Your birth details, your readings, your choices.

1Who we are

Runecast AI (the “app”, “we”, “us”) is operated by Pulse Licensing Corp., a company incorporated in the Republic of Panama, of PH Metric, Vía Brasil, #18-B, Panama City, Panama, Republic of Panama, 7182. We are the organization responsible for the personal information described in this policy (the “controller” under European law).

We are established in Panama and the app runs on infrastructure in the United States. Section 8 explains what that means for your information, and section 12 sets out the rights you keep wherever you live — being a Panamanian company does not reduce them. Where the GDPR or the UK GDPR requires a company outside Europe to appoint a local representative, we have not yet appointed one. We are not going to pretend otherwise on this page. Until we do, write to legal@runecast.ai and we will handle your request exactly as we would if it had reached us through a representative, within the same deadlines. Appointing representatives in the European Union and the United Kingdom is on our list before we begin charging European users.

The app is available on the web at app.runecast.ai and is presented in six languages: English, French, German, Spanish, Italian and Portuguese.

The person responsible for the protection of personal information is François Poulin, Founder of Pulse Licensing Corp., reachable at legal@runecast.ai. Write to that address for anything in this policy.

2What we collect

2.1 Account and sign-in

• Your email address and authentication details, handled by Firebase Authentication (Google). You can sign in with an email and password, or with Google sign-in, in which case Google tells us your email address and basic profile information.
• Email sign-ups go through an email-verification step.
• We never see or store your password — Firebase handles it.
• Your display name and, if you add one, your profile photo.

2.2 Birth details — the heart of the app

For every profile on your account we store a birth date, a birth time and a birth place. These are what the astrological engine calculates from; without them the app cannot produce anything personal to you. If you do not know your birth time, the app still works and simply omits the parts of the chart that depend on it.

Birth place is resolved through Google Places, called through our own server, so that you only have to type a city name.

We treat birth details as sensitive. They can identify a person quite precisely and, in some contexts, reveal things people consider private. We ask for them only when you actually want a reading, and we use them only to produce your readings.

2.3 Profiles you create for other people

The app lets you add profiles for other people — a partner, a parent, a child, a friend, a public figure — so you can generate readings or compatibility (synastry) charts for them. Those profiles contain another person's personal information, and you are the one who chose to put it here. Section 3 explains what we ask of you and what we do with that data.

2.4 Readings, chat and journal

• Every reading generated for you is saved so you can open it again — daily horoscopes, weekly, monthly, quarterly and yearly forecasts, natal readings, lunar returns, synastry, rune draws and spreads, oracle consultations, numerology.
• Follow-up chat messages you send about a reading, and the replies generated for you.
• Your Journal, which is a view over those saved readings plus readings your connections have shared with you.
• Audio versions of readings and meditations you asked us to generate.

2.5 Social content (“Orbit”) and connections

• Posts, comments, reactions, photos you upload, links you share and GIFs you pick.
• Your Cosmic Circle: who you invited, who accepted, and the per-connection settings that decide what each of them can see.
• Invite links, referral codes, waitlist entries, streak records and Celestial Alignment (the daily learning game) results, scores and leaderboard standing.
• Basic activity signals the social features need — for example the last time you opened the feed, so we can show you what is new, and which posts you have already read.

2.6 Notifications

If you allow push notifications, your browser or device issues a push token which we store against your account so we can send you notifications through Firebase Cloud Messaging. We use it for the daily “Morning Call”, streak reminders, and alerts about posts, comments, reactions and mentions. We also store the delivery hour you chose and your time zone, so the Morning Call arrives in your own morning. Turning notifications off in your browser or device settings stops this.

2.7 Usage analytics

We use Google Analytics 4 to understand what works in the app — events such as “a reading was generated”, “a section was expanded”, “the app was opened from a share link”. Events carry internal identifiers only: no names, no email addresses and no birth details are ever put into an analytics event.

Analytics is off until you accept it. On your first visit the app shows a consent notice with Accept and Decline. If you decline, or never answer, no analytics events are collected on that device. See section 14.

Our servers also write ordinary operational logs — which reading type was requested, how long it took, whether it failed, and the internal account identifier — so we can keep the service working.

2.8 Technical and security data

Standard information that any web service receives: IP address, browser and device type, language, timestamps, and the signals used by Firebase App Check and reCAPTCHA Enterprise to tell a real app user from an automated attack.

2.9 What we do not collect

We do not collect payment card details today, because nothing in the app is purchasable yet (section 11). We do not use advertising trackers, we do not sell data to data brokers, and we do not read your address book — connections happen only through invite links you send.

3Data about other people

When you add a profile for someone else, you are giving us their birth details. Please only do that if:

• you have their permission, or
• you are their parent or legal guardian, or
• the person is a public figure whose birth data is already public.

We use those third-party profiles only to produce the readings and comparisons you ask for. We do not create an account for that person, we do not contact them out of the blue, and we do not build an independent profile of them for our own purposes.

If someone learns that you have created a profile about them and wants it removed, they can write to legal@runecast.ai and we will delete it, after honestly verifying the request and without exposing your account details unnecessarily.

If you invite that person and they claim their own profile, the data becomes theirs and the ordinary rules in this policy apply to them.

4Why we use it, and on what legal basis

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you. Readings are generated automatically, but they are entertainment and reflection content, not decisions about you — see our Terms & Conditions.

5AI processing — what leaves our systems

Runecast AI writes its text with artificial intelligence. Specifically:

• OpenAI (GPT-4o) receives (a) the astrological, rune and numerology data derived from a profile's birth details — positions, aspects, houses, transits, drawn runes, numbers — and (b) the question or follow-up message you typed, plus the relevant reading context, so it can write the reply. Your name and email address are not needed for this and are not sent as identifiers of you. OpenAI acts as our processor for this purpose.
• ElevenLabs receives the text of a reading when you ask to listen to it, so it can produce the audio.
• Google Cloud Text-to-Speech produces the meditation voice audio.
• Giphy receives your search terms when you search for a GIF in Orbit.

Training. We do not train our own AI models on your content. We use every provider above through its business or developer interface, whose standard terms state that content sent through that interface is not used to train that provider’s models, and we have not opted in to any programme that would allow it. If a provider changes that position, we will change this policy and tell you before the change takes effect.

6Who we share information with

We do not sell personal information. We share it with service providers (“processors”) who run parts of the app for us, and only for that purpose:

We may also disclose information if the law requires it, to protect the safety or rights of users or the public, or as part of a merger or sale of the business — in which case we would tell you before your information became subject to a different privacy policy.

7Public sharing and share links

Some features make information visible to others because that is their purpose:

• Share links to a chart or a reading create a page that anyone holding the link can open, without an account. Treat a share link like a public web page: once you have sent it, you cannot control where it goes. You can stop sharing, but copies already taken are out of our hands.
• Cosmic Circle invite links let someone connect to you. You control, per connection, what each person can see.
• Orbit posts, comments and reactions are visible to the people the feature shows them to, with your display name and photo alongside them. Mentions notify the person you mentioned.
• Celestial Alignment leaderboards show your standing to the players you are connected with.
• Referral and invite links. If you create your account through someone's referral link, we tell that person your first name and the date you joined, so they can see what they are credited for — and, where our partner programme applies, the person who introduced them sees the same two things and nothing more. We do not give either of them your email address, your birth details, your chart, your readings or your journal.
• Invite pages. If someone sends you an invite page and you fill in your own details there to receive a free chart, the details you entered are saved as a contact in that person's account and are used to produce the chart you asked for. You gave them to that person deliberately; if you would rather they did not hold them, ask them to delete the contact, or write to us and we will help.

8Where your information is stored

Runecast AI runs on Google Cloud. Our database sits in Google's nam5 multi-region and our backend runs in us-central1 — that is, in the United States. Our AI and audio providers also process data in the United States and possibly elsewhere.

The company behind the app is established in Panama. So your information is held by a company outside your country and stored on servers in the United States.

If you are in the European Economic Area, the United Kingdom or Switzerland, that is an international transfer. Panama has not been recognised by the European authorities as offering an equivalent level of protection, and although some United States providers are certified under the EU–US Data Privacy Framework we do not rely on that certification alone. These transfers therefore rely on appropriate safeguards — the standard contractual clauses and equivalent measures offered by our providers, and the commitments we make in this policy. In practice that means the European Commission’s Standard Contractual Clauses with each provider that offers them, the UK International Data Transfer Addendum where the UK GDPR applies, and the technical and organisational measures described in section 7. You may ask us at legal@runecast.ai which safeguard covers a particular provider.

If you are in Canada, your information is likewise processed outside Canada. Wherever you are, information stored in another country is subject to the laws of that country, including lawful requests by its authorities. You can ask us at any time for more detail about the safeguards in place.

9How long we keep things

• Account, profiles, readings, journal, chat, Orbit content and connections: kept while your account exists — the whole point is that you can come back to them.
• Individual items: you can delete a reading, a post, a comment or a profile at any time from inside the app.
• Push tokens: removed when they stop working or when you revoke notification permission.
• Operational logs: kept for up to 30 days, then deleted automatically.
• Backups: deleted data can persist in ordinary system backups for up to 30 days before it is overwritten. We do not restore a backup in order to bring deleted data back.

10Deleting your account

You can delete your account and the personal information attached to it, yourself, at any time.

• In the app: Settings → General Settings → “Delete my account”. You confirm twice — the first step explains in plain words what will be lost — and the deletion then runs. It is permanent and cannot be undone.
• By email: write to legal@runecast.ai from the email address on your account and we will run the same deletion for you.
• What deletion removes: your sign-in account, every profile on the account (including profiles you created for other people), every saved reading of every type, your chat and journal content, your Orbit posts together with the comments under them, your comments on other people's posts, your reactions, your connections (including your entry on the other person's side), your share links, referral codes and invite links, your notifications, your Celestial Alignment history, your Morning Call settings, your push tokens, your waitlist entry, and your uploaded images and generated audio files.
• What we keep: a minimal deletion receipt — an internal account identifier, timestamps, and a record that each cleanup step completed. It contains no name, no email address, no birth details and no readings. It exists so an interrupted deletion can be finished, so a repeated request is harmless, and as proof the deletion ran. We may also keep the minimum records needed for security, fraud prevention or a legal obligation.
• A reading you actively shared with a connection before deleting may survive as that person's own copy where the feature gave them one. Public share-link pages you created are removed.

11Payments

Nothing in Runecast AI is purchasable today, so we do not collect or store any payment information, and no payment processor receives anything about you from us.

When paid plans launch, payments will be handled by the relevant app store or payment processor, and we will not receive or store your full card number. We will update this policy, and tell you, before the first payment is possible.

12Your rights

Whoever you are and wherever you live, you can ask us to: show you what we hold about you, correct it, delete it, give you a portable copy, or stop a particular use. Write to legal@runecast.ai from the address on your account. We answer within the time the applicable law allows (30 days in Canada, one month under the GDPR, 45 days in California), and we will never charge you or treat you worse for asking.

12.1 If you are in the EEA, the UK or Switzerland (GDPR)

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection — including objection to processing based on legitimate interests. Where we rely on consent (analytics, notifications, sensitive birth data), you can withdraw that consent at any time, without affecting what was done before. You may also lodge a complaint with your national supervisory authority.

12.2 If you are in Canada (PIPEDA) and Quebec (Law 25)

You may access and correct the personal information we hold about you, withdraw consent subject to legal and contractual limits, and be told what we collect and why. Under Quebec's Law 25 you also have a right to de-indexing or erasure in defined circumstances and a right to receive your computerized personal information in a structured, commonly used technological format. You may complain to the Office of the Privacy Commissioner of Canada or to the Commission d'accès à l'information du Québec.

12.3 If you are in California (CCPA/CPRA)

You may request disclosure of the categories and specific pieces of personal information we collect, request deletion, request correction, and opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined, and we do not use it for cross-context behavioural advertising. You have the right not to be discriminated against for exercising these rights, and you may designate an authorized agent to act for you.

We treat birth date, birth time and birth place as sensitive personal information and use them only to provide the app's core function.

12.4 Because we are a Panamanian company

Panama's personal-data law (Law 81 of 2019) applies to us as the company that holds your information. Under it you may ask for access to your data, correction, deletion, a portable copy, and you may object to a use you did not agree to. Those requests go to the same address as every other request in this section.

Where we are registered does not change what you are owed. If you are in the EEA, the United Kingdom, Switzerland, Canada or California, we honour the rights described above as they are written there, and we answer within the deadlines set by your law rather than the most convenient one.

13Children and age minimum

Runecast AI is intended for people aged 16 and over. We ask anyone under that age not to create an account, and the app is not directed at children.

We do not knowingly collect personal information from children below our age minimum. If we learn that an account belongs to someone below it, we delete the account and its data. A parent or guardian who believes their child has an account can write to legal@runecast.ai and we will act promptly.

14Cookies, storage and analytics consent

The web app uses ordinary browser storage to keep you signed in and to remember your settings, your language and your consent choice. Firebase App Check and reCAPTCHA Enterprise set the technical cookies they need to distinguish real users from automated abuse. These are strictly necessary for the app to work and are not used to profile you.

Analytics consent. On your first visit the app shows a short notice at the bottom of the screen with two buttons, Accept and Decline. Google Analytics 4 stays switched off until you press Accept; if you press Decline, or never answer, no analytics events are sent from that device and no analytics identifiers are set. Your choice is remembered on that device.

Changing your mind. You can withdraw or give consent at any time by writing to legal@runecast.ai, or by clearing this site's browser storage, which makes the notice appear again on your next visit.

15Security

We use Firebase Authentication for sign-in, App Check and reCAPTCHA Enterprise to keep non-app traffic away from our backend, authenticated-only API routes, encryption in transit, and server-side handling of all third-party keys so they are never exposed in the app. Access to production data is limited to the people who need it to run the service.

No online service can promise perfect security. If a breach affecting your personal information happens, we will notify you and the relevant authorities where the law requires it, and we will tell you plainly what happened.

16Changes to this policy

If we change this policy we will change the date at the top. For anything significant — a new category of data, a new provider, payments starting, a change in how consent works — we will tell you in the app or by email before it takes effect. Older versions are available on request.

17How to contact us

Privacy questions, access requests, deletion requests, complaints — one address, and a human reads it:

legal@runecast.ai

Pulse Licensing Corp.
PH Metric, Vía Brasil, #18-B
Panama City, Panama, Republic of Panama, 7182

See also our Terms & Conditions, which cover how the service itself works.