Your Data Is Yours

We collect your birth data to generate your readings. That is it. We do not sell it. We do not share it. We do not use it to train external AI models. This policy explains exactly what we collect, how we use it, and how to delete it.

What We Collect

Birth Data

• Birth date (day, month, year)
• Birth time (hour, minute)
• Birth location (city, state/region, country)
• Timezone information
• Latitude and longitude (derived from your birth location for astronomical calculations)

Account Data

• Email address (used for account login and reading delivery)
• Password (encrypted using industry standard pbkdf2:sha256 hashing, never stored in plain text)
• First name (optional, used only to personalize your experience)

Usage Data

• Reading history (which readings you have viewed)
• Subscription status and billing period
• Email engagement (if you opt in to email delivery)
• Basic device and browser information (for security and service improvement)

Payment Data

Payment is processed by Stripe. We do not store your credit card number, CVV, or any payment credentials. Stripe handles all payment processing securely on their servers. Your card information never touches our database. Stripe's Privacy Policy applies to payment related data.

How We Use Your Data

• To generate personalized readings using our calculation engine (Swiss Ephemeris)
• To deliver readings via email and through your dashboard
• To manage your subscription and billing through Stripe
• To improve our service, reading quality, and user experience
• To send you marketing communications (only if you opt in, and you can opt out at any time)

What We Do NOT Do With Your Data

Data Storage and Security

• All data is stored in an encrypted database
• Passwords are hashed using pbkdf2:sha256 (industry standard, never stored in plain text)
• All communication is encrypted via HTTPS/TLS
• Access to the database is restricted and logged
• Regular security audits are conducted
• Stripe handles all payment data with PCI DSS Level 1 compliance

Your Rights

California Residents (CCPA)

You have the right to know what personal information we collect, request deletion of your personal information, opt out of the sale of personal information (we do not sell your data), and not be discriminated against for exercising your privacy rights.

European Residents (GDPR)

You have the right to access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time.

How to Exercise Your Rights

Email privacy@moiraapp.com with your request. We will respond within 30 days. You do not need to explain why you want your data deleted. Just ask.

Data Retention

• Your data is retained as long as your account is active
• When you delete your account, all personal data is permanently deleted within 30 days
• Anonymous usage data (not linked to your identity) may be retained for analytics
• Subscription records may be retained for legal and tax compliance purposes

Cookies

Moira uses essential cookies for authentication and session management. We do not use third party advertising cookies. Analytics cookies, if used, respect your browser's Do Not Track setting. You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in.

Children's Privacy

Moira is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at privacy@moiraapp.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address. The updated policy is effective upon posting. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions about privacy? Email privacy@moiraapp.com. We read every message and respond within 30 days.