Privacy Policy
Effective date: October 11, 2026 Version: 2026-10-15 Operator: JXR Labs LLC, 42020 Village Center Plaza, Ste 120, PMB 780, Stone Ridge, VA 20105 Contact: support@jxrlabs.app
ZodiacFolk (formerly Starlight Guide) is an astrology app for reflection and entertainment, on the web at app.zodiacfolk.app and, when it is available, on iPhone. This policy explains what we collect, why, who helps us run the service, how long we keep it, and how you can see or delete it.
We don’t sell your information, and we don’t use it for advertising or to follow you across other sites. We do count how the app and website are used: see “Usage totals” and “Our website”.
At a glance
- We don't sell your information, and we don't use it for advertising or to follow you across other sites. We do count how the app and website are used: see "Usage totals" and "Our website".
- ZodiacFolk is for people aged 13 and older.
- If you're 18 or older with Plus and AI answers on, questions you type go to Anthropic, whose AI writes your guide's answer.
- Purchases: Stripe handles payments on the web and Apple on iPhone; we keep your plan, its status and renewal date.
- Delete everything: "Delete all my data" (in You, then Your Profile) deletes your account and the information saved with it, photos first, and ends any web Plus subscription.
This is a summary. The full text below is the version that applies.
Who can use ZodiacFolk
ZodiacFolk is for people aged 13 and older. You enter your birth date when you set up the app. If it shows you’re under 13, the app stops and nothing is saved to an account. Our server also refuses a profile with an under-13 birth date. We don’t verify ages. If you believe a child under 13 has used ZodiacFolk, contact us and we’ll delete the account and everything saved with it. (The web app remembers the stop in your browser for 7 days; see “On your device”.)
Signing in
- Email: you sign in with your email address. We email you a six-digit code; there’s no password. Our account provider, Supabase, stores your email address, when you signed in, and how.
- Sign in with Apple or Google (web): if you choose one of these on the web, Apple or Google tells us your email address and confirms who you are. With Apple’s Hide My Email, we receive a private relay address instead of your real one.
- Without an account: you can use the app without signing in. We then use a random ID for your device to keep your own records, such as tarot draws, streaks and daily-note settings. Your birth details stay on your device and are sent with each request. If you later sign in, those records move to your account. Plus requires signing in.
Your sign-in session is kept in your browser’s storage or your iPhone’s Keychain until you sign out or it expires.
Information you give us
- Your profile: your first name or nickname, birth date, and optionally your birth time (and how sure you are of it) and birthplace. A birthplace is saved with its coordinates and time zone. We also save your chosen guide and reading length. We use your birth details to calculate your readings.
- Your age group: from your birth date, our server records whether you’re 13 to 17 or 18 and over. It stores only the group, not a second copy of your birth date.
- Your photo, if you add one. Our server re-encodes each photo before storing it, which removes location and other hidden details from the file.
- Your Circle: for each person or pet you add, we store the name you give, your relationship, and, if you choose to add them, their birth date, time and place, a pet’s species and a photo. This is information about someone else. Please add people only with their permission, and don’t add anything you wouldn’t want stored. We never contact the people in your Circle.
- Your Chinese zodiac animal’s look, and its name if you give it one. They’re kept with your account until you change them or delete your account.
- Journal: whatever you choose to write, which may include a dream and may reveal sensitive things about you, such as your health or your beliefs. We use it only to provide ZodiacFolk to you. We link it to a reading if you choose to.
Journal consent (wording by outside counsel, Oct 7; used verbatim). When you first open the journal, we ask for your consent to keep your entries. Your entries may reveal sensitive things about you, such as your health, beliefs or relationships. We use them only to provide ZodiacFolk to you. You can withdraw your consent and delete your journal entries at any time in your settings. If you withdraw consent, we stop saving new entries and delete the ones you have.
- Saved readings and lesson progress: the readings you save, and which lessons you’ve completed and when.
- Questions you ask: Ask offers a list of questions. We save which question you chose with its answer, so you can reopen it and hear it from another guide.
- Questions you type: if you’re 18 or older, have Plus and have turned on AI answers, you can also type your own question. We save your question with its answer, like any other reading.
- Feedback: if you use Send feedback in the app, we save your message with the screen and guide you were on and the app version. It never includes your birth details.
- Purchases: if you buy Plus on the web, Stripe handles the payment; we receive and keep your plan, its status and renewal date, and a Stripe customer reference. We never see or store your card number. On iPhone, Apple handles the purchase and tells us which plan you bought so we can unlock it.
Information we create
- Readings and yearly outlooks: our server calculates them from your birth details and planet positions calculated from data published by NASA’s Jet Propulsion Laboratory. We save each reading to your account with when it was made. A reading about someone in your Circle also stores their name and relationship. The birth details used for the calculation aren’t copied into the reading.
- Activity for Year in Review: a count of what you did, such as a reading, a question or a lesson, with the guide and time. It contains no text from your readings or journal. We keep the most recent 2,000 entries.
- Your time zone: the app sends your device’s time zone so “today” means your today. We save it with your account. If you’re signed out, we save it under a random ID for this device. We use it for features that follow the date, such as daily card draws and the daily note.
- Usage totals: to understand how the app is used, we count steps such as finishing setup, hearing a reading or starting a trial, and how many people come back after a day, a week or a month. These counts are mostly daily totals. We also keep the date you first used the app, linked to your account or device, to measure who comes back. We don’t use third-party product analytics or advertising trackers.
- Guide lines you’ve heard: which recorded guide lines you’ve heard in the past month, so a guide doesn’t repeat one. It’s deleted after about a month.
Birthplace search
When you type a birthplace, your text goes to our own server, which searches a place list we host (GeoNames data). Nothing is sent to a map service, and we don’t keep what you typed. Only the place you choose is saved with your profile.
Guide voices
If you’re 18 or older and tap Listen on text that isn’t pre-recorded, such as a reading or an Ask answer, we send that text to ElevenLabs to create your guide’s voice. We never send your name, your birth details or anyone in your Circle. Audio we create for Listen may be saved on our server so replays don’t resend your text. It isn’t linked to your account. Pre-recorded guide audio is part of the app and sends nothing.
Typed questions and AI answers
When you type a question, we first remove the names of people in your Circle and anything that looks like contact details. We then send your question, with a short summary of today’s reading (its theme and guidance), to Anthropic, whose AI writes your guide’s answer. We never send your name, email address, birth details or photos. Anthropic doesn’t use this information to train its models, under its commercial terms. Anthropic may keep requests for a limited time and review them for safety. You can turn AI answers off at any time in your settings.
What happens when you ask about harm
Ask is for reflection and entertainment. It isn’t a crisis or support service. The guides are AI characters, not people, and the app says so on every guide screen. If you type a question about hurting yourself or someone else, or about being in danger, the app shows you a card instead of a guide’s answer. The card has help lines for where you are.
If you’re in immediate danger, call your local emergency number.
Typing your own questions is for adults 18 and older. If you’re under 18, or we don’t know your age, your typed words are not sent to an AI model, and you can still use the questions we offer. Answers from the AI are checked before you see them. If an answer looks unsafe, you see a fixed message instead.
These checks are automatic and can miss things. We don’t monitor you, and we can’t contact anyone for you. If you’re in crisis, please reach out to someone directly.
How we handle thoughts of suicide or self-harm
Notifications
If you turn on the daily note, it’s delivered by Apple’s push service on iPhone, or by your browser’s push service on the web. To send it, we store the address your device or browser gives us for notifications, your chosen guide and send time, your time zone, and which note we last sent, so we don’t repeat one. We keep these until you turn notifications off, your device stops accepting them, or you delete your account or use “Delete all my data”.
Our website
Our website uses Cloudflare Web Analytics to count visits and page views. That service doesn’t use cookies or track you across other sites.
Our email list (formerly launch updates)
If you join our email list on zodiacfolk.app, which was called our launch updates list before ZodiacFolk opened, we collect your email address, the date you signed up and confirmed, whether you confirmed you’re 13 or older, how you found us (for example TikTok or Instagram, if you came from a link there), the country your connection appears to come from (so we follow the rules of each country we send to), and, if you tell us, whether you use iPhone or Android. We don’t ask for your name, age or birthday.
- Consent: we send one email asking you to confirm. We send nothing else unless you confirm.
- Use: news about ZodiacFolk, such as new guides and features. This includes people who joined when it was our launch updates list. We don’t sell your email or use it for ads.
- Who handles it: Cloudflare stores the list in the United States, and Resend sends the emails.
- Unsubscribing: every email has an unsubscribe link, and it takes effect right away, and always within 10 business days. We keep a record that you unsubscribed so we never email you again. To have that record deleted too, email support@jxrlabs.app.
- Unconfirmed sign-ups: if you don’t confirm, we delete your address after about 7 days (within 8 days).
Service providers
These companies process information for us, only to run ZodiacFolk:
| Provider | What it does | What it handles | Where |
|---|---|---|---|
| Supabase | Accounts, database and photo storage | Everything saved to your account | United States (West US, Oregon) |
| Render | Runs our server | Your requests while they’re processed; request logs | United States (Oregon) |
| Cloudflare | Hosts the website and web app; counts website visits and page views (Cloudflare Web Analytics) | Page requests and request logs | Global network |
| Resend | Sends sign-in emails and our email-list emails | Your email address and the six-digit code; for the email list, your email address | United States |
| ElevenLabs | Creates guide audio for Listen (ages 18 and older) | The text being read aloud. We’ve opted out of ElevenLabs using it to improve its models. | United States. ElevenLabs stores it there. Its affiliates and service providers may also process it in other countries. |
| Anthropic | Writes answers to typed questions (ages 18 and older, with AI answers on) | Your question, with Circle names and contact details removed, and a short summary of today’s reading. It may keep requests for a limited time and review them for safety. | United States |
| Stripe and Link | Web payments for Plus. Link, a service of Stripe, is the seller and decides how it uses your payment details | Your payment details (entered with Stripe or Link, never with us), email address and plan | United States |
| Apple | App Store purchases and notifications on iPhone; Sign in with Apple on the web, if you use it | Your purchase; your device’s push token and the daily note; your Apple sign-in | Apple’s services |
| Sign in with Google on the web, if you use it | Your Google sign-in | Google’s services | |
| Your browser’s push service (Google, Mozilla, Microsoft or Apple) | Web notifications | Your browser’s push address and the encrypted note | That provider’s services |
Logs
Our server logs record each request’s time, address and result, and the IP address it came from. They don’t record the contents of your requests or your sign-in tokens. Our hosting and email providers keep their own logs for a limited period.
On your device
- Browser storage: the web app keeps your sign-in session, appearance and voice settings, and a random ID used for fair-use limits on questions. While you’re signed in, it also keeps a copy of your account there (your email address, your profile with your birth details, your settings, saved items, finished lessons and activity) so the app can open while our servers are slow; signing out or deleting your data removes it. If you finish setup before signing in, your profile waits there until you sign in; then it’s removed from the browser.
- iPhone: the app keeps similar settings on your iPhone.
- Cookie: the web app sets one small cookie, called sgAgeStop, only if a birth date is entered that is under our minimum age. It holds only the time it was set and lasts 7 days. It is used only to keep sign-up from starting over. We don’t use cookies for tracking or ads.
- Under-18 setting: the web app may keep a small setting that marks an account as under 18, so that analytics never run for it.
How long we keep information
- Account data (your profile, photos, Circle, journal, saved readings and lesson progress) stays until you delete it or delete your account.
- Readings, yearly outlooks and question history are deleted automatically after 400 days, unless you’ve saved the reading or linked it to a journal entry. Deleting your account removes them sooner.
- Saved Listen audio isn’t linked to your account.
- Safety reports: if we find, or are told of, what appears to be child sexual abuse material, US law requires us to report it to the National Center for Missing & Exploited Children, and we do. We keep that material and related account data, such as upload details and the account email, for at least one year, even if you delete it or delete your account. Law enforcement may receive it.
Seeing, changing and deleting your data
- Change: edit your profile, Circle and journal in the app at any time.
- Delete pieces: remove people from your Circle, journal entries, saved readings and photos at any time.
- Delete everything: “Delete all my data” (in You, then Your Profile) deletes your account and the information saved with it, photos first, and ends any web Plus subscription. It then clears the app’s data on your device. Deleting the iPhone app alone doesn’t delete your account. After deletion we keep: (1) saved Listen audio, which isn’t linked to your account; (2) server and hosting logs for as long as our providers keep them; and (3) records of payments and of your acceptance of our terms, for as long as the law or our payment provider requires. We don’t use these records to rebuild your account or profile.
- Audio copies: saved copies of audio aren’t linked to your account, so deleting your account doesn’t remove them.
- How fast we answer: we answer requests to see, correct or delete your information within the time the law requires: one month for people in the EU and UK, and 45 days elsewhere. If we need more time, we’ll tell you.
- A copy of your data: email support@jxrlabs.app from the address on your account, and we’ll send a copy of what we hold.
Copies can briefly remain in our providers’ systems after deletion, for example in their logs, until those expire.
Security
- Encrypted connections: information travels over encrypted connections.
- Access controls: each account’s records and photos are protected by rules in our database that refuse access from any other account.
- Limited access: only JXR Labs can reach the systems that store your data.
No system is perfectly secure. If something goes wrong that affects your information, we’ll tell you as the law requires.
Where your information is processed
ZodiacFolk stores and processes information in the United States. If you use it from outside the United States, your information is transferred to the United States.
Changes to this policy
When our practices change, we’ll update this policy and its effective date. If a change matters, we’ll let you know in the app before it takes effect.
Contact
JXR Labs LLC
42020 Village Center Plaza
Ste 120, PMB 780
Stone Ridge, VA 20105
support@jxrlabs.app