Legal

Privacy Policy

Last updated: June 6, 2026

feelune is built around a single promise: what you feel is yours.
This document explains, in plain language, exactly what data the app collects, what happens to it, and what never leaves your device.

Data we do NOT collect

Data we do collect, and why

No account, ever

feelune does not require — and does not ask for — an account. There is no sign-up, no sign-in, no email collection. Everything works anonymously from the first launch. If a future release adds an optional sign-in, this policy will be updated before that release ships and you will be told what changes.

Anonymous ratings (optional, server-side)

When you rate a scene, your rating is saved locally to your device first — the app works fully offline and always will. If you've unlocked feelune and your device is online, we also push that rating to our server so it can contribute to the community average shown on other users' screens. Free-tier ratings never leave your device.

A single anonymous session id is used to identify your device. This id is randomly generated on first launch, has no link to your name, email, or any other personal detail, and cannot be used to identify you as an individual.

The only data the server stores per user:
A random session identifier · The scene ids you've rated · Emotion scores (1–10) · The locale the rating was made in · Timestamps.
No IP address logs. No device fingerprints.

If you never want any rating to leave your device, turn on Airplane Mode or revoke network access — the app will continue to work identically.

Anonymous crash reports (optional, server-side)

If feelune crashes or hits an error while you're using it, the app can send a short description of what went wrong to our Supabase server. This helps us fix bugs we would otherwise never see.

Each report contains only:

It does NOT contain anything you wrote, any scene you rated, any rating value, any file from your device, any IP address log, or any name / email / contact data.

Reports are stored in the same Supabase project (Tokyo region) as the rating data, and are write-only — even we can't read them from inside the app. We read them via our admin dashboard when debugging.

You can turn crash reporting off at any time from Settings → Diagnostics → Send anonymous crash reports. Turning it off also discards any reports the app had buffered offline.

Community pool submissions (free, opt-in per submission)

Anyone can write their own scenes — long-press a blank patch of sky on the Star Map, type a moment, score it on the 36 emotions. Authoring is a free baseline feature. Anything you write stays only on your device by default. If you choose to submit a scene to the community pool via the explicit submit button, we receive:

We deliberately do not store any link between you (your session id, your Apple user id, your email) and the scene you submitted. The scene becomes anonymous the moment it leaves your device. This means we cannot — and will not — show anyone "scenes by user X." It also means you cannot delete a specific submitted scene by asking us, because we have no way to identify which scene was yours. Your local copy on your device, and your ability to discover it via the UUID stored on your device, are the only links.

All submitted scenes pass a manual review before becoming visible in other users' pools. Reviewers see only the text and the scores — no submitter data. Scenes that fail review are silently dropped.

Purchase records (Apple / Google, not us)

When you unlock feelune ($6.99 one-time), the transaction is handled entirely by Apple's App Store or Google Play. We receive no name, no email, no card information, no billing address — only a boolean: "this device owns the unlock."

Apple's and Google's own privacy policies apply to the transaction itself.
apple.com/legal/privacy  ·  policies.google.com/privacy

Data we do NOT sell, share, or transfer

Your ratings, aggregated or otherwise, are never:

The only outside party with technical access to anonymous ratings is Supabase Inc. — our backend provider. See supabase.com/privacy for their commitments.

Available languages

feelune ships with the interface available in English, Simplified Chinese, Spanish, and Japanese. Each locale carries its own scene corpus and a slightly different emotion vocabulary — for example, the Chinese version includes 委屈, 心疼, 思念 and four other locale-specific emotions; Japanese includes 物の哀れ, 甘え, and 幽玄. Switching language in Settings changes which scenes and which emotions appear, but does not change anything about what data is collected — every clause above applies identically across every locale.

Apple's Privacy Manifest

Beginning with iOS 17, Apple requires every app to ship a machine-readable privacy manifest declaring exactly what it collects and which sensitive APIs it uses. feelune's manifest declares the six items listed above (Crash Data, Performance Data, Other User Content, Email Address, User ID, Purchase History) — and nothing else. It also declares zero tracking domains. The manifest lives at Runner.app/PrivacyInfo.xcprivacy in the binary you install from the App Store, and Apple's review process verifies it matches the Privacy Nutrition Labels we file. If we ever expand collection, the manifest changes first, and Apple won't let us ship a build that contradicts what we've told you here.

Children

feelune does not knowingly collect any data from children under 13. The app contains no chat feature.

Your rights

If you want to remove everything associated with your device:

  1. Inside the app, open Settings → Delete my data — clears the local ratings, your personal constellation, and your device-side cache.
  2. Or delete the app entirely. iOS removes the device-side cache when the app is removed.

Server-side, anonymous ratings persist as aggregated community numbers that cannot be linked back to you as an individual — there is no account-level identifier to delete, because we never stored one. Deleting the app on your device is sufficient to sever your connection to any future server activity.

If you would like the server to also delete the specific rows associated with your device (a "right to erasure" request), email us at [email protected] and we will work with you to identify and remove them — typically by matching the approximate dates and locale of your ratings. We complete erasure within 30 days as required by GDPR / CCPA.

Contact

For any privacy question, reach us at
[email protected]
Response target: 7 business days.

Changes

We will update this page when the collection or handling of data changes. Material changes will also be surfaced in the app via a notice on the Star Map screen until dismissed.