Privacy Policy

Lodestar: Astrology & Charts · Effective

Lodestar is an astrology app for iPhone made by Dogs in Boots, LLC. This policy explains, in plain words, what Lodestar collects, why, who receives it, how long it’s kept, and how you can delete it. It covers the Lodestar app, its widgets and this website. Our Consumer Health Data Privacy Policy also covers health information you may write in Ask.

The short version

1. Who we are

Lodestar is made by Dogs in Boots, LLC (“we”, “us”). We decide how the information described here is used, and you can reach us at . Lodestar is available in the United States, Canada, Australia and New Zealand.

2. What stays on your iPhone

Lodestar calculates your chart, today’s sky and the sky calendar on your iPhone, and much of the app works there alone. This stays on your iPhone, and our servers don’t keep it:

The list of birthplaces Lodestar searches is built into the app, so finding yours never needs your location. Your birth details, your first name, your house system, the people you add and your full chart and compatibility readings are kept on your iPhone and also saved to your account (see Your chart and the people you add). Analytics reflect a few of your choices, such as whether you agreed to AI, whether the daily reading is on and how many people you’ve added (see How Lodestar is used, and errors).

Like other apps’ data, what Lodestar keeps on your iPhone is included in your iCloud or computer backups, except your Ask conversation, which Lodestar keeps out of backups. Deleting Lodestar from your iPhone deletes what it stored there.

3. What we collect, and why

Your account

The first time you open Lodestar, it creates an account for you automatically: a random account ID, with no name, email or phone number. Your subscription, your allowance of Ask messages and readings, and what Lodestar saves for you (below) are kept with this ID, and RevenueCat and PostHog, which help us run Lodestar, know you by it too.

Signing in is optional. If you sign in, you can bring your chart, the people you added and your readings to another iPhone, or back after you reinstall Lodestar:

To keep accounts secure, our sign-in system keeps a security log of sign-ins and session refreshes (about once an hour while Lodestar is open), with the time, the IP address and device type of each request and, if you signed in, your email address. We keep this log for about 7 days. Each session, anonymous ones included, also keeps the IP address and device type of its latest refresh until it ends, when you sign out or delete your account. The sign-in system also limits how many accounts can be created from one IP address.

We also store the date you finished setting up Lodestar.

Your chart and the people you add

Lodestar saves the following to our servers with your account, even if you never sign in, so that it can come back when you sign in on a new iPhone or after you reinstall Lodestar:

Please add someone only with their permission: Lodestar asks you to confirm it. What you add about them is saved with your account, and nobody else using Lodestar can see it.

Lodestar saves a change a few seconds after you make it. When you remove someone, their details and their compatibility reading are deleted from our servers. When you change birth details, the readings written from the old ones are deleted there too. Our servers delete each reading 90 days after it was saved; the iPhone that has it keeps it.

If you sign in to an account you already had and it has birth details, what it holds replaces what’s on this iPhone; if it has none, what’s on this iPhone is saved to it. A subscription you started on this iPhone moves to that account too. Lodestar then deletes the anonymous account it was using, with the rest of its data: what analytics recorded before you signed in, its reports and its RevenueCat record (see Accounts you can no longer reach for when that can’t happen). When you sign out, Lodestar first tries to save any change not yet saved, then removes your data from this iPhone; what was saved comes back when you sign in again.

Subscriptions

If you subscribe to Lodestar Pro, Apple handles the payment. We never see your card or your Apple Account details.

RevenueCat manages subscriptions for us, so that Lodestar can give you Pro, show your trial and renewal dates, and remind you before a free trial ends. Each time Lodestar opens, even if you’ve never bought anything, it asks RevenueCat whether you have Pro. That request carries your account ID, your App Store country, your IP address and technical details: your iPhone model, iOS and app versions, your language settings, and an identifier Apple gives apps from the same developer on your iPhone. When you buy or renew, RevenueCat receives the purchase from Apple: the plan, price and currency, dates, whether it’s a free trial, whether it will renew, and transaction numbers.

Our servers keep a copy of your subscription status, which sets your allowance of Ask messages and readings, and a log of the purchase notifications RevenueCat sends us.

How Lodestar is used, and errors

We use PostHog to understand how Lodestar is used and to find and fix problems. Lodestar sends PostHog, linked to your account ID:

Analytics never include your birth date, time or place, your chart, the people you add or what you write in Ask. PostHog doesn’t record your screen, what you type or where you tap, and we don’t use it for advertising. On first launch, analytics are off when your iPhone’s Region is in the EU or EEA, the UK or Switzerland, and on elsewhere. An existing saved setting is kept. You can turn analytics on or off in Lodestar’s Settings › Privacy; see Your choices.

When you contact us

If you email us, we receive your email address and what you write, and use them only to help you. Our email is hosted by Google.

This website

This website sets no cookies. To count visits and see how quickly its pages load, it uses Cloudflare Web Analytics: Cloudflare adds a small script to each page, and your browser downloads it from Cloudflare. For each page you view, the script sends Cloudflare:

The script doesn’t use cookies or store anything on your device, and its ID changes with every page, so these reports don’t recognize you when you come back. Cloudflare receives your IP address with each report and says it discards it at the nearest Cloudflare data center, without storing it in its core databases or logs. Its reports show us visits by country, browser, operating system and type of device. Cloudflare says it doesn’t fingerprint visitors or track them across its customers’ websites. Content blockers can stop the script, and Lodestar’s Settings › Privacy switch covers the app, not this website. Cloudflare, which hosts this website, also processes visitors’ IP addresses and request details to deliver and protect it. If a page fails to load, some browsers also send Cloudflare a short error report: the page’s address, the page that linked to it and the kind of error. Cloudflare says it drops the IP address at once.

4. AI: your readings and Ask

Lodestar calculates your chart; Claude, an AI made by Anthropic, puts it into words in your readings and in Ask’s answers. Lodestar asks your permission before its first AI request, once for all of them, and sends nothing to our server or to Anthropic for them until you agree. Without AI, your chart, Today’s sky and the sky calendar keep working.

What Lodestar sends

Readings

Ask (for adults)

What Anthropic does with it

Anthropic is our service provider for these requests. It stores and processes them in the United States. Under its commercial terms, it doesn’t use them to train its models, and it deletes them within 30 days. If Anthropic’s safety systems flag a request, such as a question, for breaking its usage policy, Anthropic may keep it for its own safety work, under US law: the request for up to 2 years, and its safety classification scores for up to 7 years.

AI can be wrong. Lodestar calculates every fact a reading or an answer rests on, and our server checks each reply against those facts before you see it. Lodestar is for reflection and entertainment: it doesn’t predict the future.

Turning AI off

You can turn AI off at any time in Lodestar’s Settings › AI. That withdraws your permission, and Lodestar sends nothing more to Anthropic until you agree again. Signing out or deleting your account also clears your permission.

5. Who receives your data

These companies run parts of Lodestar for us, and each receives what its part needs, for the purposes in this policy:

Supabase
Hosts our database, sign-in and server code, and so stores everything we keep on our servers, your birth details included.
RevenueCat
Manages subscriptions (see Subscriptions).
PostHog
Analytics and error reports (see How Lodestar is used, and errors).
Anthropic
Writes your readings and answers Ask questions (see AI).
Resend
Delivers sign-in code emails. It receives your email address and the message.
Expo
Delivers updates to the Lodestar app. When Lodestar starts, it asks Expo’s servers whether an update is ready. That request carries your IP address, a random ID for this installation of Lodestar (not your account ID), technical details about the version of Lodestar you have and, if an update failed to start, the error it caused.
Cloudflare
Hosts this website and counts its visits (see This website).
Google
Hosts our email, including the messages you send to lodestar@nookpages.com and our replies (see When you contact us).

These companies act on our behalf, under agreements that limit their use of your data to providing their service to us, except that Anthropic may keep requests its safety systems flag for its own safety work (section 4). They protect your data at least as well as this policy does.

Apple processes App Store purchases, refunds and Sign in with Apple, under its own terms and privacy policy. If you’ve chosen in iOS to share analytics with app developers, Apple also gives us crash reports and app usage statistics that don’t identify you.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

6. What we never do

7. Where your data is processed

Our service providers store your data in the United States and process it there, with three exceptions: some requests may first be handled by servers closer to you; Google, which hosts our email, may store and process the emails you send us in other countries; and this website’s visit reports are processed at the Cloudflare data center nearest you, which may be in another country (Cloudflare doesn’t say where it stores them). If you live in Canada, Australia or New Zealand, this means your data is transferred to the United States, where it is protected as this policy describes but may be accessed by US courts, law enforcement and national security authorities under US law.

8. How long we keep it

On your iPhone
Until you delete it in Lodestar, sign out (what was saved to your account comes back when you sign in again), delete your account, or delete the app. Your settings, such as appearance, your reminders and whether you share usage analytics, stay until you delete the app, and so does what Lodestar keeps of an age you confirmed (the day Ask opens for you, or that Lodestar stopped). Your Ask conversation: up to 30 days after your last question. Your first reading: until Today shows your first daily reading.
Your account
Your account ID, email, Apple sign-in and any name Apple gave us, the date you finished setting up Lodestar, your subscription status, and the IP address and device type your sessions last used: until you delete your account. Your birth details, first name and house system, and the people you added: until you change or remove them, or delete your account. Your full chart and compatibility readings: up to 90 days, and less if you remove the person or change the birth details they were written from. Allowance records (the readings and Ask messages you used, and when): 30 days for readings, 7 days for Ask messages. Two counters, of the free readings you asked for today and of how often we recently re-checked your subscription: until you delete your account.
Accounts you can no longer reach
If you delete Lodestar from your iPhone without having signed in, the anonymous account Lodestar was using stays on our servers, at RevenueCat and at PostHog, with no set end date. It has no email address, but it keeps what Lodestar saved to it, your birth details and the people you added included (its readings go after 90 days), and the IP address and device type it last used. PostHog keeps its analytics profile, and its events for up to 1 year. It can no longer be deleted from Lodestar. That includes the new anonymous account Lodestar starts right after you sign out or delete your account, if you then delete Lodestar. To delete an anonymous account, use Settings › Delete account before you delete Lodestar. When you sign in to an account you already had, Lodestar deletes the anonymous one it was using, with its data, once your purchases have moved to that account (see Your chart and the people you add). If that can’t happen within an hour (for example, Lodestar is offline or closed, or you sign out of that account first), the anonymous account stays too.
Reports
Your reports on Ask’s replies and on readings: up to 90 days, and deleted with your account.
Subscription records
RevenueCat keeps your purchase history until you delete your account, when we ask it to delete your record. Our log of purchase notifications for your account is deleted with it.
Analytics events and error reports
Up to 1 year. When you delete your account, we ask PostHog to delete them, and it does within about a week.
Your analytics profile
Until you delete your account, when we ask PostHog to delete it along with your events. It holds your latest approximate location and where you first used Lodestar, your subscription, and whether you’ve signed in. For an account you can no longer reach, see above.
After you delete your account
We keep its account ID for 48 hours, only to ask RevenueCat and PostHog a second time to delete anything that reached them meanwhile. If one of them couldn’t be reached, or a person has to review the deletion, we keep the ID until that’s done.
Server logs and backups
About 7 days, our sign-in security log included. Server logs include IP addresses and may include the approximate location our hosting provider works out from them (such as the city and postal code), device types and account IDs. They don’t show your birth details or what you write in Ask, unless our database refuses a change from Lodestar: then its log may show that change.
Anthropic
Up to 30 days. If a request is flagged for misuse, Anthropic may keep it for its own safety work for up to 2 years, and its safety classification scores for up to 7 years.
Sign-in code emails
Resend keeps each sign-in email (your address and the message, whose code expires within an hour) and its delivery log for 30 days.
Website visit reports
Cloudflare keeps every report for 7 days, then only a sample, and lets us see the last six months. It doesn’t say when it deletes the sample.
Support emails
As long as we need them to help you and to keep a record of our conversation.

9. Deleting your account and data

To delete your account, open Lodestar and go to Settings › Delete account, near the bottom. Any account can be deleted, including an anonymous one. This deletes:

Two days later, we ask RevenueCat and PostHog again, for anything that reached them meanwhile. If either can’t be reached when you delete your account, your account is still deleted, and we keep asking until it confirms (soon at first, then once a day). If your analytics data at PostHog is also linked to another account’s ID, a person reviews it before it’s deleted, so that nobody else’s data is deleted with yours. If your connection drops while you delete your account, Lodestar checks with our servers as soon as it can, at the latest the next time you open it, and finishes deleting your data from this iPhone once your account is gone.

Deleting your account doesn’t remove:

You can also email us to ask for a copy of your data, to correct it, or to delete it. So that we give your data only to you, we answer a request only when it comes from your Lodestar account’s email address, or when you make it in Lodestar while you’re signed in to that account, such as deleting it in Settings › Delete account. An anonymous account has no email address, so we can’t confirm that a request about it is yours: you can delete it yourself in Settings › Delete account, and change or remove your first name, your birth details and the people you added in Lodestar at any time.

10. Your choices

11. Children

Lodestar is for people 13 and older and isn’t directed to children under 13. If the birth date you confirm while setting up Lodestar says you’re younger, Lodestar stops there: it sends nothing to our AI provider, turns analytics off, as Settings › Privacy does, forgets what you entered on that iPhone, and deletes your account, as Settings › Delete account does (see Deleting your account). That includes an account you signed in to before you entered your birth date, with its email address and the name Apple shared if you used Sign in with Apple, and the anonymous account Lodestar was using before that sign-in, if it’s still there (Lodestar can delete that one for up to an hour after the sign-in: see Accounts you can no longer reach). Lodestar doesn’t start a new account. If the iPhone is offline, or our servers can’t finish the deletion, Lodestar keeps only what it needs on that iPhone to finish it, and does the next time it opens with a connection; if Lodestar is deleted from the iPhone before then, the account stays on our servers (see Accounts you can no longer reach). Lodestar then stays stopped on that iPhone until it’s deleted: it remembers that it stopped, but not the date. Once your account is deleted, Lodestar sends nothing more from the next time it starts, apart from its check for app updates (see Expo under Who receives your data). Before that, our payment provider’s code may still check the deleted account, which can leave an empty record of it at RevenueCat; our second request, two days later, deletes it. Lodestar’s Settings won’t save a birth date under 13 either. We don’t knowingly collect personal information from children under 13. If you think a child under 13 has given us personal information, email us and we’ll delete it. If the child used Lodestar without signing in, open Settings › Delete account on their iPhone instead: we can’t find an account that has no email address. If Lodestar stopped at their birth date, it has deleted their account already, or will the next time it opens with a connection. Ask is only for adults 18 and older (see Ask).

12. Your rights

Wherever you live, you can ask us what information we hold about you, for a copy, to correct it, or to delete it, and you can withdraw your permission for AI, or turn analytics off, at any time. Email lodestar@nookpages.com. We’ll confirm the request is yours (see how) and reply within the time your local law requires. We won’t treat you differently for using these rights.

If you think someone added your birth details to Lodestar without your permission, you can ask them to remove you, which deletes your details from our servers, or email us.

Complaints. If you think we’ve mishandled your information, email lodestar@nookpages.com with “Privacy complaint” in the subject. The person in charge of protecting personal information at Dogs in Boots, LLC looks into it and replies with what we found and what we’ll do. If you’re not satisfied, you can contact your regulator (below).

United States

If you live in California or another state with a consumer privacy law, you also have the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don’t do any of these. In the categories California law uses, we collect identifiers (account ID, installation ID, IP address and, if you give them, your name and email address), characteristics such as your age (from your birth date), commercial information (purchase history), internet or other electronic network activity (how you use Lodestar), geolocation data (an approximate location worked out from your IP address, never your precise location), the birth details and other information you give Lodestar (such as the people you add and the text you send in Ask), and inferences: the readings Lodestar writes from your chart. What you write in Ask may say something about your health or your relationships; we use it only to answer you. You can use an authorized agent to make a request. If we decline a request, you can appeal by replying to our answer. If you live in Washington or Nevada, our Consumer Health Data Privacy Policy describes the health information you may write in Ask and your rights over it.

Canada

Under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector, you can access and correct your information and withdraw your consent. The person in charge of protecting personal information at Dogs in Boots, LLC can be reached at lodestar@nookpages.com. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Australia

We follow the Australian Privacy Principles: you can ask to access or correct your information, and complain to us (see Complaints). If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).

New Zealand

Under the Privacy Act 2020, you can access and correct your information. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner.

13. Security

Lodestar’s connections are encrypted, and on our servers each account can reach only its own data. Our providers encrypt stored data and limit who can access it. No system is perfectly secure; if a breach puts your data at risk, we’ll tell you and the authorities as the law requires.

14. Changes to this policy

When we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also let you know in Lodestar or on this page before it takes effect.

15. Contact us

Dogs in Boots, LLC