← Back to Home

Privacy Policy

Last updated: July 2026

1. Introduction

Oak Entertainment Lab ("we") respects your privacy. This policy describes how we collect, use, and protect your data in the StarWritten app.

2. Data We Collect

2.1 Data Provided by You

  • Date of birth - For accurate astrological calculations (StarWritten is for ages 16+; the birth date you provide is verified against this minimum at signup)
  • Time of birth - To determine your rising sign (optional)
  • Place of birth - To calculate exact planetary positions
  • Email - For account sync and recovery
  • Username, profile photo and social profile - If you activate the social features (optional)
  • Photos you upload - Profile picture, and the reference photo for the Annual Report feature (the original Annual Report photo is automatically deleted 7 days after upload; only the treated version is kept for your report)

2.2 Audio & Microphone Permission

  • The microphone is used only when you actively start one of two features — we never record in the background:
  • Virtual tarot reader consultation: your recorded question is processed on the device and is not stored on our servers
  • Live consultations with human readers: voice messages and voice/video calls are transmitted to the reader and, in the case of voice messages, stored as part of the consultation conversation. Consultation messages and media are automatically deleted 30 days after the session ends (see Section 8)
  • You can revoke the microphone permission at any time in your device settings

2.3 Data Generated by Usage

  • History of readings and analyses performed
  • Live consultation history and chat messages exchanged with readers (retained for 30 days after each session — see Section 8)
  • Wallet credit balance and transaction records
  • App preferences (language, notifications)
  • Anonymous usage data for service improvement

2.4 Data We Do NOT Collect or Store

  • Real-time location
  • Device contacts
  • Browsing history outside the app
  • Full Credit Card Numbers, PIX Keys, or Banking Passwords (We absolutely never intercept, track, or save sensitive financial data in our proprietary databases)
  • Audio when the app is in the background

3. How We Use Your Data

3.1 To Provide the Service

  • Calculate your natal chart using precise astronomy and consolidated traditional astrology
  • Generate personalized predictions based on real planetary positions
  • Sync your data between devices

3.2 About Our Astrological Content

We exclusively use:

  • Precise astronomical ephemeris for planetary positions
  • Consolidated astrological traditions (we don't invent interpretations)
  • Recognized divinatory systems (Rider-Waite Tarot, traditional Búzios)
  • Automated language-personalization technology only to adapt the wording of interpretations to you — never to invent astrological concepts

4. Data Sharing

We DO NOT sell your data. We only share with the service providers required to operate the app:

  • Firebase / Google Cloud - Storage, authentication (including Google Sign-In), and analytics
  • Google Cloud language services - Automated language processing of readings (non-identifiable data)
  • Google AdMob - Ad display (uses anonymous advertising identifiers)
  • RevenueCat - Subscription management (purchase data only)
  • Stripe - Payment processing for live consultations, wallet credits, and reader payouts
  • Mercado Pago - Card payment processing for wallet credits (Brazil)
  • Resend - Transactional email delivery (account and service emails)
  • Authorities - Only if legally required

5. Payment Security & Financial Infrastructure

PCI Compliance & Tokenization: We use Stripe as our primary payment gateway for Live Consultations, Wallet Credits, and Reader Payouts. In Brazil, wallet credits can also be purchased via Mercado Pago (card payments). We rely entirely on these processors' cryptographic tokenization for all monetary flows.

Oak Entertainment Lab unequivocally DOES NOT save, track, intercept, or log your credit card numbers, PIX keys, or banking passwords.

All financial transactions are instantly encrypted and transmitted directly to the processor's servers. Stripe is globally audited as a PCI Service Provider Level 1 (the most stringent level of certification available in the payments industry), and Mercado Pago holds equivalent PCI-DSS certification.

6. General Data Security

We implement technical measures to protect your non-financial data:

  • Encryption in transit (HTTPS/TLS)
  • Secure storage in Firebase
  • Restricted data access

7. Your Rights (GDPR / LGPD)

You can exercise all of these directly in the app — no email required:

  • Access & Export: in Profile → Privacy, use "Download my data" to receive a complete machine-readable copy (JSON) of your account data, readings, consultations, and transactions
  • Correct incorrect information through your profile settings
  • Delete: in Profile → Privacy, request account deletion. Your account enters a 30-day grace period during which you can cancel the request by signing back in; after that it is permanently deleted (see Section 8)
  • Contest automated decisions (see Section 9) and lodge complaints by contacting us (Section 11)

8. Data Retention

  • We keep your data while your account is active
  • Account deletion: after the 30-day grace period, we permanently delete your profile and readings database, your authentication account, and your uploaded files (profile photo, reader images, soul portraits, palm photos, Annual Report images)
  • Live consultation messages and media (text, audio, images) are automatically deleted 30 days after each session ends. A minimal non-conversational record (session status, duration, cost, and ratings) is retained for financial bookkeeping and fraud prevention
  • Annual Report original photo is automatically deleted 7 days after upload; only the treated version used by the feature is kept
  • Financial transaction records (purchases, payouts, referral cashback) are retained as required by tax and anti-fraud law, even after account deletion. Referral cashback is held in escrow for 45 days before becoming withdrawable, and reader earnings follow an escrow of 15–45 days, as described in the Terms of Service
  • Anonymous aggregated data may be kept indefinitely

9. Automated Processing & Fraud Prevention

To keep the platform safe we use automated systems, always with human oversight:

  • Content moderation: posts and public content pass through automated text filters; profile images may be reviewed by automated image-analysis systems
  • Financial anti-fraud: withdrawal and referral-cashback requests pass through automated review before payout. These systems may process account age, purchase and chargeback history, device signals, and hashed technical identifiers (IP, payment fingerprints) to detect abuse
  • Your rights: automated decisions with significant effect (e.g., a blocked payout) can be contested — contact us via Section 11 and a human will review the case

10. Minors

StarWritten is intended for users aged 16 or older. The app verifies the date of birth at signup (on the device and on our servers) and does not accept profiles under 16. We do not knowingly collect data from children; if you believe a minor is using the app, contact us and we will delete the account.

11. Changes

We will notify you of significant changes to this policy through the app.

12. Contact

For privacy questions:

© 2026 Oak Entertainment Lab. All rights reserved.