Privacy Policy — Android

This policy covers the Android version of Constella distributed on Google Play. The iOS version is a separate build with a separate policy — see the Constella Privacy Policy for iOS.

Constella has no account and no Pentarab server. Everything you enter — your birth details, your readings, your journal — is written to a private database on your device and stays there. The only information that leaves your phone is pseudonymous usage analytics, described below, which never contains your birth details or your readings.

To calculate a saju reading, the app asks you for:

• Your date of birth, and whether it is a solar or lunar date (required)
• Whether you know your time of birth, and if so the time (optional)
• Your gender (optional — “prefer not to say” is a real answer and is stored as no value)
• A name or nickname (optional — you can skip it)
• Your MBTI type (optional, entered later from the MBTI screen)

The app also records your device's time zone identifier (for example Asia/Seoul) because traditional saju rules depend on it. This is a time zone string, not a location. Constella for Android requests no location permission and never records a latitude, longitude, or birth city.

All of the above is stored in a single SQLite database file inside the app's own private storage directory, which only Constella can read. Alongside it, Android's shared-preferences store holds two things: which card deck you have selected, and which in-app purchases you own.

• There is no cloud sync. Constella for Android has no account, no login, and no server of ours to sync to.
• There are no user-to-user features — no matching, no messaging, no profile sharing. Nothing you enter is ever visible to another user.
• The database is included in Android’s automatic app backup. Clearing the app’s data or uninstalling the app deletes it.

To understand how the app is used and to improve it, Constella sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. This is the complete list of what it receives:

• The app identifier, the platform, and the app version and build number.
• An install identifier — a random value the app generates on first launch. It is not derived from your device, your Google account, or any advertising identifier, and reinstalling the app produces a new one.
• A session identifier, so one run of the app can be told apart from the next.
• Screen names, and how long each screen was open. The duration is measured from a matching open and close, not guessed from the gap between events.
• Purchase funnel events: that a paywall was shown and which part of the app opened it, that a purchase was started, and whether it succeeded, was cancelled, or failed — together with the product identifier, such as a ticket bundle or a card-pack theme.
• The UTC time of each event, plus your time-zone offset so local time can be reconstructed.
• Device information: operating system and version, screen size, and locale. The device model is not collected.
• A country. This is worked out by the receiving server from the connection itself — the app never sends it, and it is country-level only.

The service does not store your IP address. It is read at the edge only to derive the country and is then discarded. It collects no advertising identifier, no precise location, and no personal identifier such as a name, email address, or phone number. Your birth date, birth time, gender, name, MBTI type, readings and journal entries are never part of an analytics event — event values are screen names, feature names, and product identifiers only.

Constella also does not collect the Android Advertising ID. Both advertising-ID permissions (com.google.android.gms.permission.AD_ID and android.permission.ACCESS_ADSERVICES_AD_ID) are explicitly removed from the app's manifest, so they are absent from the published build.

Constella sells ticket bundles (consumable) and card-pack themes (one-time, permanent). All purchases are processed by Google Play Billing. Pentarab does not receive or store your payment card details, your Google account details, or your billing address.

There is no receipt-verification server. Purchase results are applied on your device only.

Constella for Android requests no runtime permissions at all. It does not access your camera, microphone, photos, files, contacts, calendar, location, or system notifications.

When you tap the share button, the app renders the card on screen into a PNG image and hands it to the Android share sheet. You choose where it goes; Constella does not upload it anywhere and does not read your photo gallery.

Open Settings → Delete all data in the app. After a confirmation prompt this erases your profile, daily tarot draws, compatibility results, journal entries, unlocked fortunes, and ticket ledger in one step.

Purchases you have paid for are deliberately kept, so that resetting your profile does not cost you a card pack you bought. Uninstalling the app, or clearing its data from Android Settings, removes everything including purchase records held on the device.

Because there is no account and no server-side copy of your profile or your readings, there is nothing of that kind for us to delete on your behalf.

Analytics data is tied to an identifier that is generated at random for each install and is never displayed anywhere in the app. There is therefore no way to find one user's records and delete them, and we do not offer a deletion request path. Uninstalling the app stops the collection, and reinstalling it creates a new identifier that is not connected to the old one.

Constella is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through the app, please contact us so we can address it.

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Questions about this policy? Email us: