Privacy Policy

Moon Wisdom Club (“mwc”, “we”, “our”) is operated by Hello Wiseman Holdings Inc. This page explains what we collect, what we do with it, and what we don't do. If something here is unclear, email hello@moonwisdomclub.com.

What we collect

• Account data. Email address (or Apple private-relay address), username, hashed password (when applicable), and the invite code you used to join.
• Birth data.Birth date, optional birth time, the city / coordinates you select, and the derived IANA timezone for that location. Used to compute your natal chart and to orient the moon's position relative to where you were born. If you don't know your birth time, we substitute noon for chart math; your rising sign in this case is approximate.
• Your writing. Every entry you save, plus its star/private flag, lunation number, and timestamp. Public entries appear atmoonwisdomclub.com/<your-username>; private entries are visible only to you.
• Limited usage signals. Anonymous read counts on your public entries (one-per-IP-per-day, hashed); share-card events when you tap the share button (which deck, which card style — no entry contents).

What we don't do

• We don't sell your data. To anyone. Ever.
• We don't train AI models on your writing. mwc has no AI features.
• We don't serve ads, and we don't embed third-party trackers in the iOS app.
• We don't read your private entries. They're fenced by row-level security on our database; nobody outside your account — including operators — has SELECT access without a service-role key, which is reserved for incident response.

Where it lives

All account, profile, and entry data lives in a Supabase-managed Postgres database in AWS us-east-1. Birth-chart payloads from our astrology provider (AstrologerAPI v5) are cached on our server so we don't re-call the upstream on every launch. We use Cloudflare for DNS and edge caching of the public web surface.

Your rights

• Export. Email us for a JSON dump of your entries and profile.
• Delete. In the iOS app, open You → Delete account. This wipes your entries, profile, birth data, share-event log, and your auth row in a single transaction. It is irreversible.
• Correct. Email changes flow through our auth provider; profile fields (display name, avatar, birth time) are editable in-app.

Children

mwc is not directed at children under 13 (or 16 in the EEA/UK). If we learn we've collected data from a child, we'll delete it.

Changes

If we update this policy in a way that materially affects how we handle your data, we'll surface a notice in the iOS app on next launch. The “last updated” date above always reflects the current revision.