Your information, explained

Privacy Policy

Effective 16 October 2026 · Android private testing

The controller and publisher is Rostyslav Panas, an individual based in Poland using the PigeonTeam Studio brand. For privacy questions and requests, contact pigeonteam.studio@gmail.com.

1. Information on your device

Your profile name, birth date, saved people, readings, conversations and settings are stored on your device. Profile storage uses the device's secure storage where supported; other local content uses app storage. Not all local content is encrypted. Google sign-in does not upload or restore your complete local history. Relevant text and calculated context are transmitted when you request a server-based feature.

2. Google sign-in and your wallet

Google processes the sign-in you choose. Our server verifies the Google token and uses a protected, pseudonymous identifier derived from your Google account identifier. It stores account dates, hashed session credentials and wallet records. Your Google email is checked to control access to private testing; it is not stored in ordinary account or session database rows. Pseudonymous information is still personal data.

The wallet records grants, spending, reservations and transaction outcomes to avoid duplicate charges or credits. Sessions expire after seven days; sign-in challenges expire after five minutes. Expired server sessions and challenges are removed by scheduled maintenance. Signing out invalidates the current session.

3. Interpretation requests and feedback

Requests may include your question, dream, recent conversation messages, selected cards or runes, and calculations relevant to the selected feature. The current private paid pilot processes requests on Cloudflare and returns synthetic responses; that route does not send requests to an external AI model. Encrypted results can be recovered for up to 24 hours, with expired result data removed by scheduled maintenance. Transaction state is separate from the recoverable response.

Other or earlier Neluni builds may use the separate Anthropic-backed service. They are not the private configuration described here. Before enabling that processing for this test version, we will update this notice. Avoid entering passwords, payment information, sensitive personal details or unnecessary information about other people.

If you use a feedback or support function, its submission may contain the response, report category, your optional comment, feature and app/platform details. Local clearing does not retract a submission. Contact support about an earlier submitted report; the current pilot does not provide a working server feedback-submission route.

4. Optional rewarded advertisements

Neluni integrates Google AdMob and Google's User Messaging Platform to request privacy choices where needed. Ads are optional. The SDK can process IP addresses, device and advertising identifiers, app/device information, diagnostic information and ad interactions. Google and the partners shown in its consent message may use these data for ad delivery, measurement, security and fraud prevention. Ad delivery can involve device storage, identifiers and similar technologies. Our current ad requests ask for non-personalized ads; this does not mean no personal data is processed.

A reward request contains an opaque one-time value. Google returns that value with a signed reward callback, which our server verifies before crediting one Paw. We do not include your profile name, birth date or email in that reward value. A device callback alone does not credit your balance.

You may accept, decline or manage the choices offered by the consent message. The current test app does not yet provide a dedicated control for reopening that form; contact us if you need help changing a choice, and you can avoid the optional ad feature. You may withdraw consent at any time without affecting the lawfulness of earlier processing. See Google's Privacy Policy and how Google uses information from apps that use its services.

5. Test purchases and reversals

Google Play handles the purchase interface. Use a Google Play license-tester account and a clearly marked test payment method in this pilot. Neluni does not receive your payment-card details. Purchase tokens are sent to our server and Google for verification; pending tokens are kept in secure device storage for recovery. The server keeps token hashes, protected account identifiers, Paw amounts and transaction state.

Confirmed reversals deduct available Paws. Any remaining Paw adjustment is recovered from later credits. Account deletion does not erase an outstanding adjustment. Minimal receipt evidence and information about unused Paws forfeited on deletion are retained to reconcile later reversals without double deduction.

6. Retention

• Local content: remains until you clear it in the app or remove the app's local data. Some preferences and installation state remain after the in-app personal-data clearing action.
• Account and ordinary wallet records: remain while the account exists, then are removed through account deletion, subject to the exceptions below.
• Welcome-grant record: a protected account identifier and grant date remain after deletion for the duration of the one-time welcome offer, to prevent repeated grants.
• Outstanding adjustments: a protected identifier and the outstanding amount remain until repayment; the retained outstanding-debt entry is removed when repaid.
• Purchase, reversal and deleted-account evidence: the test system currently has no automatic time-based deletion for these records. They remain available for reconciliation and investigation of test transactions. Contact us to request review or erasure; we will explain any continued need to retain particular records. We do not claim that deleting the account deletes all transaction evidence.
• Support and earlier reports: retained while handling the request and any associated dispute or safety investigation. There is currently no automatic retention timer. Requests for erasure are reviewed individually.

Before public purchasing is introduced, retention and cleanup for financial records will be reviewed and this policy updated. Expiry of a credential or response does not automatically remove all associated transaction records or providers' infrastructure records.

7. Purposes, providers and international processing

We process the information needed to provide requested account, wallet and interpretation functions on the basis of performing the service you request. Security, duplicate-grant prevention and transaction reconciliation rely on legitimate interests in operating a reliable service. Where advertising storage or other processing requires consent, we rely on the choices collected for that purpose. Applicable legal obligations may also require particular records to be kept.

Cloudflare provides hosting and database infrastructure; Google provides sign-in, Play services, advertising and consent tools; email providers handle support correspondence. Infrastructure processes connection and security data, including IP addresses. Processing by these providers can occur outside Poland and the European Economic Area under their applicable contractual and transfer arrangements. Contact us for information about safeguards applicable to your data. See Cloudflare's Privacy Policy. We do not promise that provider logging or retention is zero.

Reminders are scheduled locally on your device. You can change reminder settings and revoke notification permission in Android. This privacy page adds no analytics or advertising scripts; its hosting provider still processes connection data.

8. Deletion and your rights

To delete your Neluni server account, open the account screen, select the account deletion action and confirm with Google. An unresolved interpretation reservation can temporarily prevent deletion; contact support if it does not finish. Signing out is not account deletion.

To remove the local profile and history, use the separate Clear data on this device action. Server account deletion and local data clearing are different actions. Reports and the limited retained records described above require separate handling.

If you cannot use the app, email pigeonteam.studio@gmail.com with the subject “Neluni account deletion”. We may need to verify account ownership before acting. Do not send passwords, sign-in tokens or identity documents. This page does not contain an automated deletion form.

Subject to applicable conditions, you can request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. You may withdraw consent. We normally respond to rights requests within one month; where an extension is permitted, we will explain it. You may complain to your local data protection authority, including Poland's President of the Personal Data Protection Office (UODO).

Changes to this policy

We will update the effective date and this notice when processing changes, including before introducing real AI processing or public purchasing in this pilot.