Privacy Policy

Nebrion is not a company; it is run by Mehmet Halit Kanbakoğlu (İskele, Turkish Republic of Northern Cyprus), the individual who develops and operates this app, and he is the controller of your personal data. All requests are received and answered through a single contact channel (nebrion.app@gmail.com).

Your data is processed primarily under the TRNC Personal Data Protection Law (No. 89/2007). If you live in the European Union or the European Economic Area, your rights under the General Data Protection Regulation (GDPR) are also preserved; if you live in Turkey, so are your rights under the Personal Data Protection Law No. 6698 (KVKK).

• Account details: your email address and password. Supabase stores your password only as a hash; it never reaches us in plain text. If you enter an optional username when signing up, it is also saved to your account. The date on which you confirmed that you are over 13 and accepted the terms is also recorded on your account.
• If you sign in with Google: Google sends us your Google account name, email address and a link to your profile photo, and these are saved to your account. In that case you do not create a password; your Google password never reaches us. We do not ask Google for your contacts, calendar or any other data.
• Profile and birth details: the name, date of birth, time of birth and place of birth (city and country) you enter for a chart. The chart data calculated from these details (planet positions, houses, aspects, numerology, astrocartography lines) is stored with your profile.
• AI records: the text of the AI interpretations you unlock, your free trial and credit records (balance and spending history) and your subscription tier (Free or Pro).
• Your weekly transit summary and your language preference.
• In the mobile app: if you allow notifications, your notification (push) token, device ID and platform (iOS or Android); and, under an anonymous ID stored on your device, some usage events (e.g. you completed sign-up, you created your first chart, you viewed the subscription screen). These event records are designed not to contain your name, birth details or email; the server removes known personal fields before storing them.
• Purchases (mobile only; store subscriptions are not available yet): payment will be made through the App Store or Google Play, and your card details never reach us. In the mobile app, your subscription status is managed through RevenueCat under an anonymous ID generated by RevenueCat; your account email and account ID are not shared with RevenueCat.
• Technical data: when you use our website or app, your IP address and browser/device information reach our server. The server may keep access logs for the service to work.

In the mobile app you can calculate a chart without creating an account. In that case your profile may be stored without being linked to an account. On the website, you need an account to create a chart.

• To open your account, let you sign in and store your profiles.
• To calculate your chart, synastry, astrocartography lines and transits. The calculation runs on our server with a deterministic engine: the same birth details give the same result every time.
• To generate an AI interpretation when you ask for one and to show interpretations you have already unlocked again.
• To manage your subscription tier and credit balance, and to send weekly summaries and notifications.
• To keep the service secure: to limit abuse and to find and fix errors.
• To improve the product: anonymous usage events that help us understand where you get stuck.

We do not sell your data. We do not use any advertising or tracking tools on the website.

• Contract: providing your account, profiles, calculations and the AI interpretations you ask for.
• Legitimate interest: keeping the service secure, fixing errors and improving the product with anonymous usage events.
• Consent: notifications. You can withdraw your consent at any time in your device settings.

When you ask for an AI interpretation, your chart data is sent to Google's Gemini AI service so that the interpretation can be written: profile name, date and time of birth, place of birth and the calculated planet, house and aspect data. For a synastry interpretation, these details are sent for both people. Before sending, the name is cleaned so that only letters, spaces, hyphens and apostrophes remain.

Your email address and account ID are not added to the AI request. The AI only interprets the finished calculation; it does not calculate positions.

We currently use the free tier of the Gemini API. Under Google's own terms, content sent on the free tier (in your case: chart data, not your name) may be used by Google to improve its own products; this does not happen on the paid tier. If we move to the paid tier in the future, we will update this text.

On the free tier you can also use a one-time AI natal interpretation trial granted to your account; this trial sends the same data described above to Gemini (the same applies to interpretations you unlock with your credit balance). The generated interpretation is linked to your account and stored so that it does not have to be generated again when you ask for the same content.

We use the providers below to deliver the service. Each one receives only the data it needs for its own task.

• Supabase: authentication and database (email, password hash, credit/trial/interpretation records, notification tokens, weekly summaries, preferences). Its servers are in the European Union, in the Frankfurt region (eu-central-1).
• Hostinger: the server (VPS) that runs the app's API, the website and the profile/chart files.
• Google (sign-in): if you use "Continue with Google", Google verifies your identity and sends us only your name, email address and a link to your profile photo. Google knows that you signed in to Nebrion; this is subject to Google's own privacy policy.
• Google (Gemini): generating AI interpretations. See the "AI and your birth details" section above.
• OpenStreetMap (Nominatim): only the city and country name are sent to find the coordinates and time zone of your place of birth. Suggestions in the city search box come from a list on our own server; no third-party request is made on every keystroke.
• Sentry: error tracking. Error reports may include request details; we try to remove known personal data fields such as email, date/time/place of birth and location before reporting.
• RevenueCat, Apple App Store and Google Play (mobile only; once store subscriptions are available): subscription purchase and verification.
• Expo Push (mobile only): delivering notifications to your device.

Some of these providers operate outside the TRNC and Turkey (e.g. in the European Union and the United States), so your data may be transferred abroad. Unless required by law, we do not share your data with anyone other than these providers.

The website uses only the cookies it needs to work: a session cookie that keeps you signed in, and a temporary verification cookie used to complete email verification, password reset or Google sign-in in the same browser.

We do not use tracking, advertising or third-party analytics cookies; there is no analytics tool on the website.

We keep your data for as long as your account is open. You can delete your account at any time on the website (Delete account page) or in the mobile app. Deletion cannot be undone. Delete account page

When you delete your account, the following is permanently deleted:

• All profiles and birth details linked to your account.
• The calculated chart files for those profiles. If another profile created with the same name and birth details uses the same file, the file is kept for that profile.
• Your AI interpretations, your free trial record and your credit balance.
• Synastry and astrocartography results linked to your account (including names, birth details and AI interpretations).
• Your extra profile entitlement record, your subscription tier (Pro) record and your monthly gift credit records.
• Your weekly transit summaries, notification tokens and preferences.
• Product usage event records linked to your account.
• Your email and password record (your Supabase authentication account).

Deleting your account does not affect the following:

• Credit transaction records (kept for audit purposes: user ID, transaction amount, time, the reason for the transaction and the related profile ID or period).
• Anonymous usage event records created on your device before you opened an account and not linked to your account (event name, time, an anonymous ID stored on your device and event properties; designed not to contain your name, birth details or email, and the server removes known fields before storing them).
• Profiles you created in the mobile app without an account that are not linked to an account.
• Any subscription you bought from the App Store or Google Play (once store subscriptions are available). You need to cancel it separately from the store's own screen.

If you would like these records deleted too, write to us; we will review your request and reply.

Connections are encrypted with HTTPS, your password is stored as a hash, email is not added to AI requests and known personal fields are removed from error reports. Still, no system is completely secure; if you notice a problem, write to us.

Nebrion is not intended for children under 13, and we do not knowingly collect personal data from them. If you notice an account belonging to a child under 13, write to nebrion.app@gmail.com and we will delete the account and its data.

• Deletion: you can delete your account yourself on the Delete account page or in the mobile app.
• Access and correction: to find out what data we hold about you or to correct something, write to nebrion.app@gmail.com.
• Other requests (objection, restriction, asking for a copy of your data, etc.): write to the same address. To verify your identity, we may ask you to write from the email address linked to your account.

These rights arise from TRNC Law No. 89/2007 and, depending on where you live, from the GDPR or the KVKK. If you are not satisfied with our reply, you keep the right to complain to the data protection authority in your country.

If we update this policy, the "Last updated" date at the top of the page will change.

For anything related to privacy: nebrion.app@gmail.com