Privacy Policy
ELEVEN11 (“the app”, “we”) is an iOS application that delivers a personalised astrology experience — natal chart, daily horoscope, conversational Oracle, synastry compatibility, and a guided manifestation practice. This Privacy Policy explains what data we collect, why we collect it, how we store it, and the rights you have over it.
What we collect
Account data
- Email address, used to sign in and recover your account.
- Display name and optional username, shown inside the app.
- Subscription status (free / Plus), used to gate Plus features.
- Device push token, used to deliver notifications you have opted in to.
- Locale and time zone, used to render localised dates and horoscope phases.
Birth data (sensitive)
- Birth date, birth time, and birth city.
- Birth date and time are encrypted at rest using PostgreSQL pgcrypto before being written to our database. They are returned in plaintext only to the chart’s owner, on request, so you can review and edit your own data.
- We do not share birth data with third parties. We do not use birth data for advertising or AI training. We do not log birth date or time in any operational log or analytics event.
Practice and engagement
- Intentions you set, sessions you complete, and notes you record inside the app.
- Oracle conversation history (so the assistant can refer back to prior questions across sessions). You can delete sessions at any time from the Oracle screen.
- Synastry results computed between charts you create or are explicitly matched with through the Discover feature.
- Chat messages you send to matched users through the Discover feature.
Data you enter for someone else
- The compatibility-check feature lets you enter another person’s birth details (name, birth date, birth time, birth place) to compute a synastry result. That person’s name is stored only as a free-text label you supply — never verified against, or linked to, any real identity or account.
- This data is visible only to you. It is not shown to the other person, not shared with any other user, and used solely to compute the compatibility result you requested.
- It is subject to the same rights as your own data: you can edit or delete it at any time, and it is permanently deleted — along with any synastry results derived from it — when you delete the saved chart or your account.
Diagnostic and usage
- Crash reports via Sentry — stack traces, app version, OS version. Configured to never include personal identifiers.
- Product analytics via PostHog, only if you switch on Share usage analytics in Settings → Privacy & Data. It is off unless you turn it on. It records which screens you open and which features you use, with technical details such as whether a chart has a known birth time, a transit's planet and aspect, or a compatibility score. Events are linked to a random account ID, never to your name, email, or birth date, time or place. Switch it off at any time and no further events are sent.
Camera and microphone
- The Mirror Mode practice uses the front-facing camera so you can see yourself while repeating affirmations. No frames are captured, stored, or transmitted off-device.
- The microphone permission is requested only if you opt in to recording short voice affirmations. Audio stays on your device.
Profile photo (optional)
If you add a profile photo, we keep a resized copy (up to 1024 pixels) and a small thumbnail in private storage with Supabase in the EU, after removing location and other details embedded in the file. Photos are checked before anyone else can see them. We may use automated tools for a first check; a person reviews any photo the automated check is unsure about and a random sample of the rest, and can take any photo down at any time. Until a photo is approved, and if it isn't, others see an illustrated sky instead. An approved photo is shown only to people you have matched with. If a photo is not approved, replaced or removed, we delete the file. We keep a one-way fingerprint of a photo we did not approve, so the identical file can't be uploaded again, until your account is deleted. We keep a record of how your photos were reviewed, and of reports you made or that were made about you; these are deleted with your account. Your photo is deleted with your account and included in your data export. People can report a photo they believe breaks our rules.
Chat messages
Messages you send to matched users are encrypted in transit (TLS) between your device and our servers. They are not end-to-end encrypted — once received, messages are stored in readable form in our database so they can be delivered to the recipient and displayed in your conversation history. We are not claiming end-to-end encryption, because it would not be true: our servers, and anyone with authorised access to our database, can read message content. Do not send information in chat that you would not want stored in readable form on our servers.
Where data lives
- Account, chart, and practice data, and profile photos: Supabase (managed PostgreSQL, authentication and private file storage) hosted in the EU (eu-central-1).
- Server-side computation: a FastAPI application hosted on Railway.
- AI-generated content: Anthropic (Claude). The app sends your precomputed natal chart placements and the conversation context — never your raw birth date or time — when generating Oracle responses, synastry narratives, affirmations, or insights on your intentions. To check profile photos for safety, Anthropic also receives the photo itself, with location and camera details removed, and nothing else about you.
- Subscription and billing: RevenueCat, with receipts validated through Apple. We do not store your credit card or payment details ourselves; Apple handles all payment processing.
- Crash and analytics processors: Sentry, PostHog.
How we use the data
- To compute your natal chart, transits, and synastry results.
- To generate personalised AI guidance through the Oracle.
- To deliver the push notifications you have switched on: messages from your connections and, where offered and switched on, transit alerts. Notifications are off until you allow them, and you can turn each one off in Settings.
- To match you with compatible users in the Discover feature, only after both users have opted in to chart sharing.
- To diagnose bugs and improve the product.
We do not sell your data. We do not share it with advertisers. We do not use your data to train any AI model.
Your rights
- Access: request a copy of your data via Settings → Privacy & Data → Export my data. Sent to your email within 30 days, in line with UK GDPR Article 12.3. We aim to respond sooner; complex requests may take up to a further 60 days, in which case we will notify you.
- Correction: edit your profile, birth data, and intentions inside the app at any time.
- Deletion: Settings → Privacy & Data → Delete my account. Your account is deactivated immediately; live records and encrypted PII are erased within 30 days. Residual copies in operational backups are purged within a further 60 days (90 days in total).
- Withdraw consent: push notifications, analytics, and chart sharing can be toggled off at any time in Settings.
- Lodge a complaint: if you are in the UK or EU, you can complain to your data protection authority. UK: ico.org.uk.
Age requirement
ELEVEN11 is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. Age is verified at account creation — you must enter a date of birth confirming you are at least 18 years old before you can use the app. If you believe someone under 18 has created an account, please contact us at the address below and we will delete it promptly.
Changes to this policy
We will update this policy when we change how we handle data. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated in-app before they take effect.
Contact
Forged Tech — support@forgedtech.dev
This policy is provided as a starting point and does not constitute legal advice. ELEVEN11 / Forged Tech recommends review by qualified counsel before public release.