Privacy Policy
Last updated: April 20, 2026
Sage Muni ("the app") is operated by Disirius Pte. Ltd., a company registered in Singapore ("we", "us", "our"). This policy explains what data we collect, how we use it, and your rights.
Contact: support@sagemuni.com
1. What We Collect
Stored on your device only
The following data never leaves your device permanently. It is stored in your phone's local database or your browser's storage:
- Birth details — your name, date of birth, time of birth, and place of birth
- Chat conversations — all messages between you and the sage
- Your reading — the full personalized reading text and sections
- Circle members — names, birth details, and relationship labels of people you add to your Circle
- Local memories — facts extracted from your conversations (e.g., "works in finance", "moved abroad at 25")
- Question cards — personalized questions generated for your feed
Sent to our servers temporarily (auto-deleted within 24 hours)
When you use the app, the following is sent to our servers to compute your chart and generate responses. This data is automatically purged within 24 hours:
- Distilled conversation facts — short, non-identifying summaries (e.g., "career change around age 30"). These do not include your name, birth details, or conversation text.
- Reading summaries — condensed section titles and key points, without personal identifiers
- Thread digests — topic summaries and emotional tone from conversations
- Chart computation results — planetary positions calculated from your birth data. The birth date, time, and place themselves are not stored on our servers.
Stored on our servers persistently
- Email address — used for authentication and account recovery
- Account credentials — securely hashed passwords or OAuth provider tokens
- Usage counters — how many questions you've asked today (a number, nothing more)
- Subscription status — your plan tier, Stripe customer ID, and billing period
- Engine calibration — anonymous corrections and feedback signals used to improve astrological accuracy. These contain no personal information.
- Encrypted backups — if you use the backup feature, an encrypted blob is stored on our servers. We cannot read or decrypt it. Only your device holds the key.
2. How We Use Your Data
- Chart computation — your birth details are used on-device and sent to our server to calculate planetary positions, dasha periods, and transit data
- Reading and conversation — chart facts (not birth details) are sent to AI language models to generate your reading and respond to your questions
- Personalization — distilled memories improve the sage's understanding of your life context across conversations
- Billing — your email and Stripe customer ID are used to manage your subscription
- Service improvement — anonymized usage analytics help us understand which features are used and how to improve the app
3. Third-Party Services
We use the following third-party services to operate Sage Muni:
| Service | What they receive | Purpose |
|---|---|---|
| AI language model providers | Chart facts (planetary positions, dignity, aspects) and conversation context, with names and birth details stripped before transmission | Generate readings and chat responses. They do not receive your birth date, time, or place. All providers operate under no-training, no-retention agreements: your data is not used to train models and is not stored by the provider after the response is returned. |
| Stripe | Email, name, payment method | Process subscriptions and payments. See Stripe's privacy policy. |
| Mailgun | Email address | Deliver one-time login codes. See Mailgun's privacy policy. |
| PostHog | Anonymized usage events (e.g., "reading generated", "thread created") | Product analytics. No personal information, birth data, or conversation content is sent. See PostHog's privacy policy. |
| Apple / Google | Standard OAuth data if you sign in with Apple or Google | Authentication only. See their respective privacy policies. |
We do not sell your data to anyone.
4. Circle Members
When you add someone to your Circle, their birth details (name, date, time, place) are stored only on your device. We do not collect, store, or process Circle members' personal information on our servers.
When you view a Circle member's reading or compatibility analysis, their chart facts (planetary positions) are sent to our servers temporarily for computation, following the same ephemeral processing described above.
By adding someone to your Circle, you represent that you have their knowledge and permission to share their birth details with this app.
5. Data Retention
| Data | Where | How long |
|---|---|---|
| Birth details, conversations, readings | Your device | Until you delete the app or reset your data |
| Ephemeral server cache (memories, digests, reading summaries) | Our servers (D1) | Auto-deleted within 24 hours |
| Account data (email, credentials) | Our servers (D1) | Until you delete your account |
| Subscription and billing records | Our servers + Stripe | Retained per legal and tax requirements (typically 7 years) |
| Engine calibration data | Our servers (D1) | Indefinite (contains no personal information) |
| Encrypted backups | Our servers (D1) | Until you delete your account |
| Analytics events | PostHog | 12 months |
6. Your Rights
You have the right to:
- Access your data — most of your data is already visible on your device. For server-side data, contact us.
- Correct inaccurate data — update your birth details or profile in the app at any time.
- Delete your data — use "Delete Account" in Profile to permanently remove all server-side data. Use "Reset All Data" to clear your device.
- Export your data — contact us for a copy of your server-side data.
- Withdraw consent — stop using the app at any time. Delete your account to remove all data.
To exercise these rights, contact us at support@sagemuni.com.
7. Account Deletion
You can delete your account at any time from the Profile screen in the app:
- Go to Profile → Delete Account
- Confirm your intent
- Enter the verification code sent to your email
- Your account and all associated server data will be permanently deleted
This action deletes:
- Your user account and login credentials
- All server-side memories, reading summaries, and conversation digests
- Your subscription (cancelled with Stripe)
- Your Stripe customer record
- Saved chart data in our cache
- Encrypted backups
Your on-device data (conversations, readings, Circle members) is also cleared during this process. This action is irreversible.
8. Children
Sage Muni is not intended for users under the age of 16. We do not knowingly collect personal information from anyone under 16.
If you believe that a person under 16 is using Sage Muni, please contact us at support@sagemuni.com and we will promptly delete their account and data.
9. Security
We take the security of your data seriously:
- On-device storage — your birth details and conversations are stored in your device's local database, not on our servers
- Encrypted transit — all data sent between your device and our servers uses HTTPS/TLS encryption
- Encrypted backups — backup data is encrypted on your device before being sent to our servers. We cannot read or decrypt it.
- Ephemeral server caching — server-side data is automatically purged within 24 hours
- Hashed credentials — passwords are cryptographically hashed and never stored in plain text
- Session management — sessions expire automatically and can be revoked
10. Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you through the app. Your continued use of Sage Muni after changes are posted constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this privacy policy or your data, contact us:
Disirius Pte. Ltd. Singapore Email: support@sagemuni.com
