Privacy notice

Who controls Leyra data

Leyra.uk is operated from the UK. For privacy questions, data requests, account deletion requests or concerns, contact support@leyra.uk.

This notice is written for the current launch service and will be updated when legal entity, vendor or infrastructure details change.

What Leyra collects

• Account details: email address, display name, encrypted password record, confirmation state and account settings.
• Birth and profile details: birth date for account readings, and optional birth time/place, tone preference, focus area and reflective/profile answers.
• Reading and ritual history: saved readings, moon/tarot activity, journal/check-in signals, profile-memory states and related preferences.
• Subscription details: Leyra plan, Stripe customer/subscription references, subscription status and billing-portal state. Leyra does not store full card details.
• Email preferences and delivery signals: whether ritual email is enabled, delivery mode, frequency, email kind, optional weekly reflection email day and preference changes.
• Feedback and support context: message, category, optional contact email if supplied, page path, browser/device context and account tier when signed in.
• First-party analytics: only after optional analytics consent, Leyra records first-party page/event data such as path, page title, referrer without query strings, viewport, language, timezone, anonymous session ID and event labels.
• Public share-card signals: Leyra may record privacy-safe card views, channel clicks, copy/download events and free-reading/pricing CTAs after analytics consent. These events use public paths and labels, not private reading text or account memory.
• Home Screen install and offline app signals: Leyra links app-install metadata, may remember if you dismiss the install suggestion in that browser, and registers a service worker that caches only public static shell assets plus a safe offline page. Push subscription device reminder details is collected only when a signed-in user explicitly enables browser reminders on that device.
• Safety and quality records: AI safety-review rows can include prompt/output excerpts so unsafe or low-confidence readings can be investigated and improved.

Why Leyra uses data

Leyra uses data to provide accounts, confirm email addresses, generate sign-based and personalised readings, remember optional profile context, manage subscriptions, deliver selected emails, keep the service secure, answer support requests, improve usability during launch and maintain safety guardrails.

The usual lawful bases are contract where data is needed to provide the service you request, legitimate interests for security, support, safety and product-quality work, consent for optional analytics storage, and legal obligation where records must be kept for accounting, tax, dispute or regulatory reasons.

Home Screen install, static cache and push reminders

The installable web app layer lets Leyra be added to a phone Home Screen using browser support. Leyra now registers a conservative service worker so static shell assets and a no-private-data offline page can load more reliably. Personal readings, account pages, billing pages, profile memory, saved history, tarot results, analytics/API responses and private admin routes are excluded from the cache by design.

Leyra supports an explicit browser push opt-in for signed-in users. When you enable reminders, Leyra stores the the device reminder details needed to manage that reminder so that reminders can be managed safely. Leyra does not use push for third-party advertising and does not include private reading text in notifications. You can disable the current browser subscription from your profile delivery settings or your browser/device notification settings. Reminder preferences also store morning/evening channels, quiet hours and delivery records before scheduled pushes are enabled.

Public share cards

Daily, moon and tarot share cards are public growth surfaces. They are generated from public date/sign/moon/tarot copy only and must not include private reading text, journal answers, profile-memory answers, paid tarot history, email addresses, confirmation tokens or billing context.

Weekly reflection

Weekly reflection summaries and optional weekly reflection emails use aggregate theme signals such as repeating theme, one thing that helped and one question to carry. The email copy avoids raw private journal answers and can be paused from profile delivery settings.

AI, vendors and sharing

Leyra uses AI-assisted writing inside safety rules. Sensitive account-memory prompts are handled inside Leyra’s approved private AI setup unless a future policy clearly says otherwise. Leyra aims to minimise prompt context and avoid sending more profile memory than is needed for the reading tier and feature being used. Pro tarot keeps card selection deterministic, but may use the approved Leyra AI setup to shape the interpretation text from the chosen card, orientation and relevant profile context.

Leyra may also use infrastructure, email-delivery and payment vendors. Stripe handles checkout, customer billing and card details. Leyra keeps subscription references and status, not full card numbers.

Retention

Account, subscription and reading records are retained while the account is active and for a reasonable period afterwards where needed for support, safety, billing, fraud prevention or legal obligations. Launch analytics and feedback are intended for short operational review rather than permanent profiling. Self-service export, profile-memory deletion, account deletion/deletion-request handling, anonymisation and retention operations are available from signed-in privacy controls.

Your controls and rights

You can edit email preferences, profile basics and optional profile-memory material inside your account. Signed-in users can also open Privacy controls to download a data export, delete profile memory, start account deletion and see what account-linked records exist. Leyra also publishes a public account deletion and Meta app data deletion instructions page. You can also contact support to request access, correction, deletion, export or restriction of your data.

UK users can raise unresolved data-protection concerns with the Information Commissioner’s Office. Please contact Leyra first where possible so the issue can be investigated quickly.

Age and underage accounts

Leyra is intended for adults. If you are under 18, do not create a paid account or provide reflective profile answers without appropriate parent/guardian involvement. If Leyra becomes aware that an account has been created by someone who should not be using the service, the account may be restricted or deleted.

Professional-advice boundary

Leyra readings are for reflection, wellbeing and entertainment. They are not medical, legal, financial, emergency, therapy or professional advice. In an emergency or crisis, contact local emergency services or an appropriate crisis-support organisation.