Legal

Privacy Policy

Effective date: 1 May 2026 · Last updated: 1 May 2026

Contents

Who we are
Data we collect
Why we collect it
Legal basis (GDPR)
Third-party service providers
How long we keep your data
Your rights
Security
Children
Changes to this policy
Contact

In plain language: We collect only what is necessary to make the app work. Your birth data is used to calculate your chart and produce your readings. We never sell it or share it with advertisers. You can delete your account and all your data at any time from inside the app.

1. Who we are

la Boussole is a personal astrology service. For the purposes of the GDPR, la Boussole is the data controller responsible for your personal data.

Contact: hello@laboussole.site

2. Data we collect

Account data

Name — used to personalise in-app greetings.
Email address — used to create your account, verify your identity, and send transactional messages such as verification codes and password resets. We do not send marketing emails.
Password — stored in a secure hashed form. We never store or transmit your plain-text password.

Birth data

Birth date, birth time and birth place — used to calculate your natal chart. Stored encrypted.
Geographic coordinates — derived from your birth place for chart calculation. This is not your current location.

Journal entries

Text you write in the in-app journal. Premium subscribers' journal entries are analysed to produce personalised insights. This analysis does not use your name, email or any identifying information. Journal entries are never used for any other purpose.

What we do not collect

Your device's precise GPS or current location
Your contacts, photos, camera or microphone
Browsing history or data from other apps
Advertising identifiers or behavioural tracking data

3. Why we collect it

Account data (name, email, password) is collected to create and secure your account.

Birth data is collected solely to calculate your natal chart and produce personalised readings and forecasts.

Journal entries are collected to display your journal inside the app and, for Premium subscribers, to generate personalised insights.

4. Legal basis (GDPR)

We rely on the following legal bases under Article 6 of the GDPR:

Contract performance (Art. 6(1)(b)): processing your account and birth data is necessary to provide the service.
Consent (Art. 6(1)(a)): push notifications and personalised journal insights require your explicit opt-in. You may withdraw consent at any time in Settings.
Legitimate interest (Art. 6(1)(f)): basic security and fraud prevention.

5. Third-party service providers

To deliver the service we use a small number of trusted third-party providers. These providers process personal data only on our behalf, for the purposes described, and under data processing agreements consistent with GDPR requirements.

Categories of providers we use:

Cloud infrastructure and database hosting (EU-based)
Transactional email delivery (for verification codes and password resets only)
Subscription and payment management via Apple In-App Purchase
Personalised reading generation (Premium feature: your chart data and journal entries are processed by a third-party service to produce your readings and insights; no identifying information such as your name or email is included in this processing)

We do not share your data with advertising networks, data brokers, analytics platforms or any other third parties beyond those categories above.

Providers located outside the EU process data under appropriate safeguards, including Standard Contractual Clauses.

6. How long we keep your data

Account data: kept as long as your account is active and deleted within 30 days of account deletion.
Birth data and journal entries: deleted immediately when you delete your account.
Subscription records: retained for the legally required period for financial records. This covers subscription status and dates only. Payment card details are never held by us.

7. Your rights

Under the GDPR you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: correct inaccurate data. You can update your name, email and birth data directly in the app.
Right to erasure: delete your account and all associated data via Settings, Account, Delete Account — or by emailing us.
Right to data portability: request your data in a portable format.
Right to restriction: ask us to pause processing while a dispute is pending.
Right to object: object to processing based on legitimate interest.
Right to withdraw consent: opt out of push notifications or personalised insights at any time in Settings.

To exercise any of these rights, email hello@laboussole.site. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Birth data is stored encrypted. All data is transmitted over secure connections.

No internet service can guarantee absolute security. If you believe there has been a security issue involving your data, please contact us at hello@laboussole.site.

9. Children

la Boussole is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date above and, where required, by in-app notification. Continued use of the app after a change constitutes acceptance of the revised policy.

11. Contact

For questions or requests related to this Privacy Policy:

la Boussole
Email: hello@laboussole.site
Website: www.laboussole.site