Starlina — Privacy Policy

Effective date: October 10, 2026

Leer esta política en español · Términos del Servicio en español

Welcome to Starlina. This policy explains, in plain language, what personal information we collect, how it is used, who it is shared with, how long we keep it, and the choices and rights you have. Starlina is an intimate space, and we want you to understand exactly how your information is handled before you decide to use it.

This Privacy Policy governs data. It is not the place where the character of the service, the disclaimers, or your agreement to our Terms live — those are in our Terms of Service and our Crisis & Safety Protocol, which this policy references where relevant.

1. Who we are

Starlina is an astrology and self-reflection companion operated by PREVYU LLC (“PREVYU,” “we,” “us,” or “our”), the controlling entity and the business responsible for the personal information described in this policy (the “controller” / “business” for the purposes of applicable privacy law).

Starlina is an adult product, intended only for individuals 18 years of age or older. It is offered in English and Spanish. Starlina is for entertainment and personal reflection; it is not medical, mental-health, legal, or financial advice, and it is not an emergency service. See Section 12 (Safety) and our Terms of Service for more on what Starlina is and is not.

If you have any questions about this policy or your information, you can reach us at:

PREVYU LLC Privacy contact: privacy@starlinaoracle.com

2. Notice at collection

This short notice is surfaced to you at signup, before or at the point we collect your information, and the fuller detail is in the sections that follow.

At collection, we collect:

The questions and messages you send to Starlina, and Starlina’s replies.
Your birth date and birth city, and — only if you choose to share it — your birth time.
Basic account and device/usage information needed to run the service (including your IP address and similar network identifiers), and limited purchase/transaction information if you buy a subscription or other in-app purchase (purchases are processed by the Apple App Store or Google Play, who handle your payment method — we do not receive or store your card number).
Forward-looking reflections (“Foresight”), only if you turn them on. With your separate permission, Starlina looks across your non-crisis messages over time to derive a forward-looking sense of recurring themes and mood patterns that colors her readings. It is an ephemeral, rolling snapshot kept only while the permission is on; it is deleted when you turn Foresight off, withdraw your collection permission, or delete your account. Crisis messages are never used. Details: our Consumer Health Data Privacy Policy.
Messages you send us. If you email our support or privacy address, we keep your message and email address so we can respond; the raw copy received on our servers is deleted after 30 days.

Why we collect it. We use this information to create your astrological readings and personalize Starlina (including Starlina’s memory of your prior conversations and, if you turn it on, her forward-looking “Foresight” sense), to run safety and content-moderation screening, to keep the service secure and prevent abuse, and to improve the service.

Birth date/time/place and the intimate, personal content you choose to share may be “sensitive personal information” under California law. We use it only for the purposes described in this policy.

We do not sell your personal information, and we do not use or share it for cross-context behavioral advertising, as those terms are defined by the CCPA.

How long we keep it. We retain each category only as long as needed for the purposes above — for example, raw conversation content for up to 90 days. The retention periods, the criteria we use, and the limited records that survive account deletion are described in Section 7.

Full details, and the choices and rights you have, are in the rest of this Privacy Policy.

3. Information we collect

We collect the following categories of personal information:

Your birth date. We use it both to confirm you are 18 or older and, together with your astrological chart, to personalize Starlina’s readings.
Birth city, and optional birth time. We use your birth city — and your birth time, if you share it — to calculate a more detailed chart. The time is optional — Starlina works without it.
Your messages and Starlina’s replies. The questions, messages, and conversation content you send to Starlina, and the readings and replies Starlina generates in response.
An account identifier and basic device/usage information. A sign-in/account identifier (your email address and, if you sign in with Google, the name and profile picture Google provides) and limited technical information (such as device and app-usage signals, including your device’s time zone) needed to operate, secure, and support the service.
Limited purchase/transaction information. If you make an in-app purchase, the fact and basic details of that transaction. Purchases are processed by the Apple App Store or Google Play, who hold your payment method — PREVYU does not receive or store your card number.
An age category from your app store. Where your app store (Google Play or the Apple App Store) tells us the age category of your account — for example as required by Texas law — we use it only to apply age restrictions and safety defaults, we do not store it with your account, and we delete what the store sent us once that check is complete.

A note on sensitive information. Given Starlina’s nature, some of what you share — in particular your birth date, any birth time and place you provide, and the intimate, personal content of your conversations — may qualify as “sensitive personal information” under California law. We treat this information with care and use it only for the purposes described in this policy. See Section 9 (Sensitive personal information + Right to Limit).

4. How your conversations are processed — third-party AI (OpenAI)

To bring Starlina to life, we use a third-party artificial-intelligence provider, OpenAI. This is the most important thing to understand about how Starlina works, so we want to be clear and direct about it.

What is sent to OpenAI, and why. When you message Starlina, the text of your messages — and the birth details you choose to share — are transmitted to OpenAI, which processes them on our behalf to (1) generate Starlina’s replies and readings, and (2) run automated safety and content-moderation screening that helps us recognize signs of abuse, harm, or activity that breaks our rules and decide when to surface crisis resources. This screening is performed by automated systems — software, not a human reading along in real time.

We ask for your explicit, affirmative agreement first. Before any message content is sent to OpenAI for AI processing — and before you can compose or send your first message to Starlina — we present an affirmative consent gate: a clear, separate acknowledgment you must actively accept (not a pre-checked box, and not buried in a general “by using our app you agree” statement). No conversational content is transmitted to OpenAI until after you accept it.

Your express, prior consent to processing through our AI provider. By accepting that consent gate, you expressly and affirmatively consent — in advance of any transmission — to the transmission of your messages and the birth details you choose to share to OpenAI, and to OpenAI’s receipt, recording, storage, processing, and automated content-moderation screening of that content as our service provider acting on our behalf and under our instructions, for the purposes described above. You give this consent before any of your message content is transmitted. We obtain this consent so that the routing of your conversation to our AI provider, and OpenAI’s automated processing and safety-screening of it, occur only with your prior, knowing agreement (consistent with federal and state electronic-communications and anti-wiretap laws, including the California Invasion of Privacy Act, Cal. Penal Code § 631, and the federal Electronic Communications Privacy Act, 18 U.S.C. § 2511(2)(d)). You can withdraw this consent at any time, which means Starlina can no longer respond to your messages (see Section 8).

We do not sell your information. OpenAI acts as our service provider / processor: under our agreement with OpenAI, it processes your content only on our behalf and on our documented instructions to operate Starlina, and OpenAI does not use your content to train its general models or for its own independent purposes. OpenAI retains your content only for a limited period — up to 30 days — for safety and abuse-monitoring, after which it is deleted; OpenAI does not use it to train its general models. Disclosing your content to OpenAI for these purposes is not a sale or a sharing of your personal information under the CCPA.

In addition to responding when you message her, Starlina prepares your personalized daily horoscope for you on a recurring daily schedule. To generate it, the astrological chart derived from your birth details — together with the day's planetary positions — is transmitted to OpenAI, acting as our service provider on the same terms described in this Section 4 and under the same consent. No new category of information is used, and withdrawing your AI-processing consent (below) stops this processing.

5. How we use your information

We use your information to:

Provide and personalize the service. To generate your readings and conversations, calculate your chart, and power Starlina’s memory of your prior questions and readings so she can remember your story over time and offer a continuous, personalized experience.
Keep the service safe. To run automated safety and content-moderation screening, surface crisis resources when certain signals are detected, prevent and investigate abuse and fraud, enforce our Terms, and protect the safety of our users and the public.
Send you service notices. We may send service notices to your account email — for example a change to the Terms or to a plan’s limits; these are not marketing messages.
Improve the service. To understand how Starlina is used and to make it better and more reliable. Where we analyze usage to improve the service, we use information in aggregated or de-identified form. When we de-identify information, we maintain it in de-identified form, take reasonable measures so it cannot reasonably be linked back to you, do not attempt to re-identify it, and require recipients to do the same, as required by the CCPA. If you choose to rate a reading (for example, a 👍 or 👎, and an optional reason you select from a short list), we use that feedback — together with the reading it refers to — to evaluate and improve the quality and reliability of Starlina's readings. We keep this feedback linked to your account so we can count each person only once; we use and report it only in aggregate, and it is deleted with your account. We do not sell or share it, and we do not use it to infer characteristics about you for advertising. Rating a reading is always optional.

We use your sensitive personal information only to provide, secure, and improve the service you requested — not to infer characteristics about you for advertising.

6. Who we share it with

We share personal information only as described here, and we do not sell your personal information, and we do not use or share it for cross-context behavioral advertising (as those terms are defined by the California Consumer Privacy Act, “CCPA”).

OpenAI (AI service provider / processor). As described in Section 4, the text of your messages and the birth details you share are disclosed to OpenAI to generate your readings and to run safety screening. OpenAI acts as our service provider, processing your content on our behalf under our instructions and contract — not for its own purposes.
Other service providers under contract. We use other service providers to operate Starlina — specifically: cloud hosting and infrastructure (Amazon Web Services); identity and sign-in/authentication (Amazon Cognito, and Google if you choose to sign in with Google); app distribution and in-app purchase / payment processing (the Apple App Store and Google Play; your payment method is held by Apple or Google, not by PREVYU); and business e-mail hosting for the support and privacy mailboxes we answer you from (Google Workspace, Google LLC). Each acts as our service provider under a contract that limits their use of your information to operating Starlina for us. We do not use any advertising, analytics, or crash-reporting SDK in the app.
Legal, safety, and fraud/abuse purposes. We may disclose information when the law or legal process requires it, where we believe in good faith it is necessary to protect the safety of any person, or to investigate or prevent fraud, abuse, or violations of our Terms.
Aggregated or de-identified information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you, for research, analytics, and improvement, and we handle that information consistent with the de-identification commitments in Section 5.

Disclosures to our service providers under these terms are not a sale or sharing of your personal information. If our practices ever change, we will update this policy and provide a “Do Not Sell or Share My Personal Information” choice before doing so.

7. How long we keep it / your memory

We keep personal information only for as long as we need it for the purposes described in this policy, then delete or de-identify it. Here is how this works for the main kinds of information, including Starlina’s memory of you.

Retention by category. The periods and criteria below cover each category of personal information in Section 3:

Category	Retention period / criteria
Your messages and Starlina’s replies (raw conversation content)	Up to 90 days, then automatically deleted
Crisis-flag record (category flag + timestamp only; see below)	Up to 30 days, then deleted
Distilled long-term “memory” facts (no more than 32)	Kept while your account is active; purged on account/data deletion
Foresight snapshot (only if you turn it on)	An ephemeral rolling snapshot, overwritten as new patterns emerge; deleted when you turn Foresight off, withdraw your collection permission, or delete your account
Deep Reading books you receive (and any translated edition)	Kept in your account while it is active, so you can reread them; purged when you delete your account or your data
Purchase / transaction records (what you bought, when, order and status details)	Kept as long as needed for tax, accounting, refunds and fraud prevention, including after account deletion
Birth date, birth city, optional birth time, and astrological chart	Kept while your account is active; purged on account/data deletion
Account identifier and basic device/usage information	Kept while your account is active and for a short period afterward as needed to operate, secure, and support the service; purged on account/data deletion except the limited survivors below
Limited purchase/transaction information	Kept as needed for tax, accounting, and to support your purchases, consistent with our legal obligations
Reading feedback (ratings you submit)	Kept linked to your account so each person is counted only once; used and reported only in aggregate. Deleted when you delete your account (feedback is covered by the same account-deletion wipe as your other data). Aggregate quality statistics that cannot reasonably be linked back to you may be retained.
Usage-event records (in-app analytics events)	Up to 90 days (they expire automatically); after that, only aggregate statistics remain

Your raw conversation messages. We keep the raw, message-by-message content of your conversations (your messages and Starlina’s replies) for up to 90 days, after which it is automatically deleted.

Crisis-related turns are handled differently — by the design of the record, the text is not part of it. If something you write triggers Starlina’s crisis-referral safety step, the record we keep stores only a category flag indicating that a crisis signal was detected. By the design of that record, the text of what you wrote in that turn is not part of the crisis-flag record — the record holds the flag and a timestamp, not your message. The category flag is kept for up to 30 days.

Your memory (“distilled facts”). Where Starlina’s memory feature is available to you, it works like this: to power that memory, we keep a small set of distilled long-term facts about you — no more than 32 such facts — so Starlina can remember your story across sessions. These are kept while your account is active.

Account deletion purges your memory store. When you delete your account or data, we purge the entire memory store — your raw conversations, your distilled facts, your chart, and Starlina’s memory of you.

What survives deletion, and why. For the limited purposes the law permits or requires, a small number of records may be retained after you delete your account. We want to be specific about exactly what these are:

Abuse reports you filed. If you report a reading, we keep that report — the reading, your message, and the reason you chose — for up to 12 months from the date you filed it, as Trust-&-Safety evidence: so we can review it, improve safety, and enforce our rules fairly. If you delete your account, the report is de-identified: we remove your account identifiers from it, keep it only as a record that is no longer linked to you, and never try to re-link it (see the de-identification commitments in Section 5). The words of the report itself are kept as you wrote them. We keep a report longer only if needed to resolve an open safety matter or to establish, exercise, or defend legal claims.
A crisis-referral counter (no personal information). We keep a de-identified count of how many times Starlina referred users to crisis services — with no identifiers and no personal information about you — so we can prepare for a statutory annual crisis-referral report under California’s SB 243 (Cal. Bus. & Prof. Code § 22603), which begins July 1, 2027 and covers the preceding calendar year. By law that report contains only aggregate counts and no identifiers or personal information about any user. Because this counter holds no personal information about you, it is not subject to a deletion request and does not identify you.
A minimal “tombstone” suppression record. We keep a minimal record consisting of your prior account identifier, the fact that the account was deleted, the timestamp, and a short code for why the deletion ran (for example, that you asked for it in the app or on our web page, or that an app-store age check required it) — used solely to make the deletion stick and to prevent your account from being silently re-created during the short window in which a valid sign-in token may still exist. We keep this record for up to 24 months after deletion, unless a longer period is needed to resolve an open safety matter or to establish, exercise, or defend legal claims.
Purchase records. If you bought something, the record of that purchase (what you bought, when, and its order and status details, linked to your former account identifier) is kept as long as needed for tax, accounting, refunds, and fraud prevention.

Why the law allows this. The CCPA specifically allows a business to retain certain information even after a deletion request — for security, to prevent and investigate fraud and abuse, to protect users’ safety, and to comply with legal obligations or defend legal claims (Cal. Civ. Code § 1798.105(d)). The abuse-report and tombstone records above are retained on this basis, narrowly, for those purposes. The crisis-referral counter is not subject to deletion because it contains no personal information about you. Everything else is deleted, except the purchase/transaction records we must keep for tax, accounting, refund and fraud-prevention purposes, as shown in the table above.

8. Your choices and rights

You have meaningful choices about your information. You can:

Access the personal information we hold about you;
Correct information that is inaccurate;
Delete your account and your associated personal information; and
Withdraw your consent to AI processing. You can withdraw the consent you gave for your messages to be processed by OpenAI (Section 4) at any time. Because OpenAI processing is how Starlina generates replies and runs safety screening, withdrawing it means Starlina can no longer respond to messages; messaging is disabled while consent is withdrawn, and you may delete your account at any time (see “Deleting your account” below). Withdrawing consent does not by itself delete information already collected — use Delete to remove that.

Deleting your account. You can delete your account and your associated personal information directly in the app — go to Settings → Delete my account & data — in a path that takes only a couple of steps and uses no dark patterns. In-app account deletion is provided to meet Apple’s account-deletion requirement (App Store Review Guideline 5.1.1(v)). You can also delete your account from our web deletion page at https://starlinaoracle.com/delete-account, provided so that account deletion is reachable outside the app as well (consistent with Google Play’s account-deletion policy). A limited set of records may be retained after deletion for the legal, safety, and security reasons described in Section 7.

California privacy rights. We honor the following privacy rights for California residents. (Where the CCPA applies to us, these are your statutory rights; where it does not, we offer them as our own commitment, which we honor either way.)

Right to Know / Access — to request the categories and specific pieces of personal information we have collected about you (specific pieces covering at least the 12-month period before your request, and earlier where reasonably feasible), the sources, the business or commercial purposes for collecting it, and the categories of service providers we disclose it to.
Right to Delete — to request that we delete personal information we collected from you, subject to the legal/safety retention exception described in Section 7.
Right to Correct — to request that we correct inaccurate personal information.
Right to Opt Out of Sale/Sharing — we do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose your content to OpenAI and to our other service providers only as service providers/processors under contracts that restrict them to operating Starlina for us — which is not a “sale” or “sharing” under the CCPA. If this ever changes, we will tell you and provide a clear way to opt out.
Right to Limit Use of Sensitive Personal Information — to direct us to limit our use of your sensitive personal information to the purposes permitted by law (see Section 9).
Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

Where applicable law gives you a right to object to or restrict certain processing, we honor that right as the law requires.

How to make a request, and how long it takes. Because we do not yet offer an automated data-export tool, access requests are fulfilled through a verified email request: contact us at privacy@starlinaoracle.com, and we will acknowledge your request and respond within the time required by applicable law (under the CCPA, generally within 45 days, extendable once by an additional 45 days where reasonably necessary, with notice to you). You may use an authorized agent to make a request on your behalf; we may require the agent to provide proof of authorization and may verify your identity directly. (An automated in-app export tool is planned as a later improvement.)

9. Sensitive personal information + Right to Limit

Some of what you share with Starlina — in particular your birth date, any birth time and place you provide, and the intimate, personal content of your conversations — may be “sensitive personal information” under California law.

We use sensitive personal information only to provide, personalize, secure, and improve Starlina — to generate your readings, calculate your chart, power Starlina’s memory, and run safety screening (shared with OpenAI as our service provider, as described in Section 4). We do not use it to infer characteristics about you for advertising, and we do not sell or share it.

If you are a California resident, you may direct us to limit our use of your sensitive personal information to those permitted purposes. Because we already restrict our use of sensitive personal information to providing and securing the service you requested, this right is already reflected in how we operate. To exercise it, contact us using the request channel in Section 8.

10. Children’s privacy / age

Starlina is an adult product for users 18 and older. It is not directed to children, and it is not intended for use by anyone under 18. We do not knowingly permit anyone under 18 to create an account or use Starlina.

We do not knowingly collect, use, or disclose personal information from any child under 13, as that term is defined by the Children’s Online Privacy Protection Act (“COPPA”), 16 C.F.R. Part 312, as amended (final amendments published April 22, 2025; effective June 23, 2025). If we learn that we have collected personal information from a child under 13, we will delete it and close the associated account as promptly as reasonably practicable (deletion-on-discovery).

If you are a parent or guardian and believe a child under 13 may have provided us with personal information, please contact us at privacy@starlinaoracle.com so we can delete it.

11. How we keep your information safe

We use reasonable administrative, technical, and organizational measures designed to protect your personal information against unauthorized access, use, alteration, and disclosure. These measures are intended to be appropriate to the sensitivity of the information involved.

That said, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. We work to protect your information, but you share it with the understanding that we cannot promise that it can never be accessed or disclosed in a manner inconsistent with this policy.

12. Safety

Your safety matters to us, and we want to be honest about what an app can and cannot do.

When Starlina’s automated screening flags a possible crisis signal — for example, thoughts of harming yourself or someone else, or that you have experienced violence or assault — Starlina is designed to attempt, on a best-effort basis, using automated and imperfect methods that will not catch every situation, to interrupt its usual replies and offer independent, third-party support resources. Whether, when, and which resources appear depends on whether the automated screening recognizes the signal, and is not guaranteed. Examples of the resources Starlina may offer include:

the 988 Suicide & Crisis Lifeline (call or text 988; for Spanish, call 988 and press 2, or text AYUDA to 988);
the Crisis Text Line (text HOME to 741741);
RAINN, the National Sexual Assault Hotline (call 800.656.HOPE (4673) or text HOPE to 64673; English and Spanish);
findahelpline (findahelpline.com), a directory of free, confidential support lines; and
additional support options, including local emergency services.

Please understand the limits, which are important:

Starlina is not a medical, mental-health, crisis, counseling, or emergency service, and using Starlina is not a way to reach one.
These safety features are automated and best-effort. They are not guaranteed to detect every situation, may miss signals, and may sometimes respond to something that was not actually a crisis.
Starlina is not monitored by people in real time. Starlina cannot call for help on your behalf and cannot guarantee that a human will respond or how quickly.
The resources above are independent third-party services that we do not operate.

If you or someone else is in immediate danger, contact your local emergency services right away — in the U.S., call or text 988, or call 911. Please do not rely on Starlina in an emergency.

For more detail on how Starlina is designed to recognize a crisis signal and what it does, see our Crisis & Safety Protocol page at https://starlinaoracle.com/crisis-protocol/index.html.

13. United Kingdom (UK GDPR)

Starlina is offered by PREVYU LLC. If you use Starlina in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to our processing of your personal data, and the rights and disclosures in this section apply to you. (Starlina is not yet offered to users in the European Union; an EU section will be added before any EU launch.)

What we process and why. We process the messages you send (which may include information about your moods, emotions, or wellbeing) and the birth details you choose to provide (birth date, and any birth time and place) to generate your readings and to run automated safety screening. Our lawful bases are your consent and the performance of our contract with you. Because some of this information can relate to your health or wellbeing, we rely on your explicit consent under UK GDPR Article 9(2)(a) for that sensitive information, which you give through the separate consent choices in the app and may withdraw at any time.

International transfers. Your data is processed in the United States by our AI provider, OpenAI OpCo, LLC (acting only on our written instructions; OpenAI does not use data sent through its API to train its models and retains it for at most 30 days for abuse monitoring), and on our United States cloud infrastructure. These transfers are made under the European Commission's Standard Contractual Clauses as amended by the UK International Data Transfer Addendum issued by the Information Commissioner under section 119A(1) of the Data Protection Act 2018 (incorporated in our providers' data processing agreements), with a Transfer Risk Assessment on file. The Information Commissioner's Office is the competent supervisory authority for those clauses.

Retention. We keep your conversation messages for up to 90 days, crisis-safety records for up to 30 days, and long-term memory facts for as long as your account is active (purged on account or data deletion); abuse reports for up to 12 months from filing (de-identified if you delete your account); and suppression records for up to 24 months after deletion. Predictive ("foresight") features are not enabled for UK users.

Automated decisions. We do not make solely automated decisions that produce legal effects concerning you or similarly significantly affect you. Starlina's readings are for entertainment and are not advice.

Your rights. You have the UK GDPR rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. To exercise them, contact privacy@starlinaoracle.com. You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.

UK Representative. As required by Article 27 UK GDPR, we are appointing a UK Representative to act as a contact point for UK data-protection matters; their name and UK address will be published in this section once the appointment is complete. In the meantime you can contact us about UK data-protection matters at privacy@starlinaoracle.com. PREVYU LLC remains responsible for your personal data.

14. Changes to this policy

We may update this Privacy Policy as our practices or the law change. When we do, we will revise the effective date at the top. For material changes, we will provide notice and, where the law requires it, obtain your affirmative consent before the change applies to information we have already collected. Other changes take effect on the updated effective date. We encourage you to review this policy from time to time.

15. How to contact us

If you have any questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

PREVYU LLC Privacy contact: privacy@starlinaoracle.com Support: support@starlinaoracle.com

For account deletion, see Section 8. For safety concerns, see Section 12 and our Crisis & Safety Protocol page. For our broader terms and the character of the service, see our Terms of Service.