This Policy explains how Volke Ideias Digitais Ltda. handles data in the Cynthia app, on the cynthia.app website, in support, and in the services that keep the product running. It is written to be read: no fine print.
1. Controller
Volke Ideias Digitais Ltda.
CNPJ 66.727.282/0001-31
Brazil
Contact for privacy, data rights and support: support@cynthia.app
Data protection officer (Brazil's LGPD): Rodrigo Freitas, at the same address.
2. Summary
- You need an account to use the app, created with Apple, Google or a link in your email. There is no password.
- You tell us your date, time and city of birth, how you'd like to be addressed (feminine, masculine or neutral) and, if you want, your first name. That is what we chart your sky with, and how we talk to you.
- Your mood, your notes, your tarot questions and the people you add are your journal. They serve to generate your content, and nothing else.
- Readings are generated by artificial intelligence. We send the provider the minimum: first name, astrological data and the question. Providers may not use it to train models.
- Purchases go through the App Store or Google Play. We never receive card data.
- We use Firebase (Google) to measure usage, deliver notifications and log crashes.
- The cynthia.app website uses no cookies and no analytics.
- We do not sell data, there is no third-party advertising, and nothing of yours becomes an ad.
- You can download everything and delete your account at any time, inside the app.
3. Data we process
3.1 Account
When you create an account, we process:
- the identifier provided by Apple or Google, or the email you entered;
- the account email (Apple may hand us a relay address; we accept it);
- the creation date, the devices you signed in on and the active sessions.
The email is used to sign in without a password, recover the account, send receipts, PDFs and the export bundle, and warn you about a new sign-in. From Apple and Google, nothing beyond the identifier and the email reaches us.
3.2 Birth and chart
To chart your sky, we process your date, time (or "I don't know") and city of birth, with latitude, longitude and the historical time zone of that moment. From these come your Sun, your Moon, your rising sign and the full chart. We also process the form of address you choose (feminine, masculine or neutral), used only for grammatical agreement in the text, and your first name, if you choose to give it, used to talk to you.
Your date of birth also confirms that you are over 18. Minors are turned away before any data is stored.
3.3 Current city and time
To show the Moon and the sky of your day, the app estimates your city from your IP address and asks you to confirm. We do not use GPS. You can change the city by hand. We also process the device's time zone, the language, and the hour you picked for the daily card.
3.4 Mood, journal and People
If you check in your mood, write a note or mark a life moment, it goes into your journal, alongside the sky of that day. When you add a Person (name, relationship, birth), they go in too. All of this is private, stays on your account and serves one thing: generating your content, such as the club card, the journal's echoes, the synastries and the gifts you ask for.
Mood and tarot questions can reveal intimate things: beliefs, health, relationships. That is why the app asks for your explicit consent before the first check-in and the first question, and you can withdraw it later.
Nothing from the journal appears on a shareable card, in usage measurement or on any public surface.
3.5 Tarot and readings
When you ask the tarot or buy a reading, we process the question, the cards drawn, the generated text, the follow-up questions and any notes you add. The question and the reading stay in your library, for you to reread and export, until you delete them.
3.6 Artificial intelligence
Readings, the club card and part of the daily content are generated by language models. Today we use models by Anthropic, accessed through Amazon Web Services (Amazon Bedrock) and through Anthropic's own API, on servers in the United States.
What goes to the provider is the minimum the reading requires: your first name, the astrological data, the topic or question; in the club, a summary of your journal; in synastries and gifts, the first name and astrological data of the Person you added. Email, account identifiers, IP address and purchase history do not go. Our contracts forbid the use of that data to train models, and retention at the provider is the minimum needed to process and protect the service.
3.7 Purchases
Readings, decks and the club are sold through the App Store or Google Play. The store processes the payment; we never receive or store card data. To validate, deliver and restore purchases, we process the transaction identifier and receipt issued by the store, the product bought, the date and the subscription state. That record is the proof that what you bought is yours.
The store also tells us about refunds and chargebacks. We keep that count because three refunds within six months block new purchases on the account and the device (the rule is in the Terms). For the device block we use a technical marker from Apple (DeviceCheck) or Google (Play Integrity), with no name and no account attached.
3.8 Gifts
When you give a gift, we process the purchase, the generated link, the dedication and the moment it was opened. The giver only sees that they gave it. The content of the reading belongs to the recipient alone.
3.9 Notifications and emails
If you turn notifications on, we process the device's delivery token, the hour you picked, the categories you enabled and the record of what was sent and opened. Each category can be turned off in the app; the permission, in your device settings. We send nothing between 10 p.m. and 7 a.m. your time unless you ask for it.
By email, we send what is transactional (sign-in link, receipts, PDFs, the export bundle, new sign-in notice) and, once a year, a birthday email with the summary of your solar return. If optional content emails ever exist, such as a weekly summary, they only arrive if you turn them on. Every email that is not transactional turns off in one tap.
3.10 Sharing
The cards you export are rendered on your device and go out wherever you choose. A shared card may contain your sign and your first name; you decide what goes out. When someone opens a card or gift link, we process the link identifier and technical data about the opening (device, operating system, language, approximate country) to deliver the right content. If that person installs the app and creates an account from the link, we tie the new account to the link, to know which card brought them; whoever shared it never learns who it was. Someone who only opens the page and does not install is not identified.
3.11 Usage and measurement
To understand how the app is used, Firebase Analytics (Google) processes a technical identifier for the installation, usage events from a fixed list (card opened, card shared, purchase, check-in made), app version, platform, language, approximate country and session data. Events go to our data warehouse on Google Cloud with no name, email, journal text, tarot question or reading content. What is intimate never crosses paths with measurement.
3.12 Integrity and crashes
To prove the app is legitimate and prevent abuse, we use Firebase App Check (App Attest on iOS, Play Integrity on Android), which processes technical data about the device and the app. When the app crashes, Firebase Crashlytics receives a technical report: version, device model, operating system and the technical steps before the crash. Personal content does not go into the report.
3.13 Support
When you write to support@cynthia.app, we process your email address, your message and whatever you attach. We use it only to resolve the case.
3.14 Website
The cynthia.app website is static: no cookies, no analytics, no third-party scripts. The hosting provider logs technical connection data, such as the IP address, for a short time and for security. Fonts and images are served by us.
4. Data we do not use
We do not collect or use: GPS location, contacts, calendar, microphone, camera, photos, the device's advertising identifiers (IDFA/GAID), government ID numbers, card data.
We never use your journal, your questions or your readings to target, advertise, sell or train models.
5. Purposes
- chart your sky and generate your content;
- deliver and restore what you bought;
- send the notifications and emails you chose;
- deliver shared cards and gifts;
- measure usage, acquisition and quality, without personal content;
- prevent fraud, abuse and failures;
- answer support;
- meet legal, tax and store obligations.
6. Legal bases
Under Brazil's LGPD, and on equivalent grounds where other laws apply:
- performance of the contract supports the account, the chart, readings, purchases, gifts, export and support;
- explicit consent supports the processing of mood, notes, life markers and tarot questions, which may reveal sensitive data, and the content notifications and emails;
- legitimate interest supports usage measurement, integrity, security and product improvement, always with minimization;
- legal obligation supports keeping the bookkeeping record of purchases.
Where local law requires a different basis or notice, we apply the more protective rule.
7. Who we share with
Providers that process data on our behalf, only with what the contracted purpose requires:
- Google Cloud (servers, database and data warehouse), in São Paulo, Brazil;
- Firebase (Google), for sign-in, usage measurement, notifications, app integrity and crash reports: global Google services, processed mainly in the United States;
- Anthropic and Amazon Web Services (AI content generation), in the United States;
- Apple and Google (sign-in, stores, purchases, notifications);
- an email delivery provider (transactional and optional emails).
We do not sell data and we do not share it with ad networks. We disclose data to authorities only when the law requires it.
8. International transfers
Your journal, your chart, your readings and your purchases live on servers in Brazil. What leaves the country: the generation of readings (Anthropic and Amazon Web Services, in the United States), sign-in, usage measurement and crash reports (Firebase, United States), notifications and emails, and Apple's and Google's services. All of it under processing contracts, standard clauses and security measures, as required by the LGPD and the law of the destination.
9. How long we keep it
| Data | Retention |
|---|---|
| Account, birth data, chart and preferences | as long as the account exists |
| Journal: mood, notes and markers | as long as the account exists, or until you delete the item |
| Questions, readings and notes | as long as the account exists, or until you delete them |
| People | until you delete the Person or the account |
| Purchases and entitlements | as long as the account exists; afterwards, only the bookkeeping record, without your name, for the legal and tax period |
| Deleted account | 30 days reversible; then full deletion within 30 days; backups within 35 days |
| Usage events (Firebase, BigQuery) | up to 13 months; de-identified aggregates for longer |
| Notification token | up to 90 days after you sign out |
| Crash reports | up to 90 days |
| Technical server logs | up to 30 days, unless there is an incident or an obligation |
| Export bundle | link valid for 7 days |
| Support case | up to 24 months after resolution |
| Device purchase-block marker | permanent, no name; survives account deletion |
10. Security
Encrypted connections; verification that the app is legitimate; per-user limits on calls that touch AI and purchases; secrets kept in a vault, out of the code; minimal internal access; separation between what is intimate and what is measured; encrypted backups with tested restores; monitoring and an incident response plan. No measure removes all risk; the architecture reduces collection and exposure.
11. Your rights and controls
Under applicable law, you may request confirmation, access, correction, portability, deletion, information about sharing, objection and review of consent. If you live in the United States, this includes the rights granted by your state's privacy law, where one applies; we do not sell or share personal information for advertising, and we never discriminate against anyone for exercising a right.
Inside the app, without asking anyone:
- The deal between us, in the You tab: every piece of data with its use next to it, and an action per item (see, fix, erase, turn off);
- Download everything: journal, readings as PDFs, People, insights and one structured file with everything, by link to your email;
- Delete my account: deletes profile, journal, readings and People; only the bookkeeping record of purchases remains, without your name. Thirty days to change your mind;
- delete a single day, note, reading or Person;
- turn notification categories and optional emails on and off.
Deleting the account does not cancel the club: the subscription belongs to the store and must be cancelled there. The app warns you and takes you to the right screen.
Requests can also be sent to support@cynthia.app. We answer within the time the law sets.
12. Minors
Cynthia is for people aged 18 and over. The app turns minors away before storing any data, including when adding People. If we learn of a minor's data, we delete it.
13. Marketing
There is no third-party advertising. The app may show notices about other Volke apps, always dismissible and never interrupting the day's ritual. Content notifications and emails are optional and turn off in one tap. We do not track anyone across apps or websites.
14. Changes
This Policy changes when the product, our providers or the law change. The current version and its date live on this page. A relevant change is announced in the app or by email.
15. Contact and authorities
support@cynthia.app, for privacy, data rights and support.
In Brazil, you may also turn to the National Data Protection Authority (ANPD) and to consumer protection agencies. Elsewhere, you may contact the data protection authority of the place where you live.
Volke Ideias Digitais Ltda. — CNPJ 66.727.282/0001-31.