Last updated ·
Privacy Policy
Skycup reads your coffee or tea cup against your birth chart. That needs a few personal details, so here is exactly what we collect, why, and how you stay in control of it.
In short
- Your birth chart, today's sky and all reminders are computed on your phone.
- Only reading a cup goes to a server: your cup photo and a short summary of your chart are sent to our AI provider to write the reading. Your birth date and time are not sent.
- We don't sell your data. Ads are personalised only if you allow it.
- You can delete everything from the app at any time: Profile → Delete my data.
Who we are
Skycup (the app, the website skycup.app and the services behind them) is run by Ali Şahin, Türkiye ("we", "us"). We are the data controller for the personal data described here. You can reach us at hello@skycup.app.
If you are in Türkiye, our notice under the Personal Data Protection Law No. 6698 (KVKK) is on the KVKK Aydınlatma Metni page (in Turkish).
What we collect
What you give us
- Profile: your first name, birth date, birth time (optional) and birth place (a city you pick from a list, with its coordinates and time zone).
- Cup photos: the photo of your cup you take or pick. Please photograph only the cup: if a face or anything personal is in the frame, it is processed like the rest of the photo. We don't run face recognition.
- Questions and answers: the question you ask before a reading (up to 200 characters) and your answers to "Did it happen?" follow-ups.
- Account: if you sign in with Apple or Google, the email address and identifier they share with us. With Apple you can hide your email.
- Messages: what you write to us by email.
What the app creates as you use it
- Readings: the readings written for you, the chart summary used for each (see How a reading works) and the predictions they contain.
- Credits, plans and invites: your credit balance and history, your plan and when it ends, free readings and ad rewards used, houses opened, your invite code and who joined with it.
- Device and technical data: a random account identifier created on first launch, the operating system and app version, a push notification token if you allow notifications, and error reports when something breaks (an error message and a short technical trace).
- Usage events: a short record of steps in the app (for example "reading ready", "paywall opened", "photo picked") linked to your account identifier, so we can see what works and fix what doesn't. We don't use a third-party analytics service.
- Purchases: payments go through Apple or Google. We receive which product you bought and when, never your card details.
What stays on your phone
Your profile, your cup photos, a copy of your readings for offline use, your settings and your reminders are stored on your device. Your birth chart, houses, daily sky and notifications are computed there and never leave it.
We don't collect your precise location, contacts, microphone or phone number.
How a reading works
When you read a cup, the app uploads your photo to our storage, and our server sends it to our AI provider, Anthropic (Claude), together with:
- your first name, your question and the language of the app;
- a chart summary: your Sun, Moon and Rising signs, the houses of your chart that today's planets are passing through (only if you gave a birth time), today's planet positions and Moon phase, and the name of your birth place.
Your birth date and birth time are not sent. A full reading sends the short reading and the same summary, without the photo. The text that comes back is written by AI. It is meant for entertainment and reflection, not as advice (see our Terms of Use).
No decision with legal or similarly significant effects is made about you by automated means.
Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Writing your readings, keeping your account, readings and credits, syncing them across your phones | Profile, photos, questions, readings, account, credits | Performance of our contract with you (Art. 6(1)(b)) |
| Selling and honouring plans and credits, invites and free readings | Purchases, credits, invites, usage of free readings | Contract (Art. 6(1)(b)); legal obligations such as accounting (Art. 6(1)(c)) |
| Daily reminders and follow-ups | Notification token, reminder settings | Your consent through the system permission (Art. 6(1)(a)); you can turn it off any time |
| Personalised ads that pay for free readings | Advertising identifier, device data used by the ad network | Your consent (Art. 6(1)(a)); without it, ads are not personalised |
| Keeping Skycup secure, stopping abuse of free readings and invites, fixing errors, understanding which features work | Account identifier, usage events, error reports, technical data | Our legitimate interests in a working, secure, fair service (Art. 6(1)(f)) |
| Answering your messages and requests | Email and what you write | Contract or legitimate interests (Art. 6(1)(b), (f)) |
We don't use your photos, questions or readings to train AI models, and our AI provider doesn't either.
Ads and tracking
Free readings are opened with a short rewarded ad. Ads are served by Google AdMob, which may work with other ad networks to fill an ad. On iPhone, Skycup asks for permission to track (App Tracking Transparency) and only uses your advertising identifier if you allow it. In the EEA, the UK and Switzerland we also ask for consent through Google's consent form. If you say no, you still get ads, but they are not based on your activity in other apps.
You can change your choice at any time: in the app, Profile → Privacy choices; on iPhone, Settings → Privacy & Security → Tracking; on Android, Settings → Google → Ads. Plus members don't see ads.
We don't sell your personal data. Under some US state laws, personalised advertising can count as "sharing"; you can opt out of it with the settings above.
Who we share it with
We share personal data only with the service providers that run Skycup for us, under contracts that limit them to our instructions, and only what each one needs:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage and server functions | EU (Frankfurt, Germany) |
| Anthropic | Writes your readings with its Claude models | United States |
| Apple | Sign in with Apple, App Store payments, push notifications on iPhone | United States, worldwide |
| Google Sign-In, Google Play payments, Firebase Cloud Messaging for Android notifications, AdMob ads | United States, worldwide | |
| Expo (650 Industries) | Delivers push notifications to Apple and Google | United States |
| Cloudflare | Hosts skycup.app and forwards email sent to us | Worldwide |
The animated sky scenes in the app load open-source graphics libraries and textures from public content networks (jsDelivr and unpkg). Like any web request, these see your IP address and basic device information; they receive nothing about you or your readings.
We may also disclose data if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to protect it. We don't share it with anyone else.
International transfers
Our database and photo storage are in the EU. Some providers above (Anthropic, Apple, Google, Expo, Cloudflare) process data in the United States or other countries. When data leaves the EEA, the UK or Türkiye, we rely on the safeguards the law provides, such as the European Commission's standard contractual clauses, the EU–US Data Privacy Framework where the provider is certified, and for Türkiye the standard contracts under Article 9 of the KVKK. You can ask us for a copy of the relevant safeguards.
How long we keep it
| Data | How long |
|---|---|
| Profile, readings, photos, predictions, credits, plans, invites | As long as your account exists. A reading you delete is removed with its photo at once. |
| Guest accounts (never signed in, never purchased) | Deleted with all their data after 30 days without use |
| Usage events and error reports | Up to 24 months, and deleted with your account |
| Photo and data sent to Anthropic for a reading | Not used for training; kept by Anthropic for up to 30 days, longer only if needed to investigate a breach of its usage policies |
| Server logs | A few days |
| Emails you send us | As long as needed to help you, then up to 2 years |
| Records we must keep by law | For the period the law sets |
| Data on your phone | Until you delete it in the app or delete the app |
Your rights
Depending on where you live, you have the right to:
- know whether we process your data and get a copy of it;
- have it corrected if it is wrong (you can edit your profile in the app);
- have it deleted;
- restrict or object to processing based on our legitimate interests;
- receive it in a portable format;
- withdraw consent at any time, without affecting what was done before;
- complain to a data protection authority, in the EU where you live or work, or in Türkiye to the Personal Data Protection Authority (KVKK).
To use any of these rights, write to hello@skycup.app from the email address linked to your account, or tell us your account details so we can find you. We answer within 30 days and may ask you to confirm it is you. It costs nothing.
Deleting your data
In the app, open Profile → Delete my data. This deletes your account, profile, readings, photos, credits and usage events from our servers, revokes Sign in with Apple, and clears everything Skycup stored on your phone. It can't be undone. Unused credits and the rest of a plan are lost; to stop a subscription from renewing, cancel it in your App Store or Google Play settings as well.
Without access to the app, see Delete your data. Your invite stays counted for a friend who joined with your code, without anything that identifies you.
Children
Skycup is for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
Security
Data travels encrypted (TLS). Each account can only reach its own data, enforced by the database itself; photos are in private storage and shown through links that expire. Payments, money and limits are checked on the server, never trusted from the app. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires. To report a vulnerability, see Support.
This website
skycup.app sets no cookies, runs no analytics or trackers and loads nothing from third parties. Our host, Cloudflare, processes your IP address and request details to deliver the pages and protect the site from attacks.
Changes
We will update this policy when Skycup changes, and change the date at the top. If a change matters for you, we will tell you in the app before it applies.
Contact
Ali Şahin, Türkiye
hello@skycup.app