Privacy Policy

1. Information we handle

• Account: sign-in identifier, email, display name and profile information supplied by your chosen sign-in method, along with authentication and account-access records.
• Chart: the name you supply, birth date, birth time if known, birthplace, coordinates and time zone. Optional current or viewing location supports location-dependent features.
• Conversations: questions, relevant chat history, chart context, disclosures and any images you choose to send. Avoid sending sensitive information that is unnecessary for a reading.
• Device storage: saved conversations, memories, generated reading audio, room state and preferences.
• Purchases: account identifiers, email, selected product, order and transaction identifiers, payment status, receipts, entitlements and allowance records, managed through RevenueCat. Wallet payments can involve wallet addresses, invoice information and transaction proofs. Card details are entered into the payment provider’s checkout.
• Technical information: hosting and connected services receive network information such as IP address, request time and browser information, and may keep operational, security or error logs.

2. Why we use it

We use this information to authenticate you, calculate and personalize readings, answer your questions, preserve settings, deliver purchases, track finite allowances, verify payments and entitlements through RevenueCat, prevent abuse, resolve support requests and meet legal obligations. Where consent is required, you can withdraw it by contacting us; this may prevent us from providing the affected feature. Where applicable law recognizes other grounds, processing necessary to fulfill your purchase, protect the service or meet legal duties relies on those grounds.

3. AI, voice and location services

The current reading flow sends prompts, relevant chart information, conversation context and any image you submit to OpenRouter and the model provider that handles the request. Providers may process and retain requests under their own policies and the selected service’s settings. Do not assume that every model offers zero retention or excludes training use. We do not promise that a reading stays entirely on your device.

Generated narration uses local speech-model processing in the current web app, with model assets downloaded as needed. If you enable microphone dictation, the browser’s speech-recognition feature may send speech to the browser vendor’s service. You can deny or revoke microphone permission and type instead.

Place searches can send the place text you enter to Open-Meteo geocoding and Photon/Komoot. Any device-location access is subject to browser permission. You can enter a place manually.

4. Hosting, accounts and payments

We use Google Firebase for authentication and cloud birth-profile storage, and Surge as an alternate host for this website. RevenueCat is the sole commercial authority for customer, purchase, entitlement and shared $ROCHE/Natally allowance records; our servers hold operational custody of that data only and are not a separate commercial ledger. RevenueCat receives the account identifier and checkout email and processes purchase and entitlement information with its payment partners. If you choose an enabled Lightning or cryptocurrency option, the relevant payment provider, wallet and network also process the information needed for that transaction. Configurable providers include Alby and Blink; only methods shown as available are offered.

Public blockchain transaction records can be visible to others and generally cannot be removed. We may disclose information when legally required, to protect rights or security, or to a service provider performing the purposes described here. We do not sell your personal information. We do not use your birth profile or conversations for targeted advertising.

Provider information: Google, RevenueCat, Netlify. A provider’s policy describes its own practices; it does not replace our responsibilities to you.

5. Browser storage and cookies

Natally uses browser local storage and IndexedDB to keep account-scoped history, saved audio and preferences. Authentication and checkout services may use cookies or similar storage to maintain sessions and prevent fraud. Clearing website data can remove locally saved readings, audio and settings and sign you out. It does not send a deletion request to our cloud services or payment providers. These legal pages contain no analytics, advertising scripts or sign-in requirement.

The web marketing page and app use Google Analytics to understand actual scene visits, chart exploration, authored educational answers, narration and room-object interactions. Usage events include bounded interaction categories, whether the scene is visible, and observed elapsed durations. Our usage-event adapter does not send account identifiers, names, birth details, chart coordinates, questions, answers, personal lore or billing-management links. Page metadata omits URL queries and fragments. Google Analytics can use cookies and receive technical information such as browser and network information under Google’s privacy policy. Browser privacy controls or blocking analytics requests can prevent collection. The Privacy Policy and Terms pages themselves remain free of analytics scripts.

6. Retention and deletion

For purchased hosted sessions, cloud saving begins only after you consent to saving that session. Hosted sessions are private to your signed-in account and store your chart snapshot, completed questions and answers, and successfully uploaded voice recordings. Deletion removes the chart, exchanges and recordings; purchase records remain for verification and legal obligations. Local copies and downloaded files are separate.

Local data remains on the browser/device until you erase it, clear website storage, or the browser removes it. The app’s history-erasure control removes selected local conversation, memory and audio data for the current account. It does not delete the cloud birth profile, authentication account, hosted sessions, exported files or copies on other devices.

Cloud account and birth-profile data is retained while needed to provide your account and requested features. Purchase, entitlement, fraud-prevention and accounting records may need to be kept after account closure for legal obligations, dispute resolution and reconciliation. We limit retention to those purposes and assess deletion requests individually. A one-year access period is not a promise that all associated data is automatically deleted after one year. Provider logs and backups may follow separate retention schedules.

7. Your choices and privacy requests

Email support@rochemediaservices.com to request access to your information, correction, deletion of your cloud birth profile or account, or withdrawal of consent. Use the subject “Natally privacy request” and identify the account email and request. We may need to verify account ownership before acting. Do not send passwords, payment-card details, private keys or wallet recovery phrases.

Depending on your location, you may also have rights to receive a copy, restrict or object to processing, or complain to your privacy regulator. We will respond within the period required by applicable law, explain any information we must retain, and tell you if more information is needed. Local history erasure is available separately; account deletion and privacy requests are handled through support.

8. Security and international processing

We use account authentication, access controls and encrypted transport for connected services, but no system guarantees perfect security. Protect your device and sign-in account. Service providers may process data outside your province or country, including the United States, where privacy laws and lawful government access may differ.

9. Children

Natally is intended for adults and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and address it.

10. Changes and contact

We will update this page when practices change, revise the date and provide additional notice or obtain consent where required. For questions or complaints, contact Robin L. M. Cheung, trading as Roche Media Services, at support@rochemediaservices.com.