Legal

Privacy Policy

Last updated: April 26, 2026

Data we do NOT collect

• No name, email address, or phone number
• No location
• No contacts, photos, or camera access
• No microphone access
• No health data
• No advertising identifier
• No third-party analytics — no Firebase, no Segment, no Mixpanel, no Facebook SDK, nothing
• No ad networks — the app contains no advertising

Data we do collect, and why

Sign in with Apple (optional)

feelune does not require an account. Everything works anonymously. If you choose to sign in via Sign in with Apple from Settings → Account, we receive only what Apple shares with us:

• A stable Apple-issued user identifier (the same one Apple gives every app — it cannot be used to identify you across other apps that use Sign in with Apple)
• An email address — by default, an Apple private relay address (e.g. [email protected]) which forwards to your real address without exposing it. You can choose to share your real address instead, but we never ask for it.

We use these for one purpose only: to bind your local ratings to a stable identity so they can sync to other devices you sign into. We never use them for marketing, never sell them, never share them with anyone, and never use them to track you across apps or sites. You can sign out at any time from Settings → Account; signing out leaves the local ratings intact and stops further sync.

Anonymous ratings (optional, server-side)

When you rate a scene, your rating is saved locally to your device first — the app works fully offline and always will. If you've unlocked feelune and your device is online, we also push that rating to our server so it can contribute to the community average shown on other users' screens. Free-tier ratings never leave your device.

A single anonymous session id is used to identify your device. This id is randomly generated on first launch, has no link to your name, email, or any other personal detail, and cannot be used to identify you as an individual.

If you never want any rating to leave your device, turn on Airplane Mode or revoke network access — the app will continue to work identically.

Anonymous crash reports (optional, server-side)

If feelune crashes or hits an error while you're using it, the app can send a short description of what went wrong to our Supabase server. This helps us fix bugs we would otherwise never see.

Each report contains only:

• The anonymous session id described above (may be null before your first server session)
• The platform (iOS / Android / macOS)
• The app version + build number
• The operating-system version
• A short error message and Dart stack trace
• A boolean "fatal" flag

It does NOT contain anything you wrote, any scene you rated, any rating value, any file from your device, any IP address log, or any name / email / contact data.

Reports are stored in the same Supabase project (Tokyo region) as the rating data, and are write-only — even we can't read them from inside the app. We read them via our admin dashboard when debugging.

You can turn crash reporting off at any time from Settings → Diagnostics → Send anonymous crash reports. Turning it off also discards any reports the app had buffered offline.

Community pool submissions (free, opt-in per submission)

Anyone can write their own scenes — long-press a blank patch of sky on the Star Map, type a moment, score it on the 36 emotions. Authoring is a free baseline feature. Anything you write stays only on your device by default. If you choose to submit a scene to the community pool via the explicit submit button, we receive:

• The text of the scene you wrote
• The emotion scores you assigned to it
• The locale it was authored in
• A client-side UUID generated on your device — we have no way to map this back to you

We deliberately do not store any link between you (your session id, your Apple user id, your email) and the scene you submitted. The scene becomes anonymous the moment it leaves your device. This means we cannot — and will not — show anyone "scenes by user X." It also means you cannot delete a specific submitted scene by asking us, because we have no way to identify which scene was yours. Your local copy on your device, and your ability to discover it via the UUID stored on your device, are the only links.

All submitted scenes pass a manual review before becoming visible in other users' pools. Reviewers see only the text and the scores — no submitter data. Scenes that fail review are silently dropped.

Purchase records (Apple / Google, not us)

When you unlock feelune ($6.99 one-time), the transaction is handled entirely by Apple's App Store or Google Play. We receive no name, no email, no card information, no billing address — only a boolean: "this device owns the unlock."

Apple's and Google's own privacy policies apply to the transaction itself.
apple.com/legal/privacy  ·  policies.google.com/privacy

Data we do NOT sell, share, or transfer

Your ratings, aggregated or otherwise, are never:

• Sold to any third party
• Shared with advertisers
• Used to train machine-learning models
• Transferred beyond Supabase's own hosting (Tokyo region)

The only outside party with technical access to anonymous ratings is Supabase Inc. — our backend provider. See supabase.com/privacy for their commitments.

Available languages

feelune ships with the interface available in English, Simplified Chinese, Spanish, and Japanese. Each locale carries its own scene corpus and a slightly different emotion vocabulary — for example, the Chinese version includes 委屈, 心疼, 思念 and four other locale-specific emotions; Japanese includes 物の哀れ, 甘え, and 幽玄. Switching language in Settings changes which scenes and which emotions appear, but does not change anything about what data is collected — every clause above applies identically across every locale.

Apple's Privacy Manifest

Beginning with iOS 17, Apple requires every app to ship a machine-readable privacy manifest declaring exactly what it collects and which sensitive APIs it uses. feelune's manifest declares the six items listed above (Crash Data, Performance Data, Other User Content, Email Address, User ID, Purchase History) — and nothing else. It also declares zero tracking domains. The manifest lives at Runner.app/PrivacyInfo.xcprivacy in the binary you install from the App Store, and Apple's review process verifies it matches the Privacy Nutrition Labels we file. If we ever expand collection, the manifest changes first, and Apple won't let us ship a build that contradicts what we've told you here.

Children

feelune does not knowingly collect any data from children under 13. The app contains no chat feature.

Your rights

If you want to remove everything associated with your device:

1. Inside the app, open Settings → Delete my data — clears the local ratings, your personal constellation, and your device-side cache.
2. If you signed in with Apple, also open Settings → Account → Sign out. This unlinks your local data from your Apple-issued user id and stops further sync.
3. Or delete the app entirely.

Step 1 removes the on-device data. Step 2 stops the server from receiving any further uploads. Server-side, anonymous ratings persist as aggregated numbers that cannot be linked back to you as an individual without your Apple-issued user id; deleting that account-level link is what step 2 accomplishes.

If you would like the server to also delete the rows associated with your Apple-issued user id (a "right to erasure" request), email us at [email protected] from the email address you used to sign in (or include your Apple relay email so we can match it). We complete erasure within 30 days as required by GDPR / CCPA.

Contact

For any privacy question, reach us at
[email protected]
Response target: 7 business days.

Changes

We will update this page when the collection or handling of data changes. Material changes will also be surfaced in the app via a notice on the Star Map screen until dismissed.