HoroscO'clock Privacy Policy

Effective date: 2 October 2026 · Last updated: 3 November 2026

This policy explains what data the HoroscO'clock app collects, why, where it goes, and the choices you have. The app and its backend are developed and operated by Furkan Yılmaz (the data controller) in Turkey. The Turkish disclosure under data protection law KVKK is at /kvkk.

What we collect

• Account data: when you sign in with Google or Apple we receive your name, email address and profile picture link from that provider. If you sign in with Apple we also keep the token Apple issues, so we can revoke the app's Apple authorization when you delete your account. Signing in is optional; it is required for AI readings and subscriptions.
• Birth and chart data: the names, birth dates, birth times (or that the time is unknown), birth places (city and coordinates) and optional gender you enter for your charts, plus the astrology, numerology and Ba Zi results computed from them. If you add a chart for someone else (for example a partner), make sure they agree to it. If you share a chart by invite code in Match, then only after you share the code and the other person accepts it, a snapshot copy of each of the two charts is added to the other person's account; either of you can delete the copy in your own account at any time.
• AI readings: your reading requests, the generated reading texts, technical details (type, model, prompt version, timing) and your weekly reading counter.
• Feedback: ratings, tags and optional comments you give on readings, and suggestions or support messages you send from the app (with an optional email address).
• Purchases: your plan (Normal or Pro), billing period, expiry date, Apple's transaction ID and Apple's subscription notifications (renewal, cancellation, refund). Payments are processed entirely by Apple or Google; we never see or store your card details.
• Consent record: the date of your explicit consent to AI processing of your reading data and the version of the consent text you accepted.
• Device and diagnostic data: a random device ID created by the app when you use it without signing in, your push notification token and platform, server access logs (IP address, time and path of requests), and crash reports (device model, OS and app version) that are not linked to your account.

What we do not do

• We do not sell your personal data.
• The app contains no third-party analytics, tracking or ad SDK. We do not track you across apps or websites and we do not read your device's ad identifier.
• We do not build profiles from your data.
• Your device location never leaves your device: if you allow it, it is used on the device only, to compute the sky and daily timeline for where you are.

Why we collect it

• Account data identifies you and lets you sync your charts across devices.
• Birth data is required to calculate your charts, crystals and readings.
• Purchase data is required to honor your plan and weekly readings.
• Push tokens deliver the notifications you asked for; feedback and crash reports help us fix and improve the app.

Where it is stored and who receives it

Account, chart and reading data are stored on our own server in Turkey. Crash reports are kept in our self-hosted error tracker (GlitchTip) on the same server. Data leaves the server only in these cases:

• AI readings (transfer abroad): personal readings are generated by AI models accessed via Abacus.AI (RouteLLM, United States), which routes each request to a model provider outside Turkey according to your plan (Normal: Anthropic, Pro: Google). They receive only the chart owner's first name, age and the computed chart data (planet and house positions, numerology numbers, Ba Zi pillars, whether the birth time and gender are known); compatibility readings add the second person's first name and computed data, and short digests of your earlier readings are included for continuity. If you ask a question (Ask Yourself, its follow-up, tarot spreads), the text you typed and the drawn cards are sent as well; we suggest not writing personal details such as health information, addresses or other people's full names in your questions. We never send a surname, birth place, birth date or time, or email address, although planet positions are computed from the moment of birth and so indirectly reflect it. The legal basis is your explicit consent, which the app asks for before your first reading (KVKK art. 5(1) and art. 9). Consent is optional: without it, AI readings stay off and all charts and calculations keep working. You can withdraw it at any time by not using readings, by deleting your account or by emailing us; withdrawal does not affect transfers made before it.
• Apple and Google: sign-in (Sign in with Apple, Google Sign-In), payments and purchase verification (App Store, Google Play), and push delivery (Apple Push Notification service, Firebase Cloud Messaging). These services run outside Turkey and are used for actions you start.
• GeoDB (RapidAPI): the text of a birth-city search, and the coordinates of a city to find its time zone, are forwarded through our server without any identity.
• Encrypted backups: database backups are encrypted on our server and then stored with a private storage service abroad (GitHub); the encryption key is never given to it.

Data retention

We keep your data while your account is active.

• Account data: until you delete your account. Deletion is immediate and complete: your account, charts, readings, reading feedback, consent record and push registrations are removed in one step, and an Apple sign-in authorization is revoked. Only the type, reason and date of feedback you sent remain, unlinked from you, for product statistics; the text and email of support messages are erased.
• Charts and readings: until you delete them or your account. Charts created without signing in are tied to the random device ID and kept until you delete them in the app; when you sign in they move to your account.
• Purchase records: Apple's subscription notifications are detached from your transaction ID when you delete your account.
• Backups: the database is backed up daily; off-server copies are encrypted. We keep the last 14 daily and the last 8 weekly backups and older ones are deleted automatically, so deleted data leaves the backups within about 8 weeks.
• Server logs: access and application logs (IP address, request time and path) are kept in size-capped rotating files (3 × 10 MB) and overwritten oldest-first; at current traffic this is a few weeks.
• Crash reports: kept for 30 days in our self-hosted error tracker (GlitchTip), then deleted automatically.
• Push tokens: kept until you sign out on that device (the token is removed from our server at sign-out), delete your account, or the token becomes invalid (for example, after you uninstall the app).
• AI readings: the reading text is kept until you delete the chart or your account.

Deleting your account and your rights

You can delete your account and all its data in the app at any time: side menu → My Profile → Delete Account. Charts created without signing in can be deleted one by one in the app. To access, correct, export or delete your data (including a deletion request if you can no longer open the app), email 1m.furkanyilmaz@gmail.com. We answer within 30 days, free of charge.

Children

HoroscO'clock is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

Changes

We may update this policy; material changes are announced in the app. The version on this page is always the current one.

Contact

Questions about this policy: 1m.furkanyilmaz@gmail.com