Legal · Privacy
Privacy Policy.
Effective December 6, 2025
Align13 (“we,” “us,” “our”) is a 13-sign astrology app. We built it to read the sky honestly — and we treat your data the same way. This policy explains what we collect, why, how we use it, and how to make us delete or export it. Short version: we only collect what we need to compute your chart and run the app, we don’t sell your data, and you can delete everything at any time.
The short version
- We collect only what we need — email, birth data, and device info
- We never sell your data — not to advertisers, not to anyone
- You can delete or export anytime — email us and we handle it within 72 hours
- We encrypt everything in transit — TLS 1.2+, HSTS, modern ciphers
- No third-party ads, no tracking pixels — we use privacy-respecting analytics only
1. What we collect
We collect the minimum needed to compute your natal chart and run the app. Specifically:
- Account info — email address and a securely hashed password
- Birth data — date, time (if known), city / coordinates, and timezone
- Chart data — your natal chart, transits, and any saved relationships
- Device info — device type, OS, language, and approximate region from IP
- Usage telemetry — anonymized events (feature opens, crashes) — no content
- Billing records — handled by Stripe; we receive a customer ID and plan only
We do not collect contacts, photos, location (beyond approximate region from IP), microphone, or any data that isn’t declared here.
2. How we use it
- Compute your natal chart, transits, and readings
- Send you the daily / weekly readings you subscribed to
- Operate, secure, and debug the service
- Process your subscription and issue receipts
- Reply to your support requests
- Comply with legal obligations
We do not use your data to train third-party AI models, and we do not sell or rent it to advertisers. When we use AI to refine readings, we use our own prompts with anonymized inputs.
3. Who we share it with
Only with vendors strictly necessary to run Align13, under data processing agreements that forbid them from using your data for their own purposes:
- Stripe — payment processing (PCI-DSS compliant)
- Cloudflare — CDN + TLS termination + DDoS protection
- Hosting provider — application + database hosting
- Email provider — transactional emails (verification, receipts)
We may also disclose information if required by law, to protect rights and safety, or in a corporate transaction (e.g. merger) — in which case you’ll be notified and given the chance to delete your account first.
4. How long we keep it
- Active account — for as long as your account exists
- Deleted account — fully removed 30 days after you request deletion
- Payment records — retained for the legal minimum (typically 7 years, tax law)
- Server logs — rotated and purged within 30 days
- Anonymized analytics — aggregate, cannot be linked back to you
5. Your rights
Regardless of where you live, you can:
- Access your data — request a copy in JSON
- Correct your data — fix birth data, email, timezone
- Delete your account — see the Security page
- Delete specific data — charts, relationships, journal entries
- Withdraw consent — for optional analytics or emails at any time
- Opt out of marketing — with one click in every email
If you’re in the EEA, UK, or Switzerland, GDPR applies. If you’re in California, you have CCPA rights including the right to know, to delete, and to not be discriminated against for exercising those rights. To exercise any right, email support@align13.com. We respond within 72 hours and fulfill requests within 30 days (or notify you of any legally permitted extension).
6. Children
Align13 is not intended for children under 13 (or the minimum age of digital consent in your region, whichever is higher). We don’t knowingly collect data from such users. If you believe a child has registered, email us and we’ll delete the account immediately.
7. Security
- TLS 1.2+ everywhere, with HSTS preloaded
- Passwords are salted and hashed (bcrypt / argon2)
- Payment data never touches our servers — Stripe handles it end-to-end
- Principle of least privilege on all internal systems
- Security incidents communicated within 72 hours of discovery
8. International transfers
Our servers may be located outside your country. When we transfer data internationally, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards to protect it.
9. Changes to this policy
If we make a material change, we’ll email registered users at least 14 days before it takes effect, and update the effective date at the top of this page. Minor edits (typos, clarifications) may be made without notice.
10. Contact
Questions, complaints, or requests? Email us and a human will reply within 72 hours.
Data protection contact
support@align13.comRelated