Arcantia privacy policy

Who is responsible

Aitor Gilabert Juan, c. Adrià VI, 24, 43580 Deltebre, Tarragona (Spain), NIF 47622481S, is the data controller. Contact for any privacy matter: info@arcantia.app.

What data Arcantia processes

• Your account. The first time you open the app, a guest (anonymous) account is created so your readings are not lost; it only has an identifier. If you register, we also store your email address.
• What you write and what the app answers. Your questions, the cards drawn, the interpretations, your conversations with the chat and with the lunar guide, your journal, notes, intentions, agenda entries and reminders.
• Your birth details, if you enter them. Your name, and the date, time and place of your birth. They are optional: they are used to compute your natal chart and transits. You can change or clear them whenever you like.
• Your approximate location, if you allow it. Only when you tap “use my location”, and only as coarse coordinates (Android’s approximate location permission): never continuous tracking, never in the background. It is used for the moon’s rise and set times and to know whether an eclipse is visible where you are, and it is saved with your preferences. You can also pick a city by hand and never grant the permission. If there is no location, the server may estimate an approximate one from the IP address of the request, only to do the calculation and without storing it.
• Your progress. Lessons completed, games, streaks and statistics.
• Purchases. Which subscription you have and whether it is active, through RevenueCat and Google Play. Arcantia never sees your card: payment happens inside Google Play.
• Usage statistics, if you accept them. A closed list of usage events, linked to your account. See the “Usage statistics” section.
• Crash reports. When the app fails, it sends the error type, the error message and the technical stack trace (both truncated), the platform, the language and the app version, with a random installation identifier. They contain nothing from your readings or questions and no account identifier: they only say whether a session was open (yes or no). The IP address is stored only as a hash, never in clear text, to limit abuse. Crash reports are deleted after 90 days.
• A device identifier. On Android, the app sends the system identifier (SSAID) and, when possible, a Google Play Integrity check, so the daily AI limit cannot be reset by reinstalling the app. When no verified identifier is available, the server derives a key from the IP address; the IP itself is not stored.
• Content reports. If you report an AI answer, we store the reported text, the reason, any comment you add, where it appeared, the language, the app version, the installation identifier, your account and a hash of the IP address (never the IP in clear text), to limit abuse.
• Memory and portrait, if you have them turned on. Explained in the next section.

Memory and portrait

If you have a registered account, Arcantia can remember what you have told it and build a portrait of you to accompany you better. It only works if you turn it on, and you can turn it off at any time in your Personal profile, under “Memory and portrait”. Guest accounts have no memory and no portrait.

• What it remembers (the memory). Some of your recent sentences — questions from readings, chat messages, questions to the lunar guide, notes and intentions — with their date: at most five sentences from the last fourteen days, so the chat can keep them in mind. They are your own sentences, word for word.
• What is inferred (the portrait). Once a month, for Premium subscribers, the app summarises your last twelve months of activity: how many readings and conversations you had, which cards and suits come up most, the themes that keep returning (love, work, money, health, family, grief, decisions…), the people who appear, by their role (partner, mother, friend, boss… never by name), your rhythm (days and times of day), your meditation practice, and the mood you mark on your notes. From that summary, the artificial intelligence model writes a short portrait in five parts: who you are, your moment in life, your underlying themes, your sensitivities and how to accompany you. Every sentence must cite the facts that support it; any sentence that does not is discarded.
• What for. Only personalisation: so that the chat, the monthly reflection and Deep analysis talk about you and not about just anyone. It is not used for advertising, it is not sold or passed on, and it is not used to take any automated decision with legal or similarly significant effects on you (Article 22 GDPR): it does not grant or deny you anything and does not change any price.
• Legal basis. Your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), because what you share may touch sensitive topics such as health or beliefs. You can withdraw it at any time, at no cost and without losing the rest of the app; withdrawing it does not make earlier processing unlawful.
• Who sees it. You, in the app: in “What do you remember about me?” and on the screens that talk about you. To write the portrait, the summary (with a few of your sentences quoted word for word) is sent to the AI provider (OpenAI or, as a fallback, Anthropic), which processes it as a data processor. No admin screen shows portraits; the controller can only access them technically to maintain the service or to handle a request from you.
• How long. The portrait is recalculated every month over the last twelve months and replaces the previous one. It is kept while memory is turned on and the account exists.
• How to turn it off and what is deleted. When you turn off “Memory and portrait”, the portrait is deleted in full immediately, the chat stops using the memory and no new portrait is generated. In “What do you remember about me?” you can also make the app stop remembering a specific sentence.
• What is not deleted when you turn it off. Your messages and readings, which are your history, and the monthly reflections already generated (“Your month”: the month’s facts summary and the text that goes with it). Those reflections are deleted when you delete your account, or earlier if you ask us at info@arcantia.app.

Usage statistics

• What is collected. A closed list of events — opening the app, starting or finishing a reading, viewing the subscription screen, starting or completing a purchase, opening Deep analysis, starting or finishing a meditation, and a few more of the same kind — with a random installation identifier generated by the app, the app version, the platform, the language and, where relevant, the store product. Events are linked to your account, guest or registered. The format allows no free text: your questions never travel inside an event.
• What for. To know which parts of the app work, where it fails and whether the subscription is sustainable. They are not used for advertising or to build a commercial profile of you, and they are not shared with anyone.
• Legal basis. Your consent (Article 6(1)(a) GDPR). The app asks for it the first time you open it, with two equal buttons, “Not now” and “Accept”, and nothing pre-selected, and it sends no events until you accept. If you say no, you lose nothing: the app works the same. You can change your choice at any time with the “Usage statistics” switch in “Settings” (in the menu at the top right). Turning it off withdraws your consent: from then on the device stops sending events, and the withdrawal does not make earlier processing unlawful. Crash reports do not depend on this choice.
• How long. Events are deleted automatically after 400 days and crash reports after 90 days, by a daily job. Events linked to your account are deleted earlier if you delete the account, and you can ask for the ones already sent to be deleted by writing to info@arcantia.app.

What stays on your phone

Recent conversations, drafts and preferences are cached on the device so the app works offline and opens fast. Reminders are scheduled on the phone itself, as local notifications: the text of a reminder does not go through any external notification service. Deleting your account clears the cache; uninstalling the app removes everything from the phone.

Artificial intelligence

Interpretations, lunar guidance, chat replies, monthly reflections, Deep analysis and the portrait are generated by an artificial intelligence model from OpenAI. If OpenAI fails or does not answer in time, the same request is sent to Anthropic (Claude model), the fallback provider, which receives data only in that case. Both process the data as data processors, under the terms of their APIs.

When you ask something, the question and the context needed are sent to the provider: the reading, the recent conversation and, if you have it turned on, the memory. For the monthly reflection and Deep analysis, the questions, messages, notes and plans of the period are sent as well, along with the mood you marked. What you write travels as you wrote it, including the names of any people you mention. Your date, time and place of birth are not sent: the natal chart is computed on our servers and only the result travels (the planets in the signs and, if you gave your birth time, also the degrees, the houses and the Ascendant, with the aspects and transits). Your account name and email address and your payment details are never sent.

Neither OpenAI nor Anthropic uses the data it receives through its API to train its models. They may keep it for a limited time to detect and prevent abuse: for up to 30 days, unless the law requires longer or it is needed to prevent harm or to enforce their usage policies.

The AI is there for reflection and entertainment. It does not make medical, psychological, legal or financial decisions. If a question or message you write in the chat or in a reading shows that someone may be in danger, the app answers with a pointer to human help and does not send it to the model.

What we use data for, and on which legal basis

• Providing the service you ask for (Article 6(1)(b) GDPR, performance of the contract): the account, readings, chat, agenda, the natal chart with the details you enter, the moon times where you are, and the subscription.
• Memory and portrait (Articles 6(1)(a) and 9(2)(a), explicit consent), as explained above.
• Usage statistics (Article 6(1)(a), consent), only if you accept them, as explained above.
• Maintaining, improving and protecting the app (Article 6(1)(f), legitimate interest): crash reports, fraud and abuse prevention (device identifier, Play Integrity, AI usage limits), reviewing content reports and protection in crisis situations.
• Complying with legal obligations (Article 6(1)(c)): keeping the financial records required by accounting and tax law.

Who else processes your data

These providers process data on behalf of Arcantia, as data processors, only to run the service:

• Supabase: database, accounts and storage.
• Vercel: hosting of the server.
• OpenAI: the main artificial intelligence model, which generates the text.
• Anthropic: the fallback artificial intelligence model (Claude), which only receives a request when OpenAI fails or does not answer in time.
• Google: Play Integrity to verify that the app is genuine, and Google Play for billing.
• RevenueCat: subscription status, based on your account identifier.

Arcantia does not sell your data, does not pass it on to third parties for their own purposes and does not show advertising.

International transfers

The server (Vercel) and the database (Supabase) run in the European Union, in Ireland, although Vercel is a United States company. Some of these providers may process data outside the European Economic Area, mainly in the United States; OpenAI and Anthropic are among them. In those cases the transfer relies on the EU-US Data Privacy Framework, for participating companies, or on the standard contractual clauses approved by the European Commission. For OpenAI and Anthropic, it relies on those clauses, which are part of their data processing addendums.

How long data is kept

• Your content, while the account exists. When you delete your account it is deleted immediately, in a single operation: see the account deletion page for what is kept afterwards, unlinked from you, and why.
• The portrait, as explained under “Memory and portrait”.
• Usage events, 400 days at most.
• Crash reports, 90 days at most.
• The daily AI usage limit counters (some carry a key derived from the IP address or the device identifier), 30 days.
• The verified device record (the device identifier and the Play Integrity check), 13 months after the last check.
• Reports of AI answers, until they are reviewed and for 12 months after that.
• Financial records, for as long as accounting and tax law requires, without your identifier once the account is deleted.

Your rights

You can ask for access to your data, rectification, erasure, portability or restriction of processing, and object to processing based on legitimate interest, by writing to info@arcantia.app. From the app itself you can withdraw your consent to memory and portrait, and your consent to usage statistics. Deleting your account is also a button inside the app: open the menu at the top right and choose “Delete account”; the same menu links this policy and the terms of use.

If you think your data is not being handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) or with the data protection authority of your country.

Minors

Arcantia is not intended for, or directed at, people under 18. We do not knowingly collect their data; if you believe someone under 18 has an account, write to info@arcantia.app and we will delete it.

Changes

If this policy changes in a way that affects you, the app will tell you before the change applies; if the change needs your consent, it will ask for it. The date at the top always matches the current version.