Privacy

We audited every privacy switch in the app. Then we deleted the ones that lied.

Most apps accumulate settings the way attics accumulate boxes: a switch gets added, the feature behind it changes, and one day the switch controls nothing. We ran a line-by-line engineering audit of every privacy-related control in CelestKin, tracing each toggle from the button you tap to the exact code that obeys it. This article is the result, including the embarrassing parts.

What the audit found, honestly

Two notification switches (retrograde alerts and festival greetings) were connected to nothing: no code read them, no such notification existed. Two more promised daily and weekly digests that were never generated. And our Ghost session mode, which promises the most, wasn't silencing analytics the way it claimed.

We did not quietly fix the descriptions to match the broken code. We deleted the four decorative switches outright, and made Ghost mode do what it says. A switch you can trust is worth ten switches that decorate a settings page.

Every switchno exceptions, no favorites

Traced to codethe line that obeys it, or nothing

Decorative? Deletedfour switches removed

The rest enforceddocumented honestly here

How the audit worked

The three session modes, as they truly behave

Normal: readings save to your account, encrypted at rest, and sync across devices.
Local Only: readings stay on your device; nothing is written to your cloud history.
Ghost: readings live only in memory and vanish when you leave, your journal pauses, and analytics events stop at the source: the tracking layer checks Ghost before any event leaves the app.

One boundary we will not blur: Ask the Stars needs our servers to generate a reply even in Ghost mode, and those conversations are linked to your account until you delete them. Making chats fully ephemeral server-side is on our roadmap; until it ships, the Ghost description claims neither more nor less than the truth.

The Privacy & Data section as it ships: three session modes, export, and every deletion lever in one place.

The switches that remain all pull real levers

Transit alerts is the master switch for daily pushes: briefings, recaps, affirmations, even our occasional win-back message all check it server-side before sending, and the settings copy now says so plainly.
Weekly summary gates the Sunday overview on both the device and the server.
Rare cosmic windows is off by default and stays silent until you opt in.

And the exits are real

Deletion works for everyone, including accountless guests: export offer first, then a hard server-side sweep on the schedule in our Privacy Policy. Our deletion machinery is covered by its own automated test suite, and it runs against every table that stores your data. No ads, no data sales, no dark patterns on the way out.

We will re-run this audit whenever the settings surface changes. If a switch is on that page, it works; if it stops working, it comes off the page.

See Your Own Chart in CelestKin

Nine traditions, computed from your exact birth details, in eleven languages. Free to download, with 3 free credits to start.