Privacy Policy
Effective Date: April 27, 2026
This Privacy Policy explains how Zora ("Zora," "we," "our," or "us") collects, uses, shares, and protects information when you use the Zora mobile application (the "App") and the website at ask-zora.com (together, the "Service"). By using the Service, you agree to the practices described in this Policy.
1. Who we are
Zora is an AI powered astrology application that lets you chat with a virtual astrologer trained on your birth data, receive daily personalized cards, explore guardian angel guidance, run compatibility readings, and analyze palm photos. The Service is operated by the publisher of the Zora app. If you have privacy questions, contact us at contact@ask-zora.com.
2. Information we collect
2.1 Information you provide directly
- Account information. When you create an account we collect your email address and a password (handled by our authentication provider, Supabase).
- Birth data. Your full name (or chosen first name), date of birth, time of birth, and place of birth. This data is required for accurate astrological calculations.
- Profile preferences. Notification preferences, premium subscription status, daily card history, and chat preferences.
- Chat content. Messages you send to the Zora AI astrologer. These messages are processed by our AI provider to generate responses.
- Palm photos. Photos of your palm that you submit for palmistry readings. Photos are sent to our AI provider for analysis. We do not retain palm photos after the reading is complete unless you choose to save the result to your history.
- Compatibility data. Birth data of people you choose to run a compatibility reading with. This data is provided by you, not pulled from your contacts automatically.
2.2 Information collected automatically
- Device information. Device type, operating system version, app version, language, and time zone.
- Push notification tokens. If you enable notifications, we store a push token to deliver daily insights and reminders.
- Usage events. Basic events such as screen views, feature usage, and crash reports to improve the Service.
2.3 Permissions we may request
- Camera. To capture a palm photo for palmistry. We never access your camera in the background.
- Photo library. So you can select an existing palm picture instead of taking one.
- Contacts. Only if you choose to run a compatibility reading with someone in your address book. We do not upload your contacts list to our servers.
- Notifications. To send you daily astrological insights, reminders, and important account messages.
3. How we use information
We use the information we collect to:
- Compute your natal chart and generate personalized astrological readings.
- Power the AI chat experience with Zora, your virtual astrologer.
- Provide daily personalized cards, palmistry analyses, and compatibility readings.
- Authenticate you and secure your account.
- Send notifications you have opted into.
- Process subscriptions and manage premium access.
- Improve the Service through aggregated, anonymous analytics.
- Respond to support requests and enforce our Terms of Service.
- Comply with legal obligations.
We do not use your personal information for advertising and we do not sell your personal information.
4. How we share information
We share information only with the service providers we need to operate the App. Each provider is contractually bound to protect your data.
| Provider | Purpose | Data shared |
|---|
| Supabase | Authentication, database, storage | Email, profile, birth data, chat history, preferences |
| Anthropic (Claude API) | AI chat responses, palm analysis | Chat messages, palm photos (during analysis only) |
| Apple App Store / Google Play | Subscription billing | Subscription identifiers, transaction data |
| RevenueCat (when enabled) | Subscription management | Anonymous user identifier, subscription status |
| Expo | App updates and push notifications | Device push token, app version |
| Netlify | Website hosting | Website request logs (no app user data) |
We may also disclose information when required by law, to protect our rights, to investigate fraud, or in connection with a corporate transaction (such as a merger or acquisition).
5. Data retention
We retain your information for as long as your account is active and as needed to provide the Service. Specifically:
- Account and birth data: retained while your account exists.
- Chat history: retained for up to 12 months unless you delete it earlier.
- Palm photos: not retained after analysis unless saved to history by you.
- Backups: may persist in encrypted backups for up to 90 days after deletion.
You can request full deletion of your data at any time by emailing contact@ask-zora.com or by deleting your account from inside the App.
6. Your rights and choices
Depending on where you live, you may have the following rights:
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate information.
- Deletion: ask us to delete your personal information.
- Portability: request your data in a machine readable format.
- Opt out: stop receiving notifications or marketing communications at any time.
To exercise any of these rights, contact contact@ask-zora.com. We respond within 30 days.
7. California residents (CCPA)
If you are a California resident, the California Consumer Privacy Act gives you additional rights:
- The right to know what personal information we collect, use, and disclose.
- The right to delete personal information we have collected from you.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of personal information. We do not sell personal information.
- The right not to be discriminated against for exercising your privacy rights.
To submit a CCPA request, email contact@ask-zora.com with the subject line "CCPA Request."
8. Children's privacy
Zora is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@ask-zora.com and we will delete the information promptly.
9. Security
We use industry standard measures to protect your information, including encryption in transit (TLS), encryption at rest, secure authentication, and access controls. No system is perfectly secure, and we cannot guarantee the security of information transmitted to or from the Service.
10. International users
The Service is operated from the United States. By using the Service, you consent to the transfer of your information to the United States, where data protection laws may differ from those in your country.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page reflects the latest version. If we make material changes, we will notify you in the App or by email before the changes take effect.
For privacy questions, requests, or complaints, contact us at: