Privacy Policy
1.Introduction
This Privacy Policy describes how Araucaria sp. z o.o. ("Transit Signals", "we", "us", or "our") collects, uses, stores, and shares personal information when you use the Transit Signals mobile application, website, or any related services (collectively, "the Service").
It explains how we process your personal data and the legal bases we rely on. Where processing is based on your consent, you may withdraw that consent at any time. This Policy should be read together with our Terms of Service.
2.Who We Are
Transit Signals is operated by Araucaria sp. z o.o., a Polish limited liability company (spółka z ograniczoną odpowiedzialnością), registered in Warsaw, Poland (KRS: 0001258468 · NIP: 9512653744 · REGON: 545425772). For privacy inquiries, contact hello@transitsignals.com.
Data Protection Officer (DPO): We have not appointed a DPO because we do not currently believe we are legally required to do so. If this changes, we will update this Policy.
3.Information We Collect
Please do not submit health, mental health, financial, legal, sexual, religious, political, or other sensitive information into journal entries, prompts, comments, or questions unless strictly necessary for the feature you are using. See Section 4.
3.1 Information you provide directly: display name; email address; date of birth; time of birth (for natal chart calculations); place of birth (city, country, coordinates); profile photo or avatar (optional); gender or pronouns (optional); account preferences; payment information (processed via Apple App Store or Google Play; we do not store credit card numbers); content you submit (journal entries, questions, comments, profile information); and information you provide when contacting support.
3.2 Information collected automatically: device information (model, OS, language); app usage data (features used, interactions); IP address; crash and performance data; push notification tokens; subscription status; and app version.
3.3 Information from third parties: sign-in via Apple ID or Google Account (if you choose this) — we receive only your name and email. If you sign in with Apple and choose "Hide My Email", we receive an anonymized Apple private-relay address (ending in @privaterelay.appleid.com) that forwards messages to you — not your real email address. We also receive analytics and event data from the Apple App Store and Google Play.
3.4 Information we do NOT intentionally collect: government ID numbers; health or medical records; precise real-time location (we only use your manually entered birthplace); phone contacts; and camera-roll photos (unless you upload a profile photo).
3.5 Note on birth and astrological data. Your birth date, time, and place are used to generate astrological charts and personalized entertainment content. We treat this as personal data when linked to your account. Although birth and astrological data are not necessarily special category data under GDPR, they may be sensitive in context, so we use this data only to provide, personalize, secure, and improve the Service. If content you submit reveals special category data (e.g., health, religious or philosophical beliefs, sexual orientation, or political opinions), we process it only as described in Section 6.
4.Data Summary Table
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, account ID | Account creation, login, support | Contract | Until you delete your account |
| Birth date/time/place, chart | Chart generation, personalization | Contract (consent where required) | Until you delete your account |
| Journal entries, questions, chat inputs | User-requested features (incl. AI-assisted content) | Contract; explicit consent for special category data (Art. 9(2)(a)) | Until you delete your account |
| IP address | Security and standard server logs | Legitimate interest | Limited period (standard server logs) |
| Push notification token | Deliver notifications you enable | Consent | Until you disable notifications or delete your account |
| Device & usage data, analytics (if/when enabled) | Improve and secure the app | Legitimate interest or consent | Limited period |
| Crash/performance logs | Stability | Legitimate interest | Limited period |
| Payment records | Tax/accounting | Legal obligation | 5 years (Polish tax law) |
5.How We Use Your Information
To provide the Service (generate charts, transit reports, personalized horoscopes, tarot and oracle content; process subscriptions; maintain your account); to improve the Service (usage analysis, bug fixing, new features); and to communicate with you (service notifications, opted-in push notifications, support). We do not currently send marketing emails; if we introduce newsletters or promotions, we will only send them with your consent and you can opt out at any time. We also use data for legal and security purposes (fraud prevention, enforcing our Terms, legal compliance, defending our rights).
6.Legal Basis for Processing (GDPR)
For users in the EEA, the UK, and Poland we rely on: Consent (Art. 6(1)(a)) for marketing, optional features, and any special category data; Contract performance (Art. 6(1)(b)) to provide the Service; Legitimate interests (Art. 6(1)(f)) for improvement, security, and fraud prevention; and Legal obligation (Art. 6(1)(c)) for tax records and lawful requests.
Special category data (Art. 9 GDPR). Where content you choose to submit (for example journal entries, questions, or chat messages) reveals special category data — such as health or mental health, sex life or sexual orientation, religious or philosophical beliefs, or political opinions — we process it only on the basis of your explicit consent (Art. 9(2)(a)), which you may withdraw at any time, or another applicable condition under Art. 9(2). We do not ask you to provide such data, and we recommend that you do not.
7.How We Share Your Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share only with:
7.1 Service providers (processors). We share personal data only with vendors who process it on our behalf, under data processing agreements (including our providers' standard data processing terms) consistent with GDPR Art. 28, including:
- Cloud hosting / infrastructure — Railway (servers may be located in the United States).
- AI / LLM provider — Anthropic, to generate and personalize Oracle, Tarot, Guide (chat), horoscope, and interpretation content. The prompts, questions, chat messages, journal entries, and birth/astrological data you submit to these features are transmitted to and processed by this provider solely to generate your response. See Sections 9 and 16.
- Payment and subscription — Apple App Store and Google Play (we do not receive your card number).
- Analytics and product-event data — currently limited; if we enable third-party analytics we will update this Policy and our app-store disclosures.
- Push notification delivery — platform and delivery services (e.g., Expo, Apple Push Notification service, Google FCM).
- Email and customer support tools.
These processors receive only the data necessary for their function. A current list of our processors and subprocessors is available on request at hello@transitsignals.com.
7.2 Legal requirements: court orders, lawful government requests, protection of rights/safety, and fraud or security investigations.
7.3 Business transfers: in a merger, acquisition, or asset sale (you will be notified).
7.4 With your explicit consent: any other sharing.
8.International Data Transfers
Your data may be processed outside the EEA, including the United States, where some of our providers operate — including our AI/LLM provider and cloud hosting. For such transfers we use safeguards such as Standard Contractual Clauses, adequacy decisions, or approved transfer frameworks (e.g., the EU-U.S. Data Privacy Framework). Request details at hello@transitsignals.com.
9.Data Retention
We keep personal data only as long as necessary to provide the Service and for legitimate or legal purposes. You can delete your account at any time in the app (Settings); when you do, we delete your personal data within a reasonable period, except information we must keep by law (for example, payment records — 5 years under Polish tax law) or limited security and backup logs kept for a short time. We do not currently run automated deletion of inactive accounts.
Content you submit to AI-assisted features (prompts, questions, journal entries, chat messages) may also be retained briefly by our AI/LLM provider for security and abuse-monitoring purposes, in accordance with its data processing agreement, after which it is deleted. We do not permit it to be used to train the provider's models (see Section 16). Where we keep statistics, we keep them in an aggregated or de-identified form.
10.Your Privacy Rights
All users: access, correct, delete your account/data, and withdraw consent.
EEA/UK/Poland (GDPR, UK GDPR, the Polish Personal Data Protection Act): access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), not to be subject to solely automated decision-making (22), and to lodge a complaint with your supervisory authority.
California (CCPA/CPRA): know, delete, correct, opt out of sale (we don't sell), limit use of sensitive personal information, and non-discrimination.
Other U.S. states (e.g., Virginia, Colorado, Connecticut, and similar): depending on your state, you may have rights to access, correct, delete, and opt out of certain processing, and — where applicable — to appeal our decision on your privacy request. If we deny your request, we will inform you how to appeal.
To exercise: you can delete your account in the app (Settings), or email hello@transitsignals.com for any other request (access, correction, etc.). We respond within 30 days or as required by law.
11.Children's Privacy
The Service is intended for users who are at least 18 years old. We do not knowingly collect personal data from users under 18. If we become aware that we have, we will take reasonable steps to delete it and terminate the account, unless legally required to retain certain information. Parents or guardians who believe a child has provided data should contact hello@transitsignals.com.
12.Security
We use reasonable technical and organizational measures appropriate to our size and the risk (GDPR Art. 32), including encryption in transit (HTTPS/TLS), access controls, and authentication. No system is 100% secure, and we cannot guarantee absolute security.
If a personal data breach occurs, we will notify the competent supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych — UODO) where required by law, without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.
13.Cookies and Tracking
Our app and website use only essential cookies and similar technologies needed to function, which do not require consent. We do not currently use analytics or marketing cookies. If we introduce non-essential cookies or analytics in future, we will use them only with your consent, via a cookie banner (web) or the App Tracking Transparency prompt (iOS). We follow UODO's cookie guidance for users in Poland.
On iOS, where we or our tools would access the device advertising identifier (IDFA) for tracking as defined by Apple, we ask first through Apple's App Tracking Transparency (ATT) prompt, and only proceed if you allow it.
14.App Store / Google Play Privacy Disclosures
The information we provide in the Apple App Store privacy labels and the Google Play Data Safety section is intended to be consistent with this Privacy Policy. If we integrate third-party SDKs, analytics, advertising, crash reporting, or payment tools, their data practices will be reflected in our app-store disclosures where required, including whether data is linked to you or used for tracking.
15.Third-Party Links
The Service may link to third-party websites or services. We are not responsible for their privacy practices; review their policies before providing personal information.
16.Automated and AI-Assisted Content
The Service may use automated systems, algorithms, and artificial intelligence to generate, assist, select, rank, or personalize horoscopes, tarot readings, oracle messages, astrological interpretations, notifications, and other entertainment content. These systems may use your birth data, astrological profile, preferences, app interactions, subscription status, and content you choose to submit.
This content is generated using third-party AI/LLM providers acting as our processors (see Section 7); the inputs you submit may be transmitted to and processed by them to produce your content. We do not permit our AI providers to use your content to train their models — your inputs are processed only to generate your response.
We do not use automated processing to make decisions about your legal rights, employment, credit, housing, insurance, healthcare, eligibility for essential services, or any other matter that produces legal effects or similarly significantly affects you.
The content generated or personalized by the Service is for entertainment and reflection only. It is not medical, legal, financial, psychological, relationship, career, or other professional advice. You may contact us if you have concerns about automated or AI-assisted content.
17.Sensitive Data — Reminder
Please do not provide sensitive information the Service does not need, including health or medical records, financial account details (beyond payment processing), government ID numbers, information about other people without their consent, or children's data. If you accidentally share such information, contact us to delete it.
18.Changes to This Policy
We may update this Policy. Material changes will be notified via in-app notification at least 30 days before they take effect, email to your registered address, and a notice on our website. The "Last updated" date reflects the most recent revision. Continued use of the Service after the updated Policy takes effect means you acknowledge it. Where required by law, we will ask for your consent.
19.Contact Us
Araucaria sp. z o.o. — Address: ul. Małej Łąki 8/23, 02-793 Warszawa, Poland — KRS: 0001258468 · NIP: 9512653744 · REGON: 545425772 — Email: hello@transitsignals.com
Supervisory authority (Poland): Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es. Users in other EU member states may also complain to their local data protection authority.