic. The model providers used may change from time to time.

3.3 RevenueCat

Purpose: In-app purchases and subscription management
Shared data: User identifier, subscription status
Privacy policy: https://www.revenuecat.com/privacy

3.4 Expo (Push Notification Service)

Purpose: Delivering push notifications to your device
Shared data: Push notification token and notification content
Privacy policy: https://expo.dev/privacy

3.5 Apple App Store / Google Play Store

Purpose: App distribution and in-app purchases
Shared data: Standard data determined by the platform
Privacy policies: The respective platforms’ own privacy policies apply

4. Data Storage and Security

4.1 Retention Period

Your personal data is stored as long as your account remains active.
When you delete your account from within the app, your data is deleted immediately and permanently.
If you have uninstalled the app and submit your deletion request by email, your request is completed within 30 days at the latest.
Data required to be retained due to legal obligations will be preserved for the applicable period.

For details about account deletion, see the Account and Data Deletion page.

4.2 Security Measures

All data transfers are protected with SSL/TLS encryption.
Encryption at rest is applied in the database.
Access controls and authorization mechanisms are in place.
Regular security audits are conducted.

4.3 Data Transfer

Your data may be transferred abroad through our service providers’ servers. These transfers are carried out with the necessary security measures under GDPR and applicable regulations.

Under the General Data Protection Regulation, you have the following rights:

Right to information: Learn whether your personal data is being processed
Right of access: Request access to your processed personal data
Right to rectification: Request correction of incomplete or inaccurate data
Right to erasure: Request deletion or destruction of your personal data
Right to object: Object to the outcome of data processing
Right to data portability: Receive your data in a structured format

To exercise these rights, please contact us through the channels listed below.

The Zelest website (zelest.ai) is a static informational site. It does not use cookies, does not track visitors, and does not store any data in your browser.

The site uses the Google Fonts service solely to display typefaces. This service does not set cookies; however, your IP address is transmitted to Google in order to serve the font files. For details, see the Google Privacy Policy.

7. Children’s Privacy

Zelest is not intended for children under the age of 13. We do not knowingly collect personal data from users under 13. If we learn that a child has provided us with personal data, we will immediately delete that data.

8. Policy Changes

We may update this Privacy Policy from time to time. When significant changes are made, we will notify you via in-app notification or email. We recommend reviewing the updated policy regularly.

9. Contact

For questions or requests regarding our privacy policy:

Email: [email protected]
In-app: Settings > Support
Address: Zelest (com.codefirst.zelest)

Your rights to apply to the data controller are reserved. If your application is denied or left unanswered, you have the right to file a complaint with the relevant data protection authority.