Privacy Policy
1. Short version
Tallune has no accounts. Your birth data, journal notes, ratings and remembered lines live in a local database on your device. Something leaves the device in exactly two cases:
- You turned the AI features on — weekly synthesis, the day's mirror, Ask the Mirror, the timing note, the note reply and writing the day's statements in your context. What goes: aspect lines derived from the sky, short remembered sentences distilled from your own notes, recent days' tags and energy scores, short personal-details-masked gists of your recent notes (at most 160 characters), yesterday's statements and your votes, and — only in Ask the Mirror — the question you typed. The day's statements are written in the morning, and can also be written in the evening for the next day, only while the app is open after you vote or save a note; nothing is sent while the app is closed.
- Subscription validation — purchase state.
Your birth date, birth time, the coordinates of your birth place and your name never leave the device. A journal note leaves it only with AI consent on, and only when you press Save: its text (personal details masked) is used to distil remembered sentences and for Tallune to write back to it, and it is not stored on the server.
2. Data controller
| Entity | 5Brand Advertising Agency Ltd. |
| Address | Monomark House, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom |
| destek@tallune.app |
3. What stays on your device
The following is held only in the local database. Nothing here is sent to our servers — except the specific AI inputs listed in §4, and only while AI consent is on:
- Birth date, time, place and time zone
- Your journal notes, day tags and energy scores (a note you Save travels with AI consent on — §4)
- Every 👍 / 👎 / ➖ rating and your accuracy rate
- Your timing plans and intent labels (a plan's label travels with AI consent on — §4)
- Your goals, their progress history and today's notes
- Your goal photos — stored as files on your device, never sent anywhere and excluded from the JSON backup. A downscaled copy for the Goals widget is also kept on your device, where the widget can read it, and is deleted with the rest of your data
- Your "About you" self-portrait answers
- Your settings (theme, language, house system, orb tolerance, reminders)
Deleting the app deletes all of it. You can also delete it in one screen: Profile → Settings → My Data → Delete All My Data…. The same screen exports a JSON backup and a Markdown transcript.
4. AI features (optional)
AI features are off by default. The first time you touch one, a consent screen appears before any data is sent, naming the provider, listing exactly what will be sent, and stating why. "Enable" and "Skip" carry equal weight; there is no pre-ticked box.
You can revoke consent at any time in Profile → Settings → AI synthesis. Revoking stops all sends immediately and is recorded.
What is sent
| Sent | Example |
|---|---|
| Derived aspect lines | Moon square Mars, orb 2.1, applying |
| Natal placements (sign + house only — no degree; no house at all when birth time is unknown) | Sun Aries, house 10 |
| Moon phase | Waxing gibbous |
| Short remembered sentences distilled from your notes | Gets tired after crowded meetings |
| A calendar day (the day you asked about — not your birthday) | 2026-09-18 |
| In Ask the Mirror, the question you typed | free text |
| For timing, a plan's label — to sort a custom plan into a type and to write its preparation note (sensitive labels are refused on the device) | Hard conversation |
| With AI consent on, the text of a note you Save (personal details masked) — for remembered sentences and Tallune's reply; not stored on the server | free text |
| For the day's statements, the day's themes (derived aspect lines), recent days' tags and energy score | work, conflict; energy 2/5 |
| For the day's statements, short gists of your recent notes (personal details masked, at most 160 characters; a note containing a crisis phrase is not sent) | free text |
| For the day's statements, yesterday's statements and your votes (to avoid repeating) | You may grow impatient today · held |
| Numbers derived from your own measurements | rating counts, most-marked themes |
What is not sent
Birth date · birth time · birth place and its coordinates · time zone ·
your name · notes that are only autosaved and never Saved. This is not a promise but a constraint
verified mechanically in code
(mobile/src/lib/ai/consult-payload.check.ts).
Who processes it
| Recipient | Role | Location |
|---|---|---|
| Supabase | Transport, rate limits, budget counters | EU |
| OpenRouter | Model routing | USA |
| DeepSeek V4 model, run by hosts OpenRouter selects | Text generation. Requests are sent with a no-data-collection setting: only hosts that neither store nor train on prompts are eligible | Outside Türkiye (mostly USA) |
| Google AdMob | Ad serving | USA / global |
| RevenueCat | Subscription validation | USA |
International transfer rests on your explicit consent (KVKK art. 9 for users in Türkiye; Art. 49 GDPR for users in the EU). Withdrawing consent stops the transfer. What is transferred cannot be tied back to your identity.
What is stored on the server
- Ask the Mirror and the day's mirror: nothing. Neither the question nor the answer is written server-side; the answer is kept only on your device.
- Weekly / monthly synthesis: the generated text is cached under a key derived from a hash of the input. That row carries no device identifier and no personal data; anyone whose input produces the same hash reads the same cached row.
- The day's statements: personalized statements are not stored on the server; they live only on your device.
- Reporting AI text (optional): when you tap the
∗mark on an AI text and press Report, the surface name, language, date and the AI text you reported are written to anai_reportstable. No identity, device or session information is written; it is sent only when you press it and is not tied to you. Reports are read to improve content safety. - Abuse prevention: your anonymous session identifier and its daily call count, plus your IP address and that day's call count. IPv6 addresses are truncated to /64. These records exist for rate limiting only and build no profile.
- Tallune+ check: when the app claims Tallune+, it sends RevenueCat's anonymous app user id; our server asks RevenueCat whether it is subscribed and keeps only that id and a yes/no for up to a day.
5. Ads
The free tier shows Google AdMob ads. Tallune+ subscribers see none.
- Ads are non-personalised by default
(
requestNonPersonalizedAdsOnly), so they are not based on an interest profile. - There is no cross-app tracking and no ATT prompt on iOS.
- AdMob processes the advertising identifier, your IP and your interaction with ads under its own policy: https://policies.google.com/technologies/ads
- In the EEA, the UK and Switzerland, Google's consent form (UMP) is shown. You can change your choice at any time in Profile → Settings → Ad preferences.
- Your journal notes, birth data and remembered lines never reach the ad SDK under any circumstances.
- Maximum ad content rating is PG; gambling, dating, astrology and esoteric services, health claims and personal loans are blocked categories.
6. Subscription
Tallune+ is purchased through the Apple App Store or Google Play; your card details never reach us. RevenueCat validates subscription state under an anonymous app user id — your name, e-mail and birth data are not sent to that service.
7. Notifications
Reminders are scheduled on your device. There are no push notifications, no notification token is created, and none is sent to us.
8. Children
Tallune is not designed for users under 13 and does not knowingly collect data from them.
9. Exercising your rights
Write to destek@tallune.app to exercise your rights under KVKK art. 11 and the GDPR. In practice:
- Access and portability: Profile → Settings → My Data → Full Backup (JSON) / Journal Export (Markdown). You already hold the data.
- Erasure: Profile → Settings → My Data → Delete All My Data… One screen, one confirmation. With no account, you do not need to tell us.
- Withdrawing consent: turn off Profile → Settings → AI synthesis.
- For the server-side rate-limit records, write to us; the daily counters reset on their own.
10. Security
All network traffic runs over HTTPS. Server-side tables are reachable only by the service role and cannot be read with the client key. On Android, cloud backup and device-to-device transfer are disabled, so your journal is not copied off the phone. On iOS, app data (including photos) can be part of an iCloud or computer device backup that you own and control; Tallune never uploads it to its own servers.
11. This website
This website. tallune.app sets no cookies and runs no analytics or advertising scripts. Pages are delivered by our hosting provider, Vercel Inc. (USA), which processes your IP address and request details in its server logs to deliver the site and keep it secure. The moon and sky figures on the site are computed in your browser; nothing about them is sent back. If you e-mail us, we use your message only to answer you.
12. Changes
If this policy changes, the effective date is updated and material changes are announced in the app.
Tallune is for entertainment and personal awareness. It does not provide medical, psychological, legal or financial advice.