Privacy Policy

Plutto, by xooteq Lab · Last updated: 13 October 2026

Plutto ("we", "us", "our") is an evolving encyclopedia of humanity's ancient wisdom traditions, developed by xooteq Lab — classical systems of pattern and meaning, including Vedic (Jyotish), Western (Hermetica), and Chinese (BaZi) traditions plus numerology, compiled with precise astronomical computation and modern AI for personal application, with an AI oracle you can consult in text and voice. This policy explains what we collect, why, how it is shared, and the choices you have. By using the app you agree to this policy.

Information We Collect

Account information — your email address and a user identifier, provided when you sign in with Apple or Google, and (if you provide it) your name.
Birth & profile details — your date, time, and place of birth, including the geographic coordinates of that place, and your chosen tradition and personality preferences. These are the required inputs for the app's chart, timing, and number calculations across the traditions. (We use the birth place you enter; we do not continuously track your device's real-time location.)
Content you provide — the questions and messages you send the AI oracle, and voice input you choose to speak. Microphone audio is captured only while you are using the voice feature and is processed to text to generate a response.
Subscription status — whether you have an active subscription, plus transaction identifiers, managed by the app stores and our payments processor. We never receive or store your card or full payment details.
Device, usage & diagnostic data — app version, device type, language, general interaction and crash diagnostics, used to operate, secure, and improve the app.

How We Use Your Information

To compute your birth chart and generate personalized readings across each tradition and the numbers.
To authenticate your account and sync your data across your devices.
To provide the AI oracle, voice conversation, and personalization features.
To process, validate, and restore your subscription, and to prevent fraud or abuse.
To maintain, secure, debug, and improve the app and our content.
To create and use de-identified or aggregated information (which cannot reasonably be used to identify you) for any purpose, including analytics and improving our services and models.

We do not sell your personal data. To measure our own advertising we share a limited set of events with Meta, with your permission where it is required, as described under Advertising Measurement. We never share the questions you ask, your readings, your conversations, your voice, or your birth details.

Third-Party Services

We share the minimum necessary data with trusted providers who process it on our behalf, only to deliver the service:

Apple & Google — sign-in and, for purchases, the App Store / Google Play.
Supabase — secure account authentication and data hosting.
RevenueCat — subscription management and receipt validation.
Razorpay — processes subscription payments made on our website (plutto.space). Razorpay receives your payment details directly; we receive only the subscription and payment identifiers and the status of each charge.
AI model & speech providers (e.g. OpenAI, accessed via OpenRouter) — to generate oracle responses from your questions and chart context, and to convert voice to text and text to speech. Your inputs are sent to produce a response.
Google Places — to look up your place of birth when you search for it.
Meta Platforms — to measure our advertising (see below).

Astronomical calculations use the Swiss Ephemeris on our own servers, with no third-party data sharing. Our providers may process and store information in countries other than your own; we rely on their safeguards for such transfers.

Advertising Measurement (Meta)

We advertise Plutto on Facebook and Instagram, and we share a limited set of events with Meta Platforms to learn which of our ads lead people to sign up and subscribe, and to show our ads to people likely to be interested. Where the law requires your consent, nothing is shared until you give it: on our website for visitors from the EU, the EEA, the UK and Switzerland; on iPhone through Apple's "Allow tracking" prompt, for everyone; and on Android for people in those same regions.

What is shared — visits to our website and the pages viewed; use of our free calculators; signing up (with your email address, which is hashed with SHA-256 before it leaves your device); opening a checkout; and starting or renewing a subscription (the plan, its price and currency). With these, the identifiers Meta uses to match an event to an ad: your IP address and browser or device type, Meta's own cookies on our website, and on phones Meta's app identifier and, where you allow it, your device's advertising identifier. RevenueCat sends App Store and Google Play subscription events to Meta on our behalf.
What is never shared — the questions you ask, your readings and conversations, your voice, and your date, time and place of birth.
Meta's use — Meta processes this information under its own terms and Privacy Policy, and may combine it with information it holds about you to measure and deliver ads.

Data Storage & Retention

Your data is stored securely and retained while your account is active and as needed to provide the service or to meet legal obligations. Backups and legally required records may persist for a limited period after deletion before being overwritten.

Your Rights & Choices

Delete your account — at any time, in the app: Settings → Delete Account. This permanently removes your profile, conversations, and account from our active systems. You may also request deletion by email (below).
Access & correction — you can view and edit your profile in the app, or contact us for a copy of your data.
Subscriptions — manage or cancel anytime in your Apple ID or Google Play account settings.
Advertising measurement — on our website, use "Cookie choices" at the foot of any page to allow or stop it. On iPhone, Settings → Privacy & Security → Tracking. On Android, your device's Ads settings let you delete or reset the advertising identifier. You can also manage how Meta uses your information in your Facebook or Instagram ad preferences.
Sign out — you can sign out or stop using the app at any time.

Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Plutto is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.

Purpose & Disclaimer

Plutto is an exploration of traditional knowledge systems, provided for personal insight, reflection, and cultural interest. Readings and oracle responses are interpretations of those traditions — they are not professional advice and are not a substitute for medical, psychological, legal, or financial advice. We make no guarantees about accuracy or outcomes; decisions you make are your own responsibility.

Changes

We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date and, where appropriate, by notice in the app.

Contact

Questions, or data access/deletion requests? Email support@plutto.space.