Effective date: 12 August 2026.
This Privacy Policy explains how Zvezdana collects, uses, stores and protects data when you use the app, website and related services. The goal of this Policy is to clearly explain what data we process, why we process it, with whom we share it and what rights you have regarding your data.
This Policy applies to data we process through the app, website, user account, purchase flow, customer support and related technical services that are necessary for the Service to function.
By using Zvezdana, you confirm that you have read this Privacy Policy. This Policy is interpreted together with the Terms of Use and the Refund Policy.
The controller for data processed in connection with the Zvezdana Service is Marko Lekić, an independent developer based in Republic of Serbia.
For the purposes of applicable data protection law, Marko Lekić acts as controller to the extent it determines the purposes and means of processing personal data in connection with the functioning of Zvezdana.
For privacy questions, data access or deletion requests you can reach us at: support@zvezdana.ai
Depending on how you use the Service, we may process the following categories of data:
Zvezdanadoes not collect or store payment card details. Purchases are made through two separate storefronts: Google Play billing inside the Android app, where the merchant of record is Google (Google Ireland Ltd.), or Gumroad on the website, where the merchant of record is Gumroad, Inc. (USA). Both process payment under their own rules and security standards. From Google we receive only the purchase confirmation (purchase and order identifiers, product name and status). For website purchases, your email and name are passed to Gumroad as part of checkout, and our internal account identifier travels in the checkout link’s parameters so the purchase can be matched to the right account; Gumroad then returns to us, via webhook, the sale or subscription identifiers, your email and the purchased product’s details, so we can activate what you bought on your account.
We may process your data for the following purposes:
The processing of your data is based, depending on the situation, on one or more of the following:
We send marketing messages only with your consent. Consent is voluntary and you may withdraw it at any time — via the unsubscribe link in every marketing message or through the Email preferences page in your account. Withdrawal does not affect the lawfulness of processing before withdrawal, and does not affect service (transactional) messages that are part of the Service.
Zvezdana uses algorithms, astrological rules and AI models to generate personalised interpretations based on the data you provide. This may include date, time and place of birth, your input in questions or chat, and technically prepared data needed to generate responses.
Data necessary to generate content may be sent to AI partners or model providers strictly to the extent required to perform the requested functionality. Such data is used to process your specific request and operate the Service.
The generated content is automated interpretation and is intended solely for informational, entertainment and personal reflection purposes. AI processing may contain simplifications, generalisations or inaccuracies.
Your data may be processed by or made available to trusted third parties providing infrastructure and services needed for the app to function. Such parties act as processors, service providers or, where applicable, separate controllers for their own purposes.
This may include in particular:
Some of our providers may process data outside the Republic of Serbia or outside the European Economic Area. This may include servers, technical support, backups or processing by partners based in other countries.
Where such transfers occur, we aim to apply appropriate safeguards, where available and applicable, including contractual, technical and organisational measures and choosing partners that provide an adequate level of data protection.
Email is delivered by Resend, processed on infrastructure in the European Union. Where data transfers occur, we rely on appropriate safeguards, including a data processing agreement (DPA) with the provider.
Website purchases are processed by Gumroad, Inc., based in the United States — this is an international transfer of data (email, name and purchase details) outside the European Economic Area. For transfers from the European Economic Area to the United States, Gumroad states in its privacy policy that it relies on standard contractual clauses adopted by the European Commission. For the sale itself Gumroad acts as a processor on the seller’s instructions, while for charging, invoicing and VAT it acts as the merchant of record.
Product analytics and session replays are processed by PostHog on infrastructure in the European Union, so no transfer outside the European Economic Area takes place for that data. Visitor statistics are processed by Google Analytics (Google Ireland Limited); for its own transfers Google relies on the safeguards described in its privacy policy. Both tools run only with your consent.
Data is kept for as long as necessary for the Service to function, to maintain your account, display the history of insights, keep transaction records, comply with legal obligations, handle complaints and disputes and protect the legitimate interests of Zvezdana.
Retention periods depend on the type of data. For example, account and usage history may be kept while the account is active and for a certain time afterwards, whereas some transactional, accounting and security records may be stored longer where required by law, evidence or abuse prevention.
When data is no longer needed for the purpose for which it was collected, it will be deleted, anonymised or kept only to the extent required by law or a legitimate record-keeping need.
Under applicable law, you may have the following rights with respect to your data:
Privacy-related requests can be sent to support@zvezdana.ai. In some cases we may ask for additional identity verification to protect data from unauthorised access.
You can permanently delete your account and all associated data yourself, at any time, on the Account deletion page, which details exactly what is deleted and what is retained by law.
Essential cookies and local storage are used for sign-in, security and core app functionality. These always run, because the service does not work without them.
Analytics tools are not loaded until you consent. On your first visit we show a banner with two equally weighted options — accept and decline. Until you choose, no analytics tool loads; if you decline, none loads then either. Your choice is stored locally on your device, and we ask again only when this section of the policy changes.
With your consent we use Google Analytics for visitor statistics and PostHog for product analytics. PostHog also includes session replay — a record of how you use the page (clicks, scrolling, movement through the app), so we can see where users run into obstacles.
A session replay does not record what you type or the text generated for you. All input fields are masked, as are birth details, reading text and chat messages. The replay shows how you move through the app, not what you wrote or what Zvezdana answered.
You can withdraw consent at any time via the Podešavanja analitike link in the page footer. Withdrawing stops both tools immediately and brings the choice banner back.
We take reasonable technical and organisational measures to protect data from unauthorised access, loss, misuse, alteration or destruction. This may include access controls, authentication, encryption in transit, privilege limitation, logging and infrastructure protection.
However, no system is completely secure and we cannot guarantee absolute security of data in all circumstances.
The Service is not intended for individuals under 18 years of age. If we learn that data of a person under 18 was entered or processed contrary to the Service rules, we may take reasonable steps to delete such data or restrict account access, in line with technical capabilities and applicable law.
This Privacy Policy may be updated from time to time to reflect changes in functionality, business model, technical infrastructure, billing processes, legal requirements or security needs. The effective date will be updated at the top of the document.
For questions about this Privacy Policy, data processing or exercising your privacy rights, contact us at: support@zvezdana.ai