Privacy

Lumipath helps you reflect on your life through Vedic + Western astrology, numerology, and an AI companion that remembers you. To do that, we collect personal data. This page is the plain-English version of what we collect, why, and what you can do about it.

What we collect

• Account data — email address and password (the password is hashed by Supabase; we never see it).
• Birth data — your name, date of birth, time of birth, and place of birth. We need this to cast your chart. We geocode the place into latitude, longitude, and timezone.
• Preferences — what you're seeking (calm, direction, love, career, healing), belief system, tone preference.
• Conversations with Raha — the chat history you have with our AI companion, including any “memories” you explicitly let Raha keep.
• Usage data — product analytics tied to your user id: which screens and features you open, which plan you looked at, how long a reading took to generate, and whether it failed. Plus per-user counters for free-tier limits.
• What you ask Raha, and what Raha answers — we record each question's subject (love, career, money, health…) and shape (a prediction, a timing question, a decision), along with its length and language, so we can see what people actually come to Lumipath for. We also record the text of the question and the answer, so we can improve how Raha responds. Before any text leaves our servers we strip out email addresses, phone numbers, card numbers and dates, and we shorten it. We never use it to train third-party AI models.
• Session recordings — an anonymised replay of your screen as you move through the app or site, so we can see where people get stuck. Everything you type into a field is masked before the recording leaves your device: birth date, birth time, birth place, email, password and payment fields are never captured, and the payment form itself is excluded entirely. You can turn recording off at any time in Settings → Privacy on the web, or More → Privacy in the app.
• Billing data — your subscription tier, period end, and (via Stripe) limited card details. We do not store full card numbers.

Why we collect it

• To compute your birth chart and personalize daily readings.
• To remember context across conversations with Raha.
• To enforce free-tier limits and bill paid subscriptions.
• To measure how the product is used, so we can improve it.
• To detect and prevent abuse.

Who we share it with

• Supabase — authentication and database hosting (data resides in their servers).
• OpenAI / Anthropic — your chat messages are sent to these LLM providers to generate Raha's responses. We do not allow them to train on your data.
• Stripe — payment processing. They receive your card details directly; we never store them.
• Resend — transactional email (welcome, daily reading, payment notifications).
• Product analytics — PostHog (usage events and session recordings), Google Analytics and Meta Pixel (conversion events). PostHog receives your email address (so we can recognise you for support), your usage events, the masked session recordings described above, and your questions to Raha with personal identifiers stripped out. It does not receive your name, date of birth, time of birth, or place of birth. Google Analytics and Meta Pixel receive conversion events only.

We never sell your data to anyone.

Your rights

• Access — email us and we'll send you a JSON export of everything we have on you.
• Deletion — email us and we'll permanently delete your account and all associated data within 30 days.
• Correction — you can edit your birth data anytime in onboarding; email us if you need help.
• Opt out of analytics — turn off usage analytics and session recording entirely in Settings → Privacy on the web or More → Privacy in the app. Lumipath works exactly the same with it off.

Cookies

We use cookies for authentication (Supabase session), region detection (lp_geo, so we show you correct pricing), and analytics. You can clear them anytime from your browser settings.

Children

Lumipath is not intended for users under 16. We do not knowingly collect their data.

Changes

If this policy changes materially, we will email all users at least 14 days before the change takes effect.

Contact

Questions? Contact us.