Legal

Your data
belongs to you

Last updated: 23 March 2026

We wrote this in plain language because you deserve to understand exactly what happens with your birth data, journal entries, and dreams — not just check a box. If anything here is unclear, email us.

The short version: Your journal entries and dream logs are encrypted and used only to personalise your experience inside the app. We never sell your data. We never use it to train external models. You can delete everything at any time.

1. Who we are

Pneuma is operated by Parallel Warrior Unipessoal Lda, a company registered in Portugal. Our registered address is in Portugal and we are subject to Portuguese and European Union law, including the General Data Protection Regulation (GDPR).

We are the data controller for all personal information collected through the Pneuma app and website.

Contact: main@pneumaapp.com

2. What we collect

Account and identity data

Birth data

This data is required to generate your natal chart, numerology profile, and personalised guidance. Without it, the app cannot function.

Location data

We do not use device GPS or track your location passively. You provide your current location manually, and you can update or remove it at any time.

User-generated content

Usage data

Usage data is collected under anonymous identifiers. It is never linked to your name or email in our analytics systems.

3. How we use your data

To provide the service

Your birth data, numerology, and current transits are used to generate your natal chart, personal forecasts, astrocartography maps, and guidance from The Oracle. Without this data, the app cannot personalise anything.

To personalise your experience over time

Your journal entries and dream logs are used to identify patterns and themes, which are then surfaced back to you through The Oracle and your monthly summaries. This processing happens to serve you — not to build advertising profiles or train external systems.

To maintain and improve the app

Anonymous usage data (which features are used, where errors occur, where users drop off) helps us fix bugs and improve the experience. This data cannot be traced back to individual users.

To manage your subscription

RevenueCat processes your subscription status. We receive only the entitlement status (whether you are premium or not) — not your payment card details, which are handled entirely by Apple.

Our legal basis (GDPR)

4. What we never do

We want to be unambiguous about this.

5. Your journal and dreams

We understand that journal entries and dream logs are among the most personal things someone can write. We treat them accordingly.

Encryption

All journal entries and dream logs are encrypted at rest on our servers. The encryption is applied before storage, meaning the raw text of your entries is not readable by our team in the normal course of operations.

How The Oracle uses your content

When you ask The Oracle a question, it may draw on themes and patterns identified in your journal and dream history to personalise the response. This processing occurs inside our system using your content on your behalf. The Oracle does not send your raw journal text to external services — it works with derived patterns and themes.

Your consent

During onboarding, you give explicit consent to allow your journal and dream content to be used for personalised guidance. You can withdraw this consent at any time in Settings → Privacy → Journal personalisation. Withdrawing consent means The Oracle will no longer draw on your journal history, but will continue to work from your birth data and transits.

6. Third-party services

Pneuma uses a small number of carefully selected third-party services to operate. Each is listed here with what data they receive.

RevenueCat

Subscription management. RevenueCat receives an anonymous user identifier and your subscription status. It does not receive your name, birth data, journal content, or email address. RevenueCat Privacy Policy.

Sentry

Crash reporting and performance monitoring. Sentry receives anonymous crash logs containing device type, iOS version, app version, and error details. It does not receive your name, birth data, or any personal content. All Sentry data is stored in the EU. Sentry Privacy Policy.

PostHog

Product analytics. PostHog receives anonymous usage events (which features were used, onboarding completion, session counts) linked to an anonymous random identifier — never to your name or email. PostHog is self-hosted in the EU. PostHog Privacy Policy.

Apple

If you pay via the App Store, Apple processes your payment and provides us only with confirmation of your purchase and subscription status. Your payment card details are never visible to us. Apple's data practices are governed by Apple's Privacy Policy.

Guidance processing

The Oracle uses a large language model to generate responses. Your questions and the relevant context (chart data, transit information, anonymised patterns from your history) are sent to this service to generate a response. Raw journal text is never sent. We have a data processing agreement in place with this provider that prohibits them from using your content for model training.

7. Your rights under GDPR

As a user in the European Union (and as our default standard for all users globally), you have the following rights:

Right of access

You can request a copy of all personal data we hold about you. Email us at main@pneumaapp.com and we will respond within 30 days.

Right to rectification

You can correct any inaccurate data directly in the app via your Profile settings, or by contacting us.

Right to erasure ("right to be forgotten")

You can delete all your data at any time from within the app: Profile → Settings → Legal & Privacy → Delete My Data. You will be asked to confirm by typing DELETE. This permanently removes your account, birth data, natal chart, journal entries, dream logs, Oracle conversation history, and all derived data. This action is irreversible.

Right to withdraw consent

You can withdraw your consent to journal personalisation at any time via Settings → Privacy → Journal personalisation. This does not affect the lawfulness of processing before withdrawal.

Right to data portability

You can request an export of your personal data in a machine-readable format. Email us at main@pneumaapp.com.

Right to lodge a complaint

If you believe we have mishandled your data, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.

8. How long we keep your data

We keep your data for as long as you have an active Pneuma account. If you delete your account, all personal data is permanently deleted from our systems within 30 days, except where we are required by law to retain certain records (for example, transaction records for tax purposes, which are retained for 7 years as required by Portuguese law).

Anonymous usage analytics (PostHog) are retained for up to 1 year.

Crash logs (Sentry) are retained for 90 days.

9. Security

We take the security of your data seriously. Our measures include:

No system is perfectly secure. If you become aware of a security issue, please contact us immediately at main@pneumaapp.com.

10. Children

Pneuma is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account promptly.

11. Contact us

If you have any questions about this privacy policy, want to exercise your rights, or have a concern about how we handle your data, please contact us:

Parallel Warrior Unipessoal Lda
Email: main@pneumaapp.com
Portugal, European Union

We aim to respond to all privacy-related requests within 5 business days, and within 30 days at the latest as required by GDPR.

Changes to this policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via a push notification or in-app message. The date at the top of this page shows when it was last updated. Continued use of the app after changes constitutes acceptance of the updated policy.