This Privacy Policy explains how StudioV AI LLC, a Colorado limited liability company doing business as Luxtra ("Luxtra," "we," "us," "our"), handles personal information for the Luxtra app, the luxtra.app website, and related services (the "Service"). Sensitive-data and "consumer health data" practices are also covered by our separate Consumer Health Data Privacy Policy.
Controller & contacts
StudioV AI LLC d/b/a Luxtra · 1940 Broadway, Suite 314C, Boulder, CO 80302, USA
Privacy: privacy@luxtra.app · Support: support@luxtra.app
EU representative (GDPR Art. 27):
UK representative (UK GDPR Art. 27):
Scope
The Service is offered worldwide (incl. the EU/UK). Your rights depend on where you live — see Sections 10–12 (EU/UK GDPR, California CCPA/CPRA, Colorado CPA, and other US state laws).
Information we collect
(a) You give us: email and name; authentication via email, Sign in with Apple, or Google (we receive your email + basic profile).
- Birth & astrological data: date, time, and place of birth; the charts/transits/reports we compute; and the birth details of other people you add ("relationships").
- User content: journals, goals, life events, AI chat messages ("Iris"), and photos you upload (for the palm-reading and face/compatibility features, and profile).
- Voice: when you use the voice astrologer, your microphone audio is streamed in real time to our AI provider.
- Communication/consent choices.
(b) Collected automatically: device model, OS/app version, language, time zone, approximate region, in-app events, and diagnostics. Location is used only when you are using a location feature (e.g., birth-city lookup) — we do not collect background location.
(c) Analytics & error monitoring: we use PostHog (EU region) for product analytics, which may automatically capture screen views and interactions; and Sentry for crash and performance monitoring, which may record a sampled visual reproduction of app screens ("session replay") with on-screen text and images masked — see Section 5.
(d) Purchases: subscription tier, Stars balance/ledger, and purchase/restore events. Payments are processed by Apple, Google, and (for web purchases) Stripe — we do not store full card numbers.
Biometric & sensitive data. Some data is sensitive / special-category (birth data; journal and chat content that may reveal health, beliefs, or other sensitive traits; voice; and face/palm photos, which may involve biometric identifiers). See Sections 3, 6, and the Consumer Health Data Policy. We process it only to provide the features you request and, where required, with your explicit consent, and you can delete it anytime (Section 12).
Biometric data (palm & face features; voice)
When you use the palm-reading or face/compatibility features, you upload a photo from which hand/face characteristics may be derived, and the photo is sent to an AI provider to generate the requested reading. The voice astrologer streams your speech to an AI provider.
- We use this data only to generate the reading or response you asked for. We do not use it for identification, and we do not sell or disclose it for advertising.
- Consent: before you first use a palm or face feature we ask for your separate, affirmative consent (a written release), and for EU/UK users this is explicit consent under GDPR Art. 9(2)(a). You may withdraw consent anytime.
- Retention/destruction: we destroy the source photo immediately after the reading is generated, and any derived biometric data when the purpose is satisfied and no later than three (3) years after your last interaction, unless a longer period is required by law.
- We do not knowingly collect biometric data from minors and a minor cannot provide a valid biometric release (see Section 11).
How we use your information
Provide and personalize the Service (compute charts, generate readings, power Iris chat and voice); process subscriptions/Stars; security and fraud prevention; support; communications (service messages, and opt-in marketing); and legal compliance.
AI processing & the providers who receive your data
Luxtra uses third-party AI to generate interpretations, chat, voice, and images. Before you first use an AI feature we ask for your explicit consent to send the relevant inputs to these providers:
- Google (Gemini) — readings, Iris chat, voice (your audio streams directly to Google's Gemini Live), and palm-image analysis.
- OpenAI — face/portrait image generation (your uploaded photo is sent to OpenAI's image model) and the text embeddings that power journal/memory search (your journal and life-event text).
We use these models under business/enterprise terms (e.g., Google Vertex AI / paid API, OpenAI API) under which the provider does not use your prompts, outputs, or uploaded content to train its models and retains them only as needed to provide and secure the service. AI output may be inaccurate — see our Terms Section 4.
Special-category / sensitive data (EU/UK)
Where we process special categories of data (journal/chat content that may reveal health, religious or philosophical beliefs, or sex life; voice; and palm/face photos), we rely on your explicit consent under Art. 9(2)(a), requested when you enable each such feature, not on a general account checkbox. Withdraw anytime; we delete the data.
Automated decisions & profiling
Our reports, compatibility scores, and personalized horoscopes are automatically generated from your birth and other data — i.e., profiling. They are for entertainment/self-reflection and produce no legal or similarly significant effect; we do not use them to make decisions about you. You may object to profiling (Section 10). If you enter another person's birth details, you are responsible for having a basis to do so; we process that data only to generate your reading.
Legal bases (EU/UK)
Contract (to provide the Service); consent (marketing, optional analytics, and all special-category/biometric data); legitimate interests (security, product improvement — balanced against your rights); and legal obligation.
International transfers
We are in the United States and use US-based providers (PostHog is EU-hosted; Sentry and the AI providers are US). Transfers out of the EU/UK rely on the EU-US/UK Data Privacy Framework where the importer is certified, and otherwise the EU Standard Contractual Clauses plus supplementary measures. You can request a copy of the safeguards at privacy@luxtra.app.
Your rights
You may access, correct, delete, port, restrict, or object, and withdraw consent as easily as you gave it. We do not sell/share or run targeted advertising, so there is nothing to opt out of there; we still honor recognized universal opt-out signals (e.g., Global Privacy Control) for any future such processing.
- Colorado (CPA): access, correct, delete, portability, and opt-out rights. If we deny a request we'll tell you why within the response window and give you an appeal; we respond to appeals within 60 days, and if we deny the appeal we'll provide a way to contact the Colorado Attorney General. Email privacy@luxtra.app.
- California (CCPA/CPRA): rights to know/delete/correct, limits on sensitive personal information; we do not sell or share. Notice of Financial Incentive: our referral program awards Stars (in-app credit) for referrals; participation is voluntary, you may withdraw anytime, and the value of the incentive is reasonably related to the value of the data, which we estimate is de minimis.
- EU/UK (GDPR): the rights above, plus the right to complain to your supervisory authority.
Response times: generally within 30 days (one month under GDPR, extendable by two months for complex requests; the first request is free). Email privacy@luxtra.app.
How to delete your data
- In-app: Settings → Privacy → Delete Account.
- On the web: luxtra.app/delete-account (no app needed).
- By email: privacy@luxtra.app.
See the Account & Data Deletion page for exactly what is erased and the timeline.
Children
The Service is for users 13 and older; under 16 in much of the EU requires verifiable parental consent. We do not knowingly collect data — and specifically not biometric or health-adjacent data — from anyone under 13. Contact privacy@luxtra.app to remove a child's data.
Security
Encryption in transit, access controls, and reputable cloud infrastructure. No system is perfectly secure; we notify you of breaches as required by law.
Cookies & analytics
See our Cookie Policy. Non-essential analytics are used with consent where required; you can control them via the website's consent banner and in-app settings.
Changes & contact
We'll post updates with a new date and notify you of material changes. StudioV AI LLC d/b/a Luxtra · 1940 Broadway, Suite 314C, Boulder, CO 80302, USA · privacy@luxtra.app
© 2026 Luxtra · StudioV AI LLC. This policy is provided for transparency and does not constitute legal advice. The sky has been waiting for you.