Privacy Policy

Effective date: August 8, 2026

Starloom is published by Lanternary. Contact: hello@starloom.xyz.

Information we collect

When you create an account, we process your email address and authentication identifiers from Apple, Google, or passwordless email sign-in. Starloom may store the profile details you provide (including name, birth date, optional birth details and personality fields), daily check-in questions and answers, generated Portraits and readings, thread access state, and service metadata needed for security and reliability.

Guests can explore the six-thread preview without creating an account. AI generation, profile synchronization, and check-in synchronization require an email-verified account.

Starloom does not request GPS/device location. If you choose a birth place, the text you type is sent through our service to the Photon geocoder, which uses OpenStreetMap data.

How we use information

We use information to authenticate you, synchronize progress across devices, generate and retrieve personalized AI content, provide support, prevent abuse, enforce generation limits, diagnose failures, and improve reliability. We do not sell personal information or use it for targeted advertising.

Service providers

• Cloudflare Workers, Workers AI, AI Gateway, KV, and email services host the API, process AI prompts, control spend/abuse, and deliver one-time sign-in codes.
• Neon Postgres stores accounts and synchronized Starloom data.
• Apple and Google provide social authentication when selected.
• Photon/OpenStreetMap processes optional birth-place searches.
• Sentry receives error, performance, PII, and pseudonymous account/session context. Session Replay may be sampled, but all replay text, images, and vector graphics are masked. Authorization headers, cookies, request bodies, profiles, and check-in content are stripped from events.

AI processing

For verified users, profile and check-in data needed for a requested reading may be sent to Cloudflare Workers AI. Generated results and deduplication records are retained so repeated requests can return the same result without another model call. AI output may be inaccurate and is offered for wellness reflection and entertainment, not professional advice.

Storage, retention, and deletion

Profiles, check-ins, generated readings, access state, and account records are retained on our servers while your account is active and as reasonably needed for security, legal obligations, and service integrity. Local copies may also remain on your device. Account deletion removes associated profile, check-in, reading, entitlement, access, and generated-content records from the core database, subject to limited backups or records we must legally retain.

You can request account deletion by emailing hello@starloom.xyz. Clearing local data or uninstalling the app does not by itself delete a verified cloud account.

Security and international processing

We use HTTPS, verified sessions, access controls, rate limits, and generation deduplication. No system is perfectly secure. Our providers may process information in the United States and other locations where they operate.

Children

Starloom is for people 13 and older. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has created an account.

Your choices and rights

You may continue as a guest, decline notifications, edit local profile information, sign out, or request access, correction, or deletion as applicable in your jurisdiction. Notification permission is controlled by your device settings.

Changes

We may update this policy as the product or law changes. We will post the revised effective date and provide additional notice when required.