Our Privacy Policy Explained in Plain English (2026)
Table of Contents
Every privacy policy is a promise. Ours is deliberately short because the behavior is deliberately simple: the apps are built to work without your data. Here is what that means in plain English.
The Short Version
- We collect nothing: no usage stats, no crash logs, no analytics
- We sell nothing: there is no data to sell because none exists
- We store nothing: no accounts, no profiles, no cloud databases
- Everything stays on your device: your readings, your journal, your sigils
- No ads: no ad SDKs, which means no ad-tracking identifiers
What We Collect
The answer is: nothing that leaves your device. The apps process everything locally - a tarot shuffle, a rune draw, a dream journal entry never touches a server. The only data that exists is the data you see on your screen.
What We Never Do
- No analytics SDKs - we do not know how often you open the app
- No advertising identifiers - there are no ads to personalize
- No email capture - you can buy and use without an account
- No third-party sharing - there is nothing to share
- No surveillance - offline means offline, verified by design
How to Verify
- Open Google Play and read the Data Safety section for any of our apps
- Install the app and put your phone in airplane mode - everything still works
- Check App permissions - you will see the app asks for little to nothing
- Use a firewall app or router log for one week and watch for zero connections
- Email support if anything looks off - we answer every message
Privacy by architecture, not by policy. We build offline-first because it is the only design that makes promises enforceable - and the Astral Lab app is built exactly that way.
FAQ
Ready for the full experience?
These guides work with pen and paper, but a digital tool makes them faster.
Frequently Asked Questions
How can an app work with no data at all?
Divination, journaling, and sigil tools are local computations. Shuffling cards or calculating moon phases needs no internet - the app is a tool, not a service.
What about app updates and purchases?
The Play Store handles delivery and payment, not us. That is Google's transaction, not a data collection channel, and we never see payment details.
Could the policy change later?
The architecture makes the promise permanent: offline apps cannot start phoning home without a rebuild that would be visible in every update. You would see it in the release notes.
References
- Google Play Data Safety form requirements (2025)
- GDPR Article 5: purpose limitation and data minimization (2016)
- OWASP MASVS Privacy requirements, release 2.0 (2024)