Privacy policy
Your chart is yours.
Your chart is personal. Your data should be too. This page explains — in plain language — what Shymea collects, why we collect it, and what we never do with it.
Last updated: 16 August 2026
Who we are
Shymea is operated by Shymea Private Limited, a company registered in India ("Shymea," "we," "our"). We are the data controller for the personal data described here. For any privacy question, or to exercise the rights below, email support@shymea.com.
What we collect
- Account & sign-in. When you create an account with Sign in with Apple or Google, we receive your name and email address from that provider to set up and secure your account. If you use Apple's "Hide My Email," we only ever see Apple's private relay address, not your real one. We also store a device identifier and device name so we can keep your account secure across your devices.
- Your profile & birth details. To read your chart, Shymea stores your first name, last name, email address, and your date of birth, time of birth, and place of birth (along with the coordinates and time zone we derive from your birthplace). Birth date, time, and place are sensitive personal data: we process them securely and use them only to compute your chart and personalize what Shymea shows you. We do not send your raw birth details to the in-app astrologer — only the computed chart placements are used there.
- What you ask Shymea. Questions you ask the in-app astrologer are sent, exactly as you type them, to our inference provider (Microsoft Azure OpenAI Service) so we can generate a response. Because you write these yourself, please don't include details you wouldn't want processed by a third party — full names, financial, medical, or government-ID information. We do not sell this content, train public models on it, or share it with advertisers, and we do not keep a copy of your conversation on our servers.
- Other people's birth details. Some features need a second person's chart. If you save someone else — a partner, friend, family member, or your child — to generate a report about them, we store the name, relationship label, and date, time, and place of birth you enter for them, plus the chart we compute from it, on your account. If you connect with another Shymea user through Bond, we store the resulting compatibility analysis for both of you. Only enter another person's birth details if you're entitled to — see "Other people, including children" below.
- Purchases. If you buy a subscription or a report, the app store (Apple App Store or Google Play) or, on the web, our payment provider processes the payment. We receive only a record of the order — never your full card number.
- Diagnostics. We collect basic, aggregated app diagnostics and crash reports (via Sentry) to find and fix problems. This is never used to build an advertising profile.
- Waitlist email (website). If you join the waitlist on shymea.com before you have an account, we store your email address plus basic signup attribution — the campaign tags (UTM source, medium, and campaign) and the referring page, if any, that brought you to us — so we can tell you when access opens and understand how people find Shymea.
- Basic analytics (website). We measure aggregate, anonymized traffic on shymea.com (page views, country, device type) to know what's working. No cross-site tracking, no ad pixels.
How long we keep it
We practice data minimization: we collect only what we need to run the product, and we keep it only as long as we need it. You can delete your account yourself anytime in the app under Settings, or by emailing support@shymea.com. Here is how long each thing lasts:
- Account, profile, and birth data — kept while your account is active. When you delete your account we deactivate it immediately and hold it for a 30-day grace period so you can change your mind; after 30 days it is permanently erased, along with any people you saved and any compatibility results tied to you. A scheduled sweep permanently erases any account deactivated by other means once it is more than 90 days old.
- Chat with the in-app astrologer — we do not store your conversations on our servers at all. The conversation you see lives on your device and is sent with your next question only to give the astrologer context; deleting the app or the conversation ends it. Microsoft retains prompts and responses for up to 30 days for its standard abuse-monitoring process, after which they are deleted; that copy is not used to train models and is accessible only to authorized Microsoft reviewers investigating a suspected misuse.
- Reports you generate — kept on your account until you delete the report or your account.
- Crash and error diagnostics — retained by Sentry under its standard retention (up to 90 days), then deleted. Not used to profile you.
- Waitlist emails — kept until you ask us to remove you.
- Website analytics — aggregated and anonymized; no individual profile is built or retained.
- Encrypted database backups — kept on a short rolling cycle for disaster recovery. Data you delete disappears from backups as that cycle turns over.
Who we share it with
We never sell your data. We share the minimum necessary with a small set of trusted service providers who process data on our behalf:
- Apple & Google — handle Sign in with Apple and Google sign-in, and process subscription and in-app purchases, under their own privacy policies.
- Microsoft (Azure) — provides the cloud hosting, databases, and AI inference (Azure OpenAI Service) that run Shymea and generate your readings; your data is stored in Microsoft's data centers. For AI-generated readings we send only your derived chart placements (planets, houses, aspects) and the questions you type — never your name, email, phone number, or raw birth date, time, or place; names in reports are replaced with anonymous tokens first. Your typed questions go through exactly as you wrote them. The app asks for your explicit permission before any of this is sent, and you can withdraw it anytime in Settings → Privacy. Microsoft does not use this data to train its AI models; it retains prompts and responses for up to 30 days for abuse monitoring, then deletes them.
- RevenueCat — manages your subscription and in-app purchase entitlements. It receives an anonymous app user identifier and the purchase receipt from Apple or Google so the right features unlock on your devices. It never receives your birth data or chat.
- Our payment partner — checkout and payments for reports purchased on shymea.com are handled by a dedicated payment provider acting as Merchant of Record, under its own privacy policy. We never see or store your card details.
- Sentry — receives crash and error diagnostics so we can find and fix problems. We configure Sentry to scrub personal data from these reports; it never receives your birth details or chat content by design.
- OpenStreetMap (Nominatim) — when you type your place of birth, we send that place text to OpenStreetMap's public geocoding service to look up its coordinates. We send only the place you typed, never your name or identity.
These providers are bound by contract to use your data only to provide their service to us, and not for their own purposes, and each provides the same or equal level of protection for your data as this policy describes.
What we never do
- Sell or rent your data to anyone.
- Hand your birth data or chat history to advertisers.
- Post or share anything publicly on your behalf.
- Store more than we need to run the product.
Your rights
Wherever you live, you can ask us to access, correct, or delete the personal data tied to you, and to stop processing it. If you're in the EU/UK (GDPR) or India (Digital Personal Data Protection Act), these rights — including access, correction, deletion, and withdrawing consent — apply to you by law; we honor the same rights for everyone. Email support@shymea.com with "Privacy request" in the subject and we'll handle it within 30 days. You also have the right to complain to your local data-protection authority.
Other people, including children
Shymea can read a chart for someone other than you, and that means we may hold data about a person who never signed up. We treat that seriously. There are two ways it happens, and they work differently.
- Someone you save yourself. When you enter a partner's, friend's, family member's, or child's birth details to generate a report about them, that person's name, relationship label, and birth date, time, and place are stored on your account. Only you can see them. You may only enter another person's birth details if they have agreed, or — for your own child — if you are their parent or legal guardian. Before you save a child, the app asks you to confirm that, and by confirming you are providing consent on their behalf. You can delete any saved person at any time in the app, and deleting your account deletes all of them.
- Another Shymea user you connect with. Compatibility (Bond) only happens when both people hold accounts and both accept the connection. Neither person is ever shown the other's raw birth date, time, or place — only the computed reading. Either of you can remove the connection, which deletes the shared result for both.
We never contact a person you have saved, never build a profile of them beyond the chart you asked for, and never use their details for anything but generating the reading you requested.
Children
Shymea is not directed to children. You must be at least 13 years old to create an account and use Shymea, and we ask for your date of birth and refuse the account if it shows you are under 13. We do not knowingly collect personal data directly from anyone under 13. The one case where a child's data reaches us is the one described above — a parent or guardian entering their own child's birth details to generate a report about them — and that is done under the parent's consent and control, and deleted whenever the parent deletes it. If you believe a child's data has reached us any other way, email support@shymea.com and we will delete it.
Cookies
shymea.com uses a single consent banner (Accept / Decline) for cookies and analytics. If you decline, nothing non-essential is set. We don't use third-party ad trackers.
Changes to this policy
If we change anything material here, we'll update the date at the top of the page and — if you're on the waitlist or have an account — let you know by email before it takes effect.
Questions? Write to support@shymea.com, or see our Terms and Refund Policy for the rest of the legal picture.