Introduction
Naryu takes your birth details, calculates a chart from them, and turns that chart into plain-language readings. The calculation is deterministic and ours. The words are written by an AI system, which the app says on the screen where you enter your details. This document describes what the app and our servers actually do with what you give us.
Information we collect
Your account: an email address, or the account identifier when you sign in with Google or Apple. When you sign in with Apple we also keep the token Apple gives us, so that deleting your account can end that sign-in too. There are no anonymous accounts.
Your birth details: date, time and place, and your full birth name when you give one for a numerology reading. You tell us whether the time is known, and a chart is calculated differently when it is not.
Your biological sex, which some of the traditions we read from use.
What you choose to tell us about yourself: your gender identity, where you live now, the goals you choose, whether your day centres on the morning or the evening, your relationship status and how you describe your relational life, and for a feng shui reading the way your home faces, the way it sits and the period it was built in.
What you write and keep: journal entries, the readings you have been given, the answers and results of the surveys you take, your lesson progress and quiz answers, the friendships you make in the app, and any feedback you send us.
Operational details: the language the app is running in, a device token if you turn notifications on, your subscription status, and the version and time of each consent you give. Your purchases: your subscription, any one time unlock you buy, and the days of Premium a referral reward gives you.
How we use your information
Your birth details feed the calculation. The readings themselves are written by an AI system, and this is what we send it:
Your name, and the name you give a partner when you ask for a reading about a relationship.
The other person's chart, when you ask for a reading that compares two people. When that person is a friend you have accepted in the app, the name they gave us and their chart go into the reading with it.
A question you write yourself, when you ask for a reading about a moment.
A photograph of a room and the name you give that room, when you ask for a feng shui reading.
Your calculated chart, which comes from your birth date, your birth time and your birth place. In a reading about place it carries the planetary lines nearest your birth place, computed from its coordinates, and not the coordinates themselves. The chart is exact, so your birth date, your birth time and your birth place can be worked out from it. With it go the numbers a numerology reading works from, which come from your full birth name, and the figures the Chinese traditions work from, which come from your birth year and your biological sex.
What you tell us about your relationship status, how you describe your relational life and your social style, the goals you choose, and the labels of the surveys you take.
The current date and time where you are, with the name of your time zone, so that a reading can speak of today, this week or the season. The zone is the zone of the place you live now when you have told us, and the zone of your birth place otherwise. We also send the language the app is running in, so that the words come back in it.
Which part of the day your day centres on, the morning or the evening. When you have not told us, the morning is sent.
The choices you make for a reading: the kind of relationship you name for a partner, how long a meditation should be, what it should focus on and the mood you bring to it, which numerology tradition or which survey you are asking about. We also send what a question of the moment is about, and which way your home faces, which way it sits and the period it was built in.
The result a survey came to, when you ask for a reading about that survey. Not the answers you gave: those stay with us.
Where you live now, when you have told us, as your chart recalculated for that place: the rising sign there, the visible peak above it, which is the Midheaven, and the bodies that come forward. A reading of your year, of a moment, or of a question you ask is cast for that place as well. The place itself does not go, only the name of its time zone, which is often the name of a city.
When you ask for a tip for a mood, we send the mood you picked, one of five words, and the sky of that day. Nothing in that one is tied to you, and the words that come back are the same for everyone who picks that mood on that day in that language.
The AI system is Amazon Nova Pro, which we reach through Amazon Bedrock. Amazon Web Services runs it for us as our processor: in the United States for the service that answers us-east-1, and in the European Union for the service that answers eu-central-1. Inside each of those, your request can be answered by any region of that geography.
Every answer of ours that carries words the AI system wrote is marked as AI-generated in a form machines can read, as Article 50(2) of the EU AI Act asks: it names the parts the AI system wrote and gives them the IPTC digital source type trainedAlgorithmicMedia. The export of your data keeps that mark on every reading in it, and an image you share from the app carries the same IPTC mark in its metadata.
We do not sell your data and we do not share it for advertising. There are no advertisements and no advertising software in Naryu.
Storage, encryption and security
Your sensitive fields are encrypted one by one, under a key we manage, before they are written down, and on top of the encryption the storage layer already applies. Some records stay readable to the service, under the storage layer's encryption only: when a row was created and updated, your subscription status and the record of your purchase with its store and transaction number, the language the app is in, the device token for notifications, your friendships with their states and dates, your invite code and who invited whom, and the feedback you send us.
The key is deliberately narrow. Nobody at Naryu can read those tables by hand: an administrative scan of the raw tables fails, because the key does not grant the decryption. The only thing that can read them is the service that answers your app, and the export we build for you.
Amazon Web Services stores and processes your data for us in two places: in the European Union, in Frankfurt (eu-central-1), and in the United States, in Northern Virginia (us-east-1). Everything the app keeps for your account, your profile with your birth details, your readings, your journal, your friendships and your subscription record, is kept in both at once, so that the app stays fast and available wherever you open it. Wherever you live, then, your data is in both places: if you are in the European Economic Area, it is also stored and processed in the United States.
For the copy in the United States we rely on the safeguards in Amazon Web Services' data processing terms: the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise the standard contractual clauses of the European Commission.
If you are in Turkey, your data is transferred abroad under article 9 of the Personal Data Protection Law No. 6698 (KVKK), on the basis of standard contracts.
The AI system that writes your readings runs in the same two geographies: a request answered in us-east-1 is processed in the United States, and one answered in eu-central-1 in the European Union. Inside each, any of Amazon Web Services' regions there can answer it, so in the European Union not only Frankfurt.
Your rights and choices
See it. Everything you have given us is visible in the app.
Take it. The app can export your data to you in a readable form. Because of the encryption above, the export is built by the same service that answers your app, and it is the only path that can read your rows.
Correct it. Your birth details and profile can be edited at any time.
Delete it. Deleting your account erases every place your account reaches, your customer record at RevenueCat, our purchases provider, included, and it cannot be undone. Our database backups let go of it within 35 days, as Data retention says.
Object or complain. You may object to what we do on our legitimate interests, the security logs and the account trail below, and we then stop that processing of your data unless we have compelling grounds that override yours. If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority.
If you are in Turkey. Under the Personal Data Protection Law No. 6698 (KVKK), the controller of your data is Murat Can Ümit, individual developer, contact support@naryu.ai. We process your data for the purposes and on the legal grounds the data usage document sets out, KVKK articles 5 and 6. We collect it by electronic means, from what you enter in the app and from what our servers record as the app runs, and we transfer it abroad to the providers named there under article 9.
Under article 11 you may ask us whether we process your data and for information about it, what we process it for and whether it is used for that, which third parties in Turkey or abroad receive it, to correct it, to erase or destroy it, to have those third parties told of a correction or an erasure, to object to an outcome against you that arises only from automated analysis, and to be compensated for damage that unlawful processing causes you. Write to us first, and we answer within 30 days. If we refuse, do not answer in time, or you find the answer insufficient, you may complain to the Personal Data Protection Board, the Kurul, within 30 days of our answer, and in any case within 60 days of your request.
Anything in the export that involves another person is described by the relationship only, never by their name or their account, so the file we hand you cannot be turned into a list of other people.
Data retention
Your account data is kept until you delete it. Readings are cached so the app does not regenerate them needlessly, and they are removed with your account.
We keep three logs. Our function log keeps a hashed reference for fourteen days. Our request log keeps the network address a request came from for ninety days, so we can look into abuse and outages. Our account trail records each use of the key that encrypts your fields, with the identifier of your account and of the record it opened, and keeps it for 365 days, so we can see what used the key and when. None of them contains your name, your birth details, your journal or your questions.
When you report a reading, we keep the report, which holds the kind of reading, the reason you chose, your note if you wrote one and the language of the app, with your account's identifier, for at most 90 days. The developer who runs Naryu reads each report, to correct what it points to.
Our database backups let us restore a table to any moment of the last 35 days. A deleted account stays in them for up to 35 days, and then it is gone from them too.
Seven records outlive a deleted account, and none of them names you. Each is keyed by a one-way cryptographic hash, holds a single fact, and expires on its own: that an email address already claimed its one-time welcome gift, which lasts a year. When a subscription re-check was last requested, which lasts a minute. When a data export was last produced, which lasts an hour. Two sign-in rate counters, one for the email address and one for the network address a request came from, which last an hour. An unused deletion link, which lasts thirty minutes. And when a deletion confirmation mail was last sent, which lasts fifteen minutes.
Feedback you send in the app also reaches the developer who runs Naryu as an email, with your text, the reply address you typed if you gave one, and an identifier of your account. Deleting your account erases the feedback we store, but not that email.
Changes to this policy
The app fetches these documents from our servers rather than shipping them inside the app, so a correction reaches every reader without waiting for an app release. Each document carries a version. When the version rises, the app asks you to read and agree again before you go on; when it has not changed, it does not ask.
Contact
Write to support@naryu.ai. A person answers, and the address is the same one printed inside the app.