Privacy Policy

Last updated: November 14, 2026

This policy explains how personal data is handled in the Elandra app distributed through the Apple App Store and Google Play. The identity of the data controller, legal grounds, and rights under Turkish law are explained in the accompanying KVKK Privacy Notice.

1. Account and sign-in information

When you register with email, we process your email address, chosen profile name, and account ID. Your password is stored only as a salted one-way hash on our servers (Cloudflare) and is never stored in plain text. If you sign in with Apple or Google, we receive the account ID, email address, and name, if provided, from that provider. We do not receive your Apple or Google password. If you use Apple's Hide My Email feature, an Apple relay address may be used. Available sign-in methods can differ by device.

2. Information you provide in the app

• Your date of birth, optional birth time, selected birth place, and its coordinates and time zone are used to calculate your birth chart and personalize readings. A selected birth place is not your device's live GPS location.
• Chat messages, fortune and tarot readings, journal entries, mood records, friend information, and reports are stored to provide these features and show your history. Coffee cup photos are not stored: they are sent once to generate your reading and then discarded; only the reading text is kept.
• Subscription status, product and transaction IDs, purchase history, and Stardust balance and transactions are processed to verify and restore purchases and manage your balance. We do not receive your payment card number or security code.
• We process support emails and information you send us to respond to your request. Please share another person's information only when you are authorized to do so.

3. Technical data, analytics, and notifications

Our service providers may process network information such as an IP address for connectivity and security. App and operating system versions, device information, installation and user IDs, and error and crash logs are processed for security and troubleshooting. Firebase Crashlytics records may be associated with your account ID.

If you allow analytics, Google Analytics for Firebase measures screen views, interactions, and usage duration. These records may be linked to an account or installation ID; we do not describe them as fully anonymous. You can change your analytics choice in the app settings. Reminder notifications are scheduled on your device. You can manage notifications in your device settings and marketing preferences in the app.

4. AI and service providers

• Cloudflare: Hosting of our servers: authentication, database, server processing, and security. Coffee cup photos pass through our server only while your reading is generated and are not stored. Privacy Policy.
• Google Firebase: Error and crash records, performance monitoring, and analytics when allowed. Privacy information.
• DeepSeek: Information relevant to personalized readings, chat, and fortune features may be sent through our server. This can include birth chart context, chat messages and summaries, feature inputs, and coffee cup photos. Only information needed for the feature is sent; this does not mean your entire journal is sent with every request. Please avoid entering health, identity document, or payment information in chats. DeepSeek has its own processing and retention practices; we do not promise that data is never used for model training or is retained for zero time. DeepSeek Privacy Policy.
• RevenueCat: User ID and purchase and subscription information are used to manage subscriptions and in-app purchases. The integration may also send a Firebase app instance ID. Privacy Policy.
• Apple and Google: Your selected sign-in method and app store payments. Apple and Google apply their own policies to their services.

These services may process data outside Türkiye. DeepSeek states in its policy that it processes data in China; other providers' locations can vary by service. See the KVKK Privacy Notice for information about transfers and requests. We do not sell your data or use an advertising network SDK in the app. We may disclose information to competent authorities when legally required.

5. Retention and account deletion

Account data and app content are retained while your account remains open to provide the service. Coffee cup photos are not retained on our servers. You can request account deletion sooner.

You can delete your account and associated app data in Me → Settings → Delete my account. If you cannot access the app, use our account deletion page. Deletion covers your birth chart, readings, chats, fortune results, journal entries, friend links, reports, and Stardust balance. We also request deletion of the RevenueCat customer record.

Deleting your account does not automatically remove payment records held by Apple or Google or cancel a renewing subscription. Manage your subscription in the store where you purchased it. Technical logs, analytics records, and records held by service providers may not be removed at the same time as your account data. Their retention depends on security and troubleshooting needs, service settings, and any applicable legal duties. Records required by law or to protect a legal claim may be retained only for that purpose. Support correspondence is kept for as long as needed to resolve requests and related disputes.

6. Your rights and choices

Send requests to access, correct, or delete your information to simurgapp@gmail.com. You can download a copy of your data using Me → Settings → Download my data in the app. We may need to verify that a request comes from the account owner. Depending on applicable law, you may also have rights to object, restrict processing, receive portable data, and complain to a data protection authority. You can withdraw consent for processing based on consent; withdrawal does not affect earlier lawful processing.

7. Security and children

We use encrypted connections, authentication, and access controls. No system can guarantee absolute security. The app is not directed to children under 13. Contact us if you believe we have processed a younger child's data. A higher age or consent requirement in your location may also apply.

8. Changes and contact

We update this policy when our data practices change. We will communicate material changes as appropriate and seek renewed permission where required. Reading this policy or using the app does not replace any separate consent that must be obtained.

Support and privacy requests: simurgapp@gmail.com.