Privacy Policy
Lodestar is an astrology app for iPhone made by Dogs in Boots, LLC. This policy explains, in plain words, what Lodestar collects, why, who receives it, how long it’s kept, and how you can delete it. It covers the Lodestar app, its widgets and this website. Our Consumer Health Data Privacy Policy also covers health information you may write in Ask.
The short version
- You don’t need to give us your name or email. Lodestar creates an anonymous account for you, and signing in is optional.
- Lodestar calculates your chart on your iPhone. Your birth details, the people you add and your Pro readings are also saved to your account, whether or not you sign in, so that signing in can bring them back on a new iPhone (see Section 3).
- Your readings and Ask use AI from Anthropic, only after you agree. Anthropic receives your chart’s facts, today’s sky, the nicknames and chart facts of people you add, what you ask in Ask and a coded ID: never your birth date, time or place, your name or your email.
- We use analytics, linked to your account, to see how Lodestar is used and to fix problems. They include which screens you open, your IP address and your approximate location, never your birth date, time or place, your chart, the people you add or what you write in Ask. Their initial setting follows your iPhone’s Region; you can change it in Lodestar’s Settings › Privacy (see Analytics).
- No ads. We don’t sell your data, and we don’t track you across other companies’ apps or websites.
- You can delete your account in the app, in Settings › Delete account. Section 9 lists what that deletes and what it doesn’t.
1. Who we are
Lodestar is made by Dogs in Boots, LLC (“we”, “us”). We decide how the information described here is used, and you can reach us at lodestar@nookpages.com. Lodestar is available in the United States, Canada, Australia and New Zealand.
2. What stays on your iPhone
Lodestar calculates your chart, today’s sky and the sky calendar on your iPhone, and much of the app works there alone. This stays on your iPhone, and our servers don’t keep it:
- Your permission for AI, and when you gave it.
- If a birth date you confirm says you’re 13 to 17, the day Ask opens for you: your 18th birthday by that date. It stays until you delete Lodestar, even if you change the date, sign out or delete your account. If one you confirm while setting up Lodestar says you’re under 13, only that Lodestar stopped and, until it has deleted your account, what it needs to finish that (see Children).
- Your Ask conversation, outside your backups, for up to 30 days after your last question. Each question passes through our server on its way to Anthropic (see Ask). Starting a new conversation deletes the conversation.
- Your first reading, until Today shows your first daily reading, unless you include it in a report (see Readings).
- Your reminders: their time and which ones are on. Lodestar schedules them on your iPhone; we don’t use push notifications.
- What your widgets show: the Moon, the next sky event and the headline of today’s reading, which Lodestar writes for them on your iPhone.
- Your settings, such as appearance, haptics and whether you share usage analytics.
The list of birthplaces Lodestar searches is built into the app, so finding yours never needs your location. Your birth details, your first name, your house system, the people you add and your full chart and compatibility readings are kept on your iPhone and also saved to your account (see Your chart and the people you add). Analytics reflect a few of your choices, such as whether you agreed to AI, whether the daily reading is on and how many people you’ve added (see How Lodestar is used, and errors).
Like other apps’ data, what Lodestar keeps on your iPhone is included in your iCloud or computer backups, except your Ask conversation, which Lodestar keeps out of backups. Deleting Lodestar from your iPhone deletes what it stored there.
3. What we collect, and why
Your account
The first time you open Lodestar, it creates an account for you automatically: a random account ID, with no name, email or phone number. Your subscription, your allowance of Ask messages and readings, and what Lodestar saves for you (below) are kept with this ID, and RevenueCat and PostHog, which help us run Lodestar, know you by it too.
Signing in is optional. If you sign in, you can bring your chart, the people you added and your readings to another iPhone, or back after you reinstall Lodestar:
- With Apple: Apple gives us an identifier for you and an email address: your own, or a private relay address if you choose Hide My Email. If you share your name when Apple asks, Apple gives it to us too, the first time you sign in, and we keep it with your account. If you sign in with Apple while you set up Lodestar, Lodestar uses the first name Apple gave instead of asking you for one. We also keep a token from Apple so that, when you delete your account, we can ask Apple to end Lodestar’s Sign in with Apple access.
- With email: we store your email address and send you a 6-digit code to confirm it. We use your email only to sign you in. We don’t send newsletters or marketing email.
To keep accounts secure, our sign-in system keeps a security log of sign-ins and session refreshes (about once an hour while Lodestar is open), with the time, the IP address and device type of each request and, if you signed in, your email address. We keep this log for about 7 days. Each session, anonymous ones included, also keeps the IP address and device type of its latest refresh until it ends, when you sign out or delete your account. The sign-in system also limits how many accounts can be created from one IP address.
We also store the date you finished setting up Lodestar.
Your chart and the people you add
Lodestar saves the following to our servers with your account, even if you never sign in, so that it can come back when you sign in on a new iPhone or after you reinstall Lodestar:
- your birth details: the date; the time and whether it’s exact or approximate, or that you don’t know it; and your birthplace, with its coordinates and time zone, the time zone offset your chart uses and, if Lodestar asked, your answer about daylight saving time;
- your first name, if you gave one or Apple shared it when you signed in, which Lodestar uses to greet you, and the house system your chart uses;
- each person you add: the nickname you gave them and their birth details;
- your full chart reading and your compatibility readings (Lodestar Pro), each with the chart facts it was written from (for a compatibility reading, the person’s nickname too) and when it came.
Please add someone only with their permission: Lodestar asks you to confirm it. What you add about them is saved with your account, and nobody else using Lodestar can see it.
Lodestar saves a change a few seconds after you make it. When you remove someone, their details and their compatibility reading are deleted from our servers. When you change birth details, the readings written from the old ones are deleted there too. Our servers delete each reading 90 days after it was saved; the iPhone that has it keeps it.
If you sign in to an account you already had and it has birth details, what it holds replaces what’s on this iPhone; if it has none, what’s on this iPhone is saved to it. A subscription you started on this iPhone moves to that account too. Lodestar then deletes the anonymous account it was using, with the rest of its data: what analytics recorded before you signed in, its reports and its RevenueCat record (see Accounts you can no longer reach for when that can’t happen). When you sign out, Lodestar first tries to save any change not yet saved, then removes your data from this iPhone; what was saved comes back when you sign in again.
Subscriptions
If you subscribe to Lodestar Pro, Apple handles the payment. We never see your card or your Apple Account details.
RevenueCat manages subscriptions for us, so that Lodestar can give you Pro, show your trial and renewal dates, and remind you before a free trial ends. Each time Lodestar opens, even if you’ve never bought anything, it asks RevenueCat whether you have Pro. That request carries your account ID, your App Store country, your IP address and technical details: your iPhone model, iOS and app versions, your language settings, and an identifier Apple gives apps from the same developer on your iPhone. When you buy or renew, RevenueCat receives the purchase from Apple: the plan, price and currency, dates, whether it’s a free trial, whether it will renew, and transaction numbers.
Our servers keep a copy of your subscription status, which sets your allowance of Ask messages and readings, and a log of the purchase notifications RevenueCat sends us.
How Lodestar is used, and errors
We use PostHog to understand how Lodestar is used and to find and fix problems. Lodestar sends PostHog, linked to your account ID:
- What you do in Lodestar: when you open it or come back to it, the screens you view, and actions such as agreeing to, declining or turning off AI; asking a question in Ask, getting a reply, or reporting a reply or a reading (never what you typed, what Ask answered, what a reading said or the topic you picked); adding or removing a person, with how many people you have (never who); getting a compatibility reading, or reaching your allowance; turning the daily reading on or off, and whether you allowed notifications (never the time); viewing the subscription screen, starting a trial, subscribing or restoring a purchase; opening the App Store to rate Lodestar; or signing in or out.
- Screen views, without the details: which kinds of screen you open (Today, your chart, a person’s page, Ask), never which person, placement or question.
- How long things take: how long an answer in Ask takes to arrive, and how long you took to set Lodestar up.
- Your progress through setup: which steps you see and finish, never what you enter. One step, which checks the time zone used for your birth time, appears only when you give a birth time, so it shows whether you did.
- Your subscription: whether you have a free trial or a paid subscription, and whether it will renew. As you use Lodestar, it keeps your analytics profile up to date with this and with whether you’ve signed in, so it shows changes to your subscription, such as a trial becoming paid or being cancelled.
- A random ID that PostHog creates when Lodestar is installed. It isn’t your iPhone’s advertising identifier. It stays on your iPhone until you delete your account or delete Lodestar, even if you sign out.
- Device details: your iPhone model (such as “iPhone 17 Pro”, not your iPhone’s name), iOS version, app version, language and region settings, time zone and screen size.
- Your IP address and approximate location: PostHog keeps your IP address with each event and, as each event arrives, works out from it your country, region, city and postal code, and the coordinates and time zone of that area. It keeps that location with the event and in your analytics profile, including where you first used Lodestar.
- Error reports: what went wrong, technical details such as which calculation or request failed and its error code, the kind of screen you were on, and a short trail of earlier technical messages. They don’t include your name or email.
Analytics never include your birth date, time or place, your chart, the people you add or what you write in Ask. PostHog doesn’t record your screen, what you type or where you tap, and we don’t use it for advertising. On first launch, analytics are off when your iPhone’s Region is in the EU or EEA, the UK or Switzerland, and on elsewhere. An existing saved setting is kept. You can turn analytics on or off in Lodestar’s Settings › Privacy; see Your choices.
When you contact us
If you email us, we receive your email address and what you write, and use them only to help you. Our email is hosted by Google.
This website
This website sets no cookies. To count visits and see how quickly its pages load, it uses Cloudflare Web Analytics: Cloudflare adds a small script to each page, and your browser downloads it from Cloudflare. For each page you view, the script sends Cloudflare:
- the page’s address and the address of the page that sent you here, both without any query string, and when you opened the page;
- how quickly the page loaded and responded when you tapped, clicked or typed, naming the page elements involved (such as the one you tapped), and how much memory the page used;
- your browser and operating system versions;
- a random ID that is new for every page view.
The script doesn’t use cookies or store anything on your device, and its ID changes with every page, so these reports don’t recognize you when you come back. Cloudflare receives your IP address with each report and says it discards it at the nearest Cloudflare data center, without storing it in its core databases or logs. Its reports show us visits by country, browser, operating system and type of device. Cloudflare says it doesn’t fingerprint visitors or track them across its customers’ websites. Content blockers can stop the script, and Lodestar’s Settings › Privacy switch covers the app, not this website. Cloudflare, which hosts this website, also processes visitors’ IP addresses and request details to deliver and protect it. If a page fails to load, some browsers also send Cloudflare a short error report: the page’s address, the page that linked to it and the kind of error. Cloudflare says it drops the IP address at once.
4. AI: your readings and Ask
Lodestar calculates your chart; Claude, an AI made by Anthropic, puts it into words in your readings and in Ask’s answers. Lodestar asks your permission before its first AI request, once for all of them, and sends nothing to our server or to Anthropic for them until you agree. Without AI, your chart, Today’s sky and the sky calendar keep working.
What Lodestar sends
- Your first reading, at the end of setup, and your full chart reading (Lodestar Pro): your chart’s facts, meaning the sign of each planet, your rising sign and Midheaven, their houses if you gave a birth time, the strongest aspects between them, and whether your birth time is exact, approximate or unknown.
- Today’s reading: whether your birth time is exact, approximate or unknown, today’s date and today’s sky for you: the Sun’s sign, the Moon’s sign and phase and, if you gave a birth time, the house it’s in for you, the planets’ strongest aspects to your chart today, and up to three coming sky events, such as a full moon, within 30 days.
- A compatibility reading (Lodestar Pro): your chart’s facts, the nickname you gave the other person, their chart’s facts and how your two charts meet.
- Ask: your question, the topic you picked, the earlier questions and answers in that conversation, your chart’s facts, today’s sky, and the nicknames and chart facts of up to six of the people you added, the ones your conversation names first. Please leave out names and private details, yours or anyone else’s. If a question mentions your health, our Consumer Health Data Privacy Policy also applies.
- With each request, a coded ID: a one-way code made from your account ID. It stays the same, so Anthropic can tell users apart to prevent abuse, but it doesn’t tell Anthropic who you are.
- Never sent to Anthropic: your birth date, time or place, or anyone else’s, your first name, your email, your account ID, your IP address or your device details.
Readings
- Today’s reading can be shared: our server stores each one, without any account information, and gives the same reading to anyone whose day has exactly the same facts. Each day, Lodestar first asks our server for a stored one, and our server asks Claude only when there’s none.
- Our AI service doesn’t store your first reading, chart reading or compatibility readings: it sends them to your iPhone, which keeps them, and Lodestar then saves your chart and compatibility readings to your account (see Your chart and the people you add).
- Our server counts the readings and Ask messages you use, for your allowance and to limit how many free readings an account can ask for in a day, without recording what they said.
- If you report a reading, we receive the reason you pick, which kind of reading it was and the app version, with your account ID, and the reading as you saw it only if you choose to include it (a compatibility reading can name the person you added by their nickname). The Lodestar team reads reports to fix problems. Each report is deleted after 90 days at most, or sooner if you delete your account.
Ask (for adults)
- Ask is for adults 18 and older. Lodestar works out your age from the birth date you give for your chart, and shows it to you so you can fix a mistake before you confirm it. While that date says you’re under 18, Ask stays closed. Once you confirm a date under 18, Ask stays closed on that iPhone until your 18th birthday by that date, even if you change the date later (see What stays on your iPhone).
- Our servers don’t keep your questions or the answers unless you include them in a report (below). They record that you asked and whether you got an answer, for your allowance, and delete that record after 7 days. When our server gives Lodestar’s own crisis response instead of an answer, the record shows it, because that response doesn’t count toward your allowance the first 3 times in any 24 hours.
- Your conversation stays on your iPhone, outside your backups, for up to 30 days after your last question, and you can delete it at any time by starting a new one. If a question says in plain words that you may be in danger, such as that you want to die or to hurt yourself, Lodestar doesn’t send it: it shows its own words and crisis lines instead. Such a question never leaves your iPhone: it doesn’t go to Anthropic or to our servers, not even in a report. Other questions that mention suicide, self-harm, an overdose, a medical emergency or someone hurting you are sent to Anthropic like every question (see What Anthropic does with it), and Lodestar shows crisis lines at once. Neither kind is kept on your iPhone. Lodestar recognizes both by their words, so a question that says it another way is treated like any other. Our Support page lists the crisis lines and says more.
- If you report a reply, we receive the reason you pick and the app version, with your account ID and random IDs that tie reports on the same conversation together, and your question and the reply only if you choose to include them. A report on Lodestar’s response to a question it didn’t send never includes that question. The Lodestar team reads reports to fix problems. Each report is deleted after 90 days at most, or sooner if you delete your account.
What Anthropic does with it
Anthropic is our service provider for these requests. It stores and processes them in the United States. Under its commercial terms, it doesn’t use them to train its models, and it deletes them within 30 days. If Anthropic’s safety systems flag a request, such as a question, for breaking its usage policy, Anthropic may keep it for its own safety work, under US law: the request for up to 2 years, and its safety classification scores for up to 7 years.
AI can be wrong. Lodestar calculates every fact a reading or an answer rests on, and our server checks each reply against those facts before you see it. Lodestar is for reflection and entertainment: it doesn’t predict the future.
Turning AI off
You can turn AI off at any time in Lodestar’s Settings › AI. That withdraws your permission, and Lodestar sends nothing more to Anthropic until you agree again. Signing out or deleting your account also clears your permission.
5. Who receives your data
These companies run parts of Lodestar for us, and each receives what its part needs, for the purposes in this policy:
- Supabase
- Hosts our database, sign-in and server code, and so stores everything we keep on our servers, your birth details included.
- RevenueCat
- Manages subscriptions (see Subscriptions).
- PostHog
- Analytics and error reports (see How Lodestar is used, and errors).
- Anthropic
- Writes your readings and answers Ask questions (see AI).
- Resend
- Delivers sign-in code emails. It receives your email address and the message.
- Expo
- Delivers updates to the Lodestar app. When Lodestar starts, it asks Expo’s servers whether an update is ready. That request carries your IP address, a random ID for this installation of Lodestar (not your account ID), technical details about the version of Lodestar you have and, if an update failed to start, the error it caused.
- Cloudflare
- Hosts this website and counts its visits (see This website).
- Hosts our email, including the messages you send to lodestar@nookpages.com and our replies (see When you contact us).
These companies act on our behalf, under agreements that limit their use of your data to providing their service to us, except that Anthropic may keep requests its safety systems flag for its own safety work (section 4). They protect your data at least as well as this policy does.
Apple processes App Store purchases, refunds and Sign in with Apple, under its own terms and privacy policy. If you’ve chosen in iOS to share analytics with app developers, Apple also gives us crash reports and app usage statistics that don’t identify you.
We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy keeps applying to it.
6. What we never do
- Show ads in Lodestar.
- Sell your personal information, or share it for targeted advertising.
- Track you across other companies’ apps or websites. Lodestar doesn’t use your iPhone’s advertising identifier and never shows Apple’s tracking prompt.
- Let other companies collect information about what you do across other apps and websites over time through Lodestar or this website.
- Ask for your location, your contacts, your photos, your camera or your microphone.
- Send you marketing email.
- Use your data to train AI models, or let our AI provider do so.
7. Where your data is processed
Our service providers store your data in the United States and process it there, with three exceptions: some requests may first be handled by servers closer to you; Google, which hosts our email, may store and process the emails you send us in other countries; and this website’s visit reports are processed at the Cloudflare data center nearest you, which may be in another country (Cloudflare doesn’t say where it stores them). If you live in Canada, Australia or New Zealand, this means your data is transferred to the United States, where it is protected as this policy describes but may be accessed by US courts, law enforcement and national security authorities under US law.
8. How long we keep it
- On your iPhone
- Until you delete it in Lodestar, sign out (what was saved to your account comes back when you sign in again), delete your account, or delete the app. Your settings, such as appearance, your reminders and whether you share usage analytics, stay until you delete the app, and so does what Lodestar keeps of an age you confirmed (the day Ask opens for you, or that Lodestar stopped). Your Ask conversation: up to 30 days after your last question. Your first reading: until Today shows your first daily reading.
- Your account
- Your account ID, email, Apple sign-in and any name Apple gave us, the date you finished setting up Lodestar, your subscription status, and the IP address and device type your sessions last used: until you delete your account. Your birth details, first name and house system, and the people you added: until you change or remove them, or delete your account. Your full chart and compatibility readings: up to 90 days, and less if you remove the person or change the birth details they were written from. Allowance records (the readings and Ask messages you used, and when): 30 days for readings, 7 days for Ask messages. Two counters, of the free readings you asked for today and of how often we recently re-checked your subscription: until you delete your account.
- Accounts you can no longer reach
- If you delete Lodestar from your iPhone without having signed in, the anonymous account Lodestar was using stays on our servers, at RevenueCat and at PostHog, with no set end date. It has no email address, but it keeps what Lodestar saved to it, your birth details and the people you added included (its readings go after 90 days), and the IP address and device type it last used. PostHog keeps its analytics profile, and its events for up to 1 year. It can no longer be deleted from Lodestar. That includes the new anonymous account Lodestar starts right after you sign out or delete your account, if you then delete Lodestar. To delete an anonymous account, use Settings › Delete account before you delete Lodestar. When you sign in to an account you already had, Lodestar deletes the anonymous one it was using, with its data, once your purchases have moved to that account (see Your chart and the people you add). If that can’t happen within an hour (for example, Lodestar is offline or closed, or you sign out of that account first), the anonymous account stays too.
- Reports
- Your reports on Ask’s replies and on readings: up to 90 days, and deleted with your account.
- Subscription records
- RevenueCat keeps your purchase history until you delete your account, when we ask it to delete your record. Our log of purchase notifications for your account is deleted with it.
- Analytics events and error reports
- Up to 1 year. When you delete your account, we ask PostHog to delete them, and it does within about a week.
- Your analytics profile
- Until you delete your account, when we ask PostHog to delete it along with your events. It holds your latest approximate location and where you first used Lodestar, your subscription, and whether you’ve signed in. For an account you can no longer reach, see above.
- After you delete your account
- We keep its account ID for 48 hours, only to ask RevenueCat and PostHog a second time to delete anything that reached them meanwhile. If one of them couldn’t be reached, or a person has to review the deletion, we keep the ID until that’s done.
- Server logs and backups
- About 7 days, our sign-in security log included. Server logs include IP addresses and may include the approximate location our hosting provider works out from them (such as the city and postal code), device types and account IDs. They don’t show your birth details or what you write in Ask, unless our database refuses a change from Lodestar: then its log may show that change.
- Anthropic
- Up to 30 days. If a request is flagged for misuse, Anthropic may keep it for its own safety work for up to 2 years, and its safety classification scores for up to 7 years.
- Sign-in code emails
- Resend keeps each sign-in email (your address and the message, whose code expires within an hour) and its delivery log for 30 days.
- Website visit reports
- Cloudflare keeps every report for 7 days, then only a sample, and lets us see the last six months. It doesn’t say when it deletes the sample.
- Support emails
- As long as we need them to help you and to keep a record of our conversation.
9. Deleting your account and data
To delete your account, open Lodestar and go to Settings › Delete account, near the bottom. Any account can be deleted, including an anonymous one. This deletes:
- From our servers: your account and email, your Apple sign-in (we also ask Apple to revoke it), your profile, your birth details, first name and house system, the people you added, your readings, your allowance records and counters, your subscription status, your reports, and our log of purchase notifications for your account.
- At RevenueCat: your customer record, which we ask RevenueCat to delete.
- At PostHog: your analytics and error data, which we ask PostHog to delete. Lodestar also replaces PostHog’s random ID on this iPhone, so what it sends afterwards isn’t linked to your deleted account.
- From this iPhone: your birth details, first name and house system, the people you added, your readings, your Ask conversation, your permission for AI and the headline on your Today widget.
Two days later, we ask RevenueCat and PostHog again, for anything that reached them meanwhile. If either can’t be reached when you delete your account, your account is still deleted, and we keep asking until it confirms (soon at first, then once a day). If your analytics data at PostHog is also linked to another account’s ID, a person reviews it before it’s deleted, so that nobody else’s data is deleted with yours. If your connection drops while you delete your account, Lodestar checks with our servers as soon as it can, at the latest the next time you open it, and finishes deleting your data from this iPhone once your account is gone.
Deleting your account doesn’t remove:
- Your App Store subscription. Cancel it separately in your iPhone’s Settings › your name › Subscriptions; deleting your account doesn’t stop Apple from charging you.
- Copies in our backups and server logs, including our sign-in security log, until they expire after about 7 days.
- What Anthropic received, until Anthropic deletes it within 30 days (or 2 years, if it was flagged, with its safety classification scores kept up to 7 years).
- Data from another iPhone that’s still signed in to your account, if that iPhone stays offline or doesn’t open Lodestar for more than two days after you delete your account: RevenueCat and PostHog keep what it sends them before it learns the account is gone. An iPhone that’s online with Lodestar open stops sending as your account within an hour.
- Any other Lodestar account, such as an anonymous one left on our servers when you deleted Lodestar without signing in (see Accounts you can no longer reach).
- Your settings on this iPhone, such as appearance, your reminders and whether you share usage analytics, and what Lodestar keeps there of an age you confirmed (the day Ask opens for you, or that Lodestar stopped). Delete Lodestar from your iPhone to remove them.
You can also email us to ask for a copy of your data, to correct it, or to delete it. So that we give your data only to you, we answer a request only when it comes from your Lodestar account’s email address, or when you make it in Lodestar while you’re signed in to that account, such as deleting it in Settings › Delete account. An anonymous account has no email address, so we can’t confirm that a request about it is yours: you can delete it yourself in Settings › Delete account, and change or remove your first name, your birth details and the people you added in Lodestar at any time.
10. Your choices
- Signing in with Apple or email is optional.
- Your first name and birth details can be changed in Lodestar’s Settings › Birth details, where you can also remove your first name, and the people you add edited or removed at any time in People.
- Reminders: turn them on or off in Lodestar’s Settings › Reminders, or turn off all of Lodestar’s notifications in your iPhone’s Settings › Notifications › Lodestar.
- AI: turn it off in Lodestar’s Settings › AI.
- Analytics: use Share usage analytics in Lodestar’s Settings › Privacy to turn them on or off. While the switch is off, Lodestar sends PostHog nothing: no usage data, no error reports and no other requests, and what it hadn’t sent yet is discarded. Turning it off doesn’t delete what PostHog already has; deleting your account does.
11. Children
Lodestar is for people 13 and older and isn’t directed to children under 13. If the birth date you confirm while setting up Lodestar says you’re younger, Lodestar stops there: it sends nothing to our AI provider, turns analytics off, as Settings › Privacy does, forgets what you entered on that iPhone, and deletes your account, as Settings › Delete account does (see Deleting your account). That includes an account you signed in to before you entered your birth date, with its email address and the name Apple shared if you used Sign in with Apple, and the anonymous account Lodestar was using before that sign-in, if it’s still there (Lodestar can delete that one for up to an hour after the sign-in: see Accounts you can no longer reach). Lodestar doesn’t start a new account. If the iPhone is offline, or our servers can’t finish the deletion, Lodestar keeps only what it needs on that iPhone to finish it, and does the next time it opens with a connection; if Lodestar is deleted from the iPhone before then, the account stays on our servers (see Accounts you can no longer reach). Lodestar then stays stopped on that iPhone until it’s deleted: it remembers that it stopped, but not the date. Once your account is deleted, Lodestar sends nothing more from the next time it starts, apart from its check for app updates (see Expo under Who receives your data). Before that, our payment provider’s code may still check the deleted account, which can leave an empty record of it at RevenueCat; our second request, two days later, deletes it. Lodestar’s Settings won’t save a birth date under 13 either. We don’t knowingly collect personal information from children under 13. If you think a child under 13 has given us personal information, email us and we’ll delete it. If the child used Lodestar without signing in, open Settings › Delete account on their iPhone instead: we can’t find an account that has no email address. If Lodestar stopped at their birth date, it has deleted their account already, or will the next time it opens with a connection. Ask is only for adults 18 and older (see Ask).
12. Your rights
Wherever you live, you can ask us what information we hold about you, for a copy, to correct it, or to delete it, and you can withdraw your permission for AI, or turn analytics off, at any time. Email lodestar@nookpages.com. We’ll confirm the request is yours (see how) and reply within the time your local law requires. We won’t treat you differently for using these rights.
If you think someone added your birth details to Lodestar without your permission, you can ask them to remove you, which deletes your details from our servers, or email us.
Complaints. If you think we’ve mishandled your information, email lodestar@nookpages.com with “Privacy complaint” in the subject. The person in charge of protecting personal information at Dogs in Boots, LLC looks into it and replies with what we found and what we’ll do. If you’re not satisfied, you can contact your regulator (below).
United States
If you live in California or another state with a consumer privacy law, you also have the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don’t do any of these. In the categories California law uses, we collect identifiers (account ID, installation ID, IP address and, if you give them, your name and email address), characteristics such as your age (from your birth date), commercial information (purchase history), internet or other electronic network activity (how you use Lodestar), geolocation data (an approximate location worked out from your IP address, never your precise location), the birth details and other information you give Lodestar (such as the people you add and the text you send in Ask), and inferences: the readings Lodestar writes from your chart. What you write in Ask may say something about your health or your relationships; we use it only to answer you. You can use an authorized agent to make a request. If we decline a request, you can appeal by replying to our answer. If you live in Washington or Nevada, our Consumer Health Data Privacy Policy describes the health information you may write in Ask and your rights over it.
Canada
Under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector, you can access and correct your information and withdraw your consent. The person in charge of protecting personal information at Dogs in Boots, LLC can be reached at lodestar@nookpages.com. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
Australia
We follow the Australian Privacy Principles: you can ask to access or correct your information, and complain to us (see Complaints). If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).
New Zealand
Under the Privacy Act 2020, you can access and correct your information. If you aren’t satisfied with our answer, you can complain to the Office of the Privacy Commissioner.
13. Security
Lodestar’s connections are encrypted, and on our servers each account can reach only its own data. Our providers encrypt stored data and limit who can access it. No system is perfectly secure; if a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
14. Changes to this policy
When we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also let you know in Lodestar or on this page before it takes effect.
15. Contact us
Dogs in Boots, LLC
lodestar@nookpages.com