This page is a translation of the original in Portuguese.
If there is any difference between the two versions, the Portuguese version prevails.
This policy explains, in plain language, which personal data Lilah Raj uses, why, and what your rights are. It applies to the Lilah Raj app and to the lilahraj.com website.
1. Who we are
In short: the company responsible for your data is Lilah Raj Ltda., and you can reach us at suporte@lilahraj.com.
The controller of the personal data processed through the app is Lilah Raj Ltda. For any privacy matter — questions, requests or complaints — the channel is suporte@lilahraj.com. It is also the channel for data protection matters: it handles the rights requests described in section 9 (access, correction, deletion, portability, withdrawal) and replies within 15 days.
2. What we collect
In short: you give us your birth details, your first name if you wish, and your account email. On iPhone, the app also tells Meta about the install and app opens, so we can measure our ads; with your permission, together with the advertising identifier and your purchases.
Data you give us:
- Date, time and city of birth (with the coordinates and time zone of that place) — provided by you when you create your chart.
- Your first name — used for the personalized greeting and, when you create an account, in our communications with you. If you sign in with Apple or Google and choose not to share your name, the app works without it.
- Email — the one for your account, which you provide when you sign in with an access code, or which we receive from Apple or Google when you sign in with them (if you choose to hide your email with Apple, we receive Apple's forwarding address).
Data collected automatically:
- Languages, country and time zone of the device: the languages set on your phone, in order of preference, the region chosen in its settings and the time zone it is in. This is not your location; these are system settings. The time zone is used to deliver your daily reading and reminder at your local time; the languages and country, so that we know where and in which languages the app is opened and can decide on our next translations. When the app has more than one language, the three together will also be used to suggest which language the app uses with you. The list of languages leaves your phone the first time you open the app, before you sign in, and again with each new version, linked to a code for the app's installation. Once you sign in, the signal is linked to your account and updated when it changes, and the first language and the country are sent along with each usage event. When you delete your account, this signal is not deleted: it remains stored, without your name or your email, but linked to the same internal code as your readings.
- App usage events (for example, which screens you visited and whether you completed a purchase) — used in aggregate to improve the product. In our systems and in Google's measurement service (Firebase Analytics), these events are linked to a pseudonymous identifier of your account, never to your name or email, and with no advertising identifiers from the device.
- Crash reports — when the app crashes or runs into an error, Google's crash reporting service (Firebase Crashlytics) receives what we need to fix it: the device model and operating system, the app version, the point in the code where the failure happened and the same pseudonymous account identifier. Never the content of your readings or your birth details.
- Measurement of our ads, on iPhone only: Lilah Raj advertises on Facebook and Instagram and uses Meta's measurement tool (the Meta SDK) to learn which ads bring the people who install the app. On the welcome screen, before you create your account or sign in, the iPhone asks once, in a prompt from Apple itself, whether you allow tracking. If you allow it, Meta receives the install and each app open together with the device's advertising identifier, and our subscription processor (RevenueCat) tells Meta about the start of the free trial, the subscription and renewals, with the amount and the pseudonymous identifier of your account. If you decline, the app works the same: the install and app opens still go to Meta, without the advertising identifier and with an anonymous code that Meta's tool creates in the app, and nothing about your purchases goes to Meta. We use these events only to add up campaign results. If your iPhone does not let apps ask to track, the prompt does not appear and it counts as declining, with or without an account. Apart from that case, if you were already signed in when you updated the app, the prompt does not appear while you stay signed in, and until then your install and app opens do not go to Meta. On every iPhone, with or without permission, Meta's tool sends once a day whether you allowed tracking, with technical data about the device (such as the model and the system version) and no advertising identifier, and, if the app crashes inside it, a technical crash report; and the app registers with Apple's own anonymous ad measurement. You can change your answer at any time on your iPhone, in Settings > Privacy & Security > Tracking, and it applies from the next time you open the app. On Android, none of this happens.
- Technical identifiers for subscriptions, on iPhone: from every iPhone signed in to the app, our subscription processor (RevenueCat) also receives the IP address and the identifier that Apple gives our app on that device; for people who allowed tracking, also the advertising identifier and the anonymous code from Meta's tool, to link the trial and the subscription to the ad.
- Notification token — if you allow notifications, we keep the technical identifier needed to deliver them.
- Basic technical data inherent to the operation of any online service — access logs and, on the website, strictly technical cookies (no advertising or analytics cookies).
Data we receive from third parties:
- The status of your purchases and subscriptions, as reported by the app store and by our subscription processor. Payments are handled by specialized processors; we do not store your card number.
3. What we use it for
In short: we use your data to calculate your chart, generate your readings and make the app work. On iPhone, also to measure our ads.
- Calculating your chart — the date, time and place of birth are the raw material of the astrological calculation.
- Generating your readings — the result of the calculation feeds the generation of the personalized texts by artificial intelligence.
- Authenticating you — your email is used to sign in with an access code and to recover your access on another device.
- Delivering notifications — if you allow them.
- Processing charges and granting access — knowing what you bought so that we can unlock what is yours.
- Improving the product — usage events show us, in aggregate, what works and what does not.
- Measuring our ads: learning, on iPhone, which Facebook and Instagram ads bring the people who install the app and the people who subscribe (section 2).
Apart from measuring our ads, we do not use your data for advertising, and we never sell data. What Meta receives for ad measurement it may also use in its own advertising system, under Meta's own privacy policy (section 6).
4. Legal bases
In short: birth details with your consent; email and purchases because they are necessary for the service; improvements and the aggregated ad counts on the basis of our legitimate interest; measurement with the advertising identifier, on iPhone, with your permission.
- Consent: for your birth details and for sending the chart calculated from them to the artificial intelligence providers that write the readings, obtained clearly and prominently, in the app, before you create your chart. As a precaution, we treat birth data with the care due to sensitive data. Ad measurement with the advertising identifier is also based on consent, given in Apple's prompt on iPhone (section 2).
- Performance of a contract — for your sign-in email and purchase data: without them, the paid service cannot be provided.
- Legitimate interest: for usage events and the security of the service, always in a proportionate way and without intruding on your private life, and for aggregated campaign counts, without the advertising identifier, of people who declined tracking.
You can withdraw your consent at any time (section 9).
5. Artificial intelligence in the product
In short: your readings are generated by AI from your chart — the voice is ours; the chart is yours.
The texts of the readings are generated by artificial intelligence text generation providers, based on the result of the calculation of your chart. The data sent to these providers is what is needed to generate your reading and is not used to train their models — our suppliers are prohibited from doing so by contract.
6. Who we share it with
In short: with the processors that make the app work and, on iPhone, with Meta, to measure our ads. We never sell data.
We share data with processors that handle it on our behalf and under contract:
- Cloud infrastructure providers — host our servers and database.
- Artificial intelligence text generation providers — generate the readings (section 5).
- Payment and subscription processors — manage purchases, renewals and refunds.
- App distribution platforms (stores) — process the payment itself and the notifications.
- Usage measurement and crash reporting services (Google — Firebase Analytics and Firebase Crashlytics) — receive the usage events and crash reports described in section 2, with a pseudonymous identifier and with no advertising identifiers. We have configured these services not to use the data for ad personalization.
And with Meta, the company behind Facebook and Instagram, for the ad measurement on iPhone described in section 2: through Meta's tool in the app and, only for people who allowed tracking, through our subscription processor (RevenueCat). The Meta Business Tools Terms require Meta to protect the confidentiality and security of this data. For measurement, Meta acts as our processor; for its own advertising system, it uses this data on its own behalf, under its own privacy policy, at facebook.com/privacy/policy.
In addition, we may share data if the law requires it (a court order or a request from a competent authority). We never sell or rent personal data.
7. International transfer
In short: our servers are outside Brazil, with contractual safeguards.
Our servers and the providers listed in section 6 process data outside Brazil (United States), with the safeguards of art. 33 of the LGPD (Brazil's General Data Protection Law): for our cloud infrastructure provider, the Brazilian standard contractual clauses (Resolution CD/ANPD No. 19/2024 of the ANPD, Brazil's National Data Protection Authority) made available by the provider itself; for the other processors, your consent (art. 33, II) and the contractual data protection commitments (DPAs) signed with each of them.
8. Retention and deletion
In short: we keep your data for as long as your account exists; you can ask for it to be deleted whenever you want.
We keep your data for as long as your session or account exists, because it is what supports your chart and your readings. When you ask for deletion (section 9) or close your account, we remove your personal data from our systems within 30 days, keeping only what the law requires us to keep (for example, tax records of purchases) and minimal records of the deletion itself.
Measurement and crash data: usage events stay in the measurement service for up to 14 months and crash reports for up to 90 days; after that, they are deleted or aggregated without an identifier. The events that go to Meta for ad measurement are kept by Meta for up to two years, under Meta's terms.
Access logs: as required by Brazil's Internet Civil Framework (Marco Civil da Internet, Law No. 12,965/2014, art. 15), we keep the app's access logs (IP address, date and time) for at least 6 months, in a controlled and secure environment.
9. Your rights
In short: the data is yours — you can see it, correct it, take it with you and delete it.
The LGPD (art. 18) guarantees you, among others, the rights of:
- Access — knowing what data we hold about you;
- Correction — correcting incomplete or inaccurate data. Please note: as a measure of service integrity and fraud prevention, requests to change birth details are reviewed case by case by our support team, which replies within 15 days.
- Deletion — deleting your personal data (section 8);
- Portability — receiving your data in a structured format;
- Information — knowing who we share your data with;
- Withdrawal of consent: at any time, which may make it impossible to use the app (without birth details there is no chart). To remove the advertising identifier and your purchases from ad measurement, just turn Lilah off in Settings > Privacy & Security > Tracking on your iPhone: it applies from the next time you open the app, and the app stays the same. The aggregated count, without the advertising identifier, continues while the app is on your iPhone (section 2).
To exercise any right: suporte@lilahraj.com. We reply within the time limits set by law.
10. Security
In short: we protect your data with encryption and good practices — including an irreversible "stamp" in place of your birth details wherever possible.
- All communication between the app and the servers is encrypted in transit.
- Where the system only needs to check (and not read) your birth details, we use an irreversible hash — a mathematical stamp that does not allow the original data to be reconstructed.
- Infrastructure credentials and secrets are managed in a vault, outside the code.
- Access tokens are stored in protected form (only their cryptographic digest).
11. Minors
In short: Lilah Raj is not for children.
Lilah Raj is intended for people aged 18 and over. We do not knowingly collect data from children or teenagers; if we find that this has happened, we will delete the data.
12. Changes to this policy
In short: if anything changes, you will know.
This policy is versioned and dated. Relevant changes will be announced in the app or on the website before they take effect.
13. Contact
For any matter related to this policy: suporte@lilahraj.com.