Privacy Policy

1. Who we are

Canopy is an iOS application developed and operated by Stellar Apps LLC, a limited liability company registered in the United States, which is the data controller for the information described here.

You can reach us at:

• Email: canopyappsupport@stellarappsllc.com
• In the app: Settings → Support → Submit Support Request

2. Information we collect

Canopy is built to work with as little personal data as possible. We collect only the following:

• Birth details — the name you enter for your chart, and the date, time, and place (including geographic coordinates) of birth. Birth details are sent to our backend to compute and cache your natal chart, Arabic lots, essential dignities, and related readings; the name you enter is stored with your profile when you sign in.
• Location (optional) — your current location, accessed only if you grant permission in iOS; used for planetary hours and current-moment readings. You can instead set a place manually. Coordinates used to compute a reading are sent to our backend and cached so results return quickly; we do not build a history of your movements, and cached coordinates are deleted with your account.
• Account — you can use Canopy without signing in: the app creates an anonymous account identifier to store your readings. Signing in with Sign in with Apple is optional and links your chart across devices. When you sign in, we receive only an Apple-issued account identifier; we request no data scopes from Apple, so we never receive your name or email address from Apple. (Apple may show your name to you during sign-in, but it is not sent to Canopy.)
• Subscription — Canopy is a subscription app, and using it requires an active auto-renewable subscription billed through your Apple Account. We receive your subscription status (active, expired, in trial) and Apple-issued transaction identifiers from the App Store and StoreKit. We never receive or store your payment card details. See our Terms of Use for the subscription terms.
• Usage events — Canopy records a small set of first-party usage events (onboarding completed, daily open, reading completed, paywall viewed, subscribe tapped) tied to your account identifier, together with at most a coarse age bracket (such as "25–34") and a country code — never your name, raw birth details, coordinates, or free-form location. We use these only as aggregate counts to understand how the app is used.
• Device and integrity data — requests to our backend include your device's vendor identifier (IDFV) and are verified with Apple's App Attest to confirm they come from a genuine copy of Canopy. This information is used to protect the service from abuse and is kept in short-term internal service logs; it is never used for advertising or tracking.
• Calendar (optional) — if you choose to save an election window to your calendar, Canopy asks for iOS calendar permission and writes the event on your device. We never read or transmit your calendar's contents.

Canopy does not use any third-party advertising, analytics, attribution, or crash-reporting SDKs, and we do not track you across other apps or websites. The only usage data we collect is the small set of first-party events described above.

3. How we use your information

We use the information above only to operate the app's features:

• Astrological calculation and personalisation — generating your natal chart, daily planetary hour schedule, lunar-mansion guidance, electional timing, fixed-star placements, and transit readings from your birth data and optional current location.
• Account — storing your chart data under your account identifier so it persists, and — when you sign in with Apple — syncing it across your devices.
• Subscription — verifying your subscription status with Apple's StoreKit to provide access to the app.
• Service protection and improvement — verifying requests with App Attest, keeping short-term internal service logs (request metadata and device identifier) to protect the service and debug problems, and counting the first-party usage events described above.
• Customer support — responding to requests you send through the in-app support form or to canopyappsupport@stellarappsllc.com. When you submit an in-app support request, the app opens your device's Mail app with your message plus your device model, iOS version, and app version attached, so we can help — this is sent only when you choose to send it. If no mail account is set up, the app shows our email address so you can contact us directly.

We do not use your data for advertising, sell it, or build audience profiles.

4. Third-party services

Canopy relies on two service providers, each only to perform the function described:

• Supabase — provides our backend (database storage, authentication, and API). Supabase stores your account identifier, your saved chart data, and the usage events described above on our behalf and under our instructions, and does not use them for its own purposes. Supabase is engaged under a data processing agreement; see Supabase's Privacy Policy.
• Apple — provides Sign in with Apple and processes subscriptions through StoreKit. We receive only an account identifier and your subscription status; we never see your name, email, or payment details. See Apple's Privacy Policy.

No other third-party services receive your personal data.

5. Data security

We take reasonable measures to protect your personal data. Data exchanged between the app and our backend is encrypted in transit using HTTPS/TLS, and data stored with our backend provider (Supabase) is encrypted at rest. Access to stored data is limited to authorised personnel. No method of transmission or storage is completely secure, but we work to safeguard your information and review our practices regularly.

6. Data retention and your choices

We retain your data while your account is active. When you delete your account, we remove your birth details, chart data, cached readings, usage events, service-log entries, and account identifier from our systems. We may retain fully anonymised aggregate statistics (a coarse age bracket and country only, with no identifiers), which cannot be linked back to you. You are always in control:

• Edit or delete your birth details — open Settings → Profile & Birth Data in Canopy to change or remove what you have entered.
• Delete your account — open Settings → Account → Delete Account in Canopy. This permanently and immediately deletes your account and all associated data, and cannot be undone. You can also request deletion by contacting us through the in-app support form or at canopyappsupport@stellarappsllc.com; we will complete email requests within 30 days.
• Revoke location access — go to iOS Settings → Canopy → Location and choose "Never" at any time.

Need help? Visit Canopy Support or email canopyappsupport@stellarappsllc.com.

7. Your rights — GDPR (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these lawful bases: consent (for location access, which you grant explicitly via iOS permissions), performance of a contract (for your birth details, account, and subscription, which are necessary to provide the service you have requested), and legitimate interests (for the first-party usage events and service-protection logs described above, which we keep to secure and improve the service).

Under the GDPR and UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data ("right to be forgotten").
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — withdraw permission (for example, by revoking location access) at any time.
• Complaint — lodge a complaint with your local supervisory authority (a list of EEA authorities is available at edpb.europa.eu).

To exercise any of these rights, email canopyappsupport@stellarappsllc.com. We will respond within 30 days.

8. Your rights — California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to:

• Know — the categories and specific pieces of personal information we have collected, and why.
• Delete — request deletion of personal information we have collected, subject to certain exceptions.
• Correct — request correction of inaccurate personal information.
• Opt out of sale or sharing — we do not sell or "share" (for cross-context behavioural advertising) your personal information, so there is nothing to opt out of.

We will not discriminate against you for exercising these rights. To make a request, email canopyappsupport@stellarappsllc.com.

9. Children

Canopy is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal data, contact us at canopyappsupport@stellarappsllc.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. For material changes, we will provide notice in the app before they take effect. Continued use of Canopy after the effective date constitutes acceptance of the revised policy.

Questions about a change? Contact us at canopyappsupport@stellarappsllc.com or via the Support page.

11. Contact

For any privacy question, data request, or concern, reach us at canopyappsupport@stellarappsllc.com or through Canopy Support. We respond to all privacy inquiries within 30 days.