1. Data controller
Alin Daniel Epure, VAT number 17835711007, Via Antonio Banfi 10, 00166 Rome, Italy. Privacy and support: info@lentita.com.
2. Data processed
- Account and session identifiers.
- Pseudonymous device identifier for the 7-day anonymous trial; if you sign in from Settings, provider identifier and, where available, name and email supplied by Apple, Google, Microsoft, Facebook or X.
- Adult eligibility result, verification source and date, and accepted terms version; the birth date remains in the astrological profile and is not duplicated for age verification.
- Name, birth date, time and place.
- Derived astrological profile, transits, briefings, messages, memory and preferences.
- Plan status and technical purchase references.
- Strictly necessary technical, security, IP address and device data.
- PWA technical data: browser-stored preferences, session, installation status and, only with permission, Web Push endpoint, public keys, locale, time zone and last-send date.
3. Purposes and legal bases
- Anonymous trial, service, profile, chat, memory, optional account and payments: performance of the contract and user-requested pre-contractual steps.
- Security, abuse prevention, continuity and defence of rights: legitimate interests.
- Tax, accounting and authority requirements: legal obligation.
- Future optional features or marketing: separate, withdrawable consent.
4. AI
Chat messages and the strictly necessary context are sent to Google Gemini to generate a response. AI is not used for decisions producing legal or similarly significant effects.
5. Providers and transfers
Where a provider processes data outside the EEA, we use an adequacy decision or appropriate safeguards, including Standard Contractual Clauses where required.
- Vercel: website and API hosting in the configured European region.
- Supabase: PostgreSQL database and infrastructure in the Frankfurt region.
- Google Gemini: response generation; it receives the question, necessary astrological context and limited recent history.
- OpenStreetMap Nominatim: normalisation of birth places.
- Apple, Google, Microsoft and X: optional sign-in and provider-returned identifiers.
- Browser and operating-system Push service: delivery of optional notifications requested by the user; technical endpoints and keys can be removed in Settings.
- RevenueCat Web and the payment provider identified at checkout: technical handling of web purchases, entitlements, customer portal and applicable receipts.
- Facebook: optional sign-in and identifiers returned by the provider.
- Stripe: Web payment processing, payment-method handling and transaction records as shown at checkout.
6. Retention
- Account, profile, chat and memory: until account deletion.
- Technical and security logs: up to 90 days unless an incident or law requires longer.
- Encrypted backups: rotated out within 90 days after deletion.
- Tax and accounting data: for the period required by law.
7. Your rights
United States residents may request access, correction, deletion or portability, and may appeal a denied request, at info@lentita.com. Where state law applies, you may also limit the processing of sensitive personal data. We do not sell personal information or share it for cross-context behavioral advertising, and we do not discriminate against anyone for exercising privacy rights. EEA rights to restriction and objection also remain available where applicable. We normally respond within the legally required period.
8. Security and minors
The service is only for people aged 18 or over and is not directed to children. We use data minimisation, encryption in transit, access control and incident-response procedures. Birth details and private conversations are used only to provide and secure the service and are not used for targeted advertising.
9. Cookies
The landing page uses no profiling cookies. The PWA uses only HttpOnly cookies and browser storage required for session, security, language, theme, installation and preferences. Notifications require separate permission. With no non-essential tools, no promotional cookie banner is shown; this is reviewed before adding analytics or marketing.