Profection — Privacy Policy
Last updated: 16 October 2026
Profection is built so that almost nothing about you leaves your phone. This page says exactly what stays, what goes, where it goes, and how long it lives.
There is no account
Profection has no sign-up, no login and no user accounts. We do not know your name or your email address, and we have no way to connect any of the data below to you as a person.
What never leaves your device
- Your birth data — date, time, place, coordinates, time zone.
- Your chart. Every astronomical and astrological calculation runs on the device. No chart is ever computed on a server.
- Your Ledger — readings, the acts you chose or declined, evening reflections, Return notes, Consultations and your long roads.
- Your Voice Print, if you record one.
- Your location, if you use “My sky”. Read once, used immediately, never stored and never sent.
- Ask the Mirror conversations, which run entirely on the device using Apple’s on-device model.
You can export all of it as JSON at any time, and delete all of it from inside the app (Self → Delete all data). There is no server copy to request.
What is sent, only when you ask for it
Three optional features send data to our server, which forwards it to our AI provider, fal.ai. Each is off until you grant a specific, separate consent, and each can be withdrawn in Likeness Studio.
| Feature | What is sent |
|---|---|
| Personalised card art | A text description of the card, and — in “Self” mode only — one photo you choose |
| Mirror Portrait | One photo you choose |
| Spoken narration | The text to be spoken, and — for your own voice only — your Voice Print recording |
Photos and voice recordings are not stored by us. They travel inside a single request, are passed to the provider to produce the result, and are discarded. They are never written to disk on our server and never cached.
Consent is unbundled. Creating a likeness, transmitting it, retaining a reusable identity asset, cloning your voice, and exporting are five separate permissions. None is required, and the complete daily reading works with all of them off.
We never use your data to train or improve any model. This is not a setting to find and switch off — it is not offered and not stored.
What our server does keep
| What | Why | How long |
|---|---|---|
| A random installation ID | To meter a daily generation quota | Up to 90 days |
| The resulting image or audio URL | So the same request is never billed twice | 30 days |
| A cost record: installation ID, card number, image count, cost | To track what the service costs to run | 90 days |
The installation ID is a random identifier created on your device the first time you use a generation feature. It is not derived from you, your hardware, or any advertising identifier, and reinstalling the app replaces it. It lets us count requests from one installation. It does not let us identify you.
What we do not do
- We do not track you, in this app or any other.
- No advertising, and no advertising identifiers.
- No third-party analytics. There is no analytics SDK in the app.
- We do not sell, rent or share your data with anyone other than the provider named above, solely to produce the result you asked for.
Children
Profection is not intended for children. Generating art from a photograph additionally requires you to affirm that you are 18 or older and that the photograph is of yourself.
Payments
Memberships are sold through Apple’s In-App Purchase. Apple processes the payment; we never see your card details, billing address or Apple ID.
Your rights
- Access and portability — export everything as JSON from Self → Privacy.
- Erasure — Self → Delete all data clears the device. Server-side records expire on the schedules above and contain nothing identifying.
- Withdrawing consent — any generation consent can be revoked in Likeness Studio and takes effect on the next request.