Privacy Policy

Is It a Sign? (com.bytelunalabs.isitasign) · ByteLuna Labs · Effective 28 September 2026

Summary. Is It a Sign? has no account, no login and no ads. When you ask for a reading, the text you typed is sent over an encrypted connection to our server and on to an AI service that analyses it. It is processed in memory and not stored or logged by us. Your reading history is stored only on your phone. We never collect your location, contacts, camera, microphone or email address.

1. Who we are

ByteLuna Labs publishes Is It a Sign? ("the app") and is the data controller for the data described here. Contact: contact@bytelunalabs.com.

2. What we never collect

3. The text you write

When you tap Read the sign, the description you typed (up to 500 characters) and the optional focus you picked (such as Love or Work) are sent over HTTPS to our backend, a Cloudflare Worker at isitasign-api.bytelunalabs.com. The Worker forwards the text to TypeSafe (Jev model), a third-party AI service acting as our sub-processor, which classifies it: which symbol it mentions, how unusual and specific it is, and whether it signals a crisis or a physical danger. The app then builds your reading from those answers using fixed rules and a library of pre-written interpretations.

If our server can't be reached, the app gives an offline reading on your phone and nothing is sent.

4. What is stored on your phone

Your readings (the text you wrote, the result and the date), your Sign Log, an unsent draft, your settings, today's free-reading count and a random installation ID created by the app. We have no copy of any of it.

5. What leaves your phone, and why

ServicePurposeData
Our reading server (Cloudflare Workers) Passes your text for analysis, enforces the free daily reading and a fair-use rate limit, and blocks abuse. Your text and focus (not stored), the random installation ID, your local date, whether you have Pro, a Play Integrity token, and your IP address as part of the connection. Counters hold only the installation ID and a number.
TypeSafe (Jev model, sub-processor) Called by our server to classify your text. The text and focus only, sent by our server over an encrypted connection. No ID of yours.
Google Play IntegrityConfirms requests come from the genuine app on a genuine device. Device and app integrity signals. We receive only a verdict.
RevenueCat and Google Play Billing Sell and restore the one-time $2.99 Pro unlock. RevenueCat receives an anonymous app user ID (not linked to your name or email) and purchase receipts (product, transaction IDs, entitlement status). Google Play handles payment; we never see your payment details.
Firebase Analytics (Google) Aggregate usage so we can improve the app. App interaction events with fixed values only (for example "reading completed", the verdict, the symbol id, whether the paywall was shown), a random app-instance ID, app version, device model, OS version, language and approximate country. Never the text you wrote.
Firebase Crashlytics (Google)Crash reports so we can fix bugs. Stack trace, random installation ID, app version, device model, OS version. Never the text you wrote.

Provider policies: Cloudflare · TypeSafe · RevenueCat · Google · Firebase.

We do not sell your personal information or share it for cross-context behavioural advertising.

6. Notifications

Pattern reminders, the weekly summary and "free reading ready" reminders are local notifications scheduled on your phone. There is no push server and no notification token is sent anywhere. You can switch them off in the app's Settings or in Android settings.

7. Legal bases (GDPR / UK GDPR)

8. International transfers

Cloudflare, TypeSafe, RevenueCat and Google may process data outside your country, including in the United States, under the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

9. Retention

10. Deleting your data

In the app, open Settings → Delete all data and confirm. This erases your readings, Sign Log, drafts and settings on the phone. Uninstalling the app also removes everything on the device. Because we keep nothing you wrote, there is no server-side copy to delete. For analytics, crash or purchase data, email contact@bytelunalabs.com. See Delete your data.

11. Your rights

Depending on where you live (for example California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have the right to know, access, correct, delete or port your personal information, and to object to or restrict processing. Most data stays on your phone, so you already control it. For anything else, write to contact@bytelunalabs.com. We will respond within the time required by law and will not discriminate against you for exercising your rights.

12. Security

Data in transit is protected with HTTPS/TLS. We design the app so that what you write never rests on our servers.

13. Children

Is It a Sign? is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has used the app, contact us.

14. Entertainment, not advice

Is It a Sign? is for entertainment and self-reflection. It doesn't predict the future and isn't a substitute for professional advice. If what you write suggests you may be in crisis, the app shows support resources instead of a reading, and that entry is not saved or counted. In the US, call or text 988 (Suicide & Crisis Lifeline). Outside the US, find a helpline at findahelpline.com. In an emergency, call your local emergency number.

15. Changes

If an update changes what is collected, this page is updated before that version ships and the date changes. Material changes are also announced in the app.

16. Contact

ByteLuna Labs · contact@bytelunalabs.com

ByteLuna Labs · contact@bytelunalabs.com
Last updated: 28 September 2026