Privacy

Your life is not advertising inventory.

Novamris is operated by Rookvell LLC, based in Texas, United States. Rookvell is responsible for the personal information described in this notice. This notice covers the Novamris website, apps and AI-assistant connections; a feature described as optional or available only in some versions is processed only when that feature is available and you use it.

Legal and privacy correspondence
Rookvell LLC
5900 Balcones Drive, STE 100
Austin, TX 78731, United States
Correspondence address, not a walk-in support office.
+1 737 439 4532

Your account records are private by default. We use them to provide the features you request, secure your account and operate the service, not to sell your personal history or build an advertising profile. Privacy and deletion questions can be sent to support@rookvell.com.

What the service processes

Account details: email, display name, protected password credentials, sign-in and session records, preferences, consent history, plan access and usage counts.
Birth details you enter: date, time or uncertainty range, birthplace and its coordinates, historical timezone, and your current profile timezone. These support chart and timing calculations; birthplace entry is not live device-location tracking.
Records you choose to provide: messages, explicit web-search requests and their cited results, confirmed calendar events and notes, review answers, prediction records and outcomes. These can contain sensitive personal details.
Derived records: charts, selected timing periods, calculation versions, source references and signed prediction receipts. They remain associated with your account.
Operational information: network requests, security checks, request identifiers, pseudonymous diagnostic identifiers, error categories, timings and usage. Application diagnostics are designed to exclude message text, birth details and event notes.
Support correspondence: your contact details, the question or report you send, and the information needed to investigate and respond. Please do not send passwords or unnecessary private history. Support email is routed through Cloudflare to the operator’s Microsoft Outlook mailbox.

Please avoid entering information you do not need for reflection, including identifiable information about other people. A message is processed when you send it, even if you never save it as an event. Leaving a message unsaved as an event does not mean the message was unprocessed.

New Health-category events and health-specific event prompts are not offered. Existing Health records are not silently erased: they remain available for viewing, corrections, export and deletion under the same record-handling rules as other saved events. Ordinary messages and notes remain available and are not automatically screened to remove health information. Please do not submit medical records or other unnecessary sensitive details. This is not a health-record service, and a saved-event confirmation is not a blanket permission for every kind of sensitive processing.

Why we use information

We use account and profile information to provide your requested chart, calendar and saved records, authenticate access, and administer a subscription you buy. Birth details are needed for personalized calculations; optional messages, event notes and microphone use are not required to create a basic chart. Information also comes from your device, calculated results and the payment or delivery providers described below.

Where European or UK data-protection law applies, our bases are performance of our agreement for necessary account and requested-service processing; your consent for optional AI processing, personal memory and promotional notifications; and our legitimate interests in securing the service, preventing abuse, resolving support issues and understanding subscription performance, subject to your rights and interests. We also process records necessary to meet an applicable legal obligation, such as payment recordkeeping or responding to a valid legal request. These bases do not by themselves authorize special-category processing. Research is inactive, not another use authorized by accepting Terms. You may withdraw an optional permission or object to processing based on legitimate interests using the controls or contact route below.

How people find Novamris

On our public website, we count page views and clicks to the web app or Google Play by approved campaign labels and button placement. These are daily totals, not unique people, installs or purchases. This measurement uses no cookies, browser storage or visitor identifiers, and does not include your account, email, birth details, events or Luna messages. We keep a 90-day window of these totals, with older days removed by daily cleanup.

Optional mobile notifications

When configured for your installed app, notifications require your choice in Account and your device’s permission. Daily Focus, selected period updates and occasional promotional Luna invitations are separate choices, initially off. You can change the time, timezone, quiet hours and message previews, pause delivery or turn categories off in Account → Notifications. Device settings can also block notifications.

Cloudflare processes your choices, delivery records and an encrypted device delivery token. Expo Push Service and Apple or Google receive the delivery token, notification text and an opaque notification identifier. With previews enabled, the text can include your selected Daily Focus sentence. It does not include your birth details, saved events or Luna messages. Turning previews off uses generic notification text. Your device controls what appears on its lock screen; notification delivery is not end-to-end encrypted.

Opening a Luna invitation only prepares an editable question. It does not send a message to AI. Turning notifications off or signing out stops future eligible sends, but cannot recall a notification already handed to a delivery provider. A provider receipt is not proof that you saw or read it. See Expo’s privacy policy for its processing practices. Notification availability depends on your installed app and whether delivery is enabled for it.

Luna and service providers

Luna and microphone dictation require a separate AI data-processing choice before first use. You can decline and still use your chart and calendar, or turn the permission off in Account. Account Terms acceptance, Personal memory and research permission are recorded separately.

Luna is an AI assistant, not a person. Cloudflare provides application hosting, storage, authentication email delivery and the AI Gateway. When you send a message, OpenAI processes the message and bounded conversation context through that gateway. Relevant chart or timing results, saved review answers, and events permitted by personal memory may be included to answer your request. A current-web search you explicitly request sends a minimized query to the search service through OpenAI.

We disable AI Gateway content logging and shared response caching, and request that model responses are not stored for later retrieval by the provider. These settings do not mean that every provider keeps no data. Security and abuse monitoring and provider processing state can have separate retention. Service providers may process data outside your country, including in the United States. Birthplace search uses our hosted city dataset, not an external geocoding request.

Luna uses Cloudflare-managed access to OpenAI. More information about provider processing is available in Cloudflare’s AI Gateway terms and OpenAI’s API data controls. Contact support for information about processing locations and applicable international transfer safeguards. The request settings described here do not promise that all processing stays in your country or that providers immediately erase every record.

To reuse repeated parts of a conversation, OpenAI may cache processing state for the instructions, messages and tool results sent to answer you. This is not a saved answer or permission to train on your records. The requested cache lifetime is at least 30 minutes after its latest write or reuse and may be longer; it is not a deletion deadline. OpenAI does not offer manual clearing of this cache, so deleting your Novamris account or turning personal memory off cannot immediately clear it. Personal memory and research choices remain separate from processing the messages you send.

Connections to other AI assistants

When you use Novamris through another AI assistant, that assistant sends the information needed for the tool you request. Guest chart calculations use the birth details you explicitly supply. Novamris does not create a guest account or save a guest chart or interpretation. An encrypted chart context is returned to the conversation and can be reused for two hours. Expiry stops further use of that context; it does not delete the assistant provider's conversation history. Normal operational and security processing described above still applies.

Connecting an existing Novamris account is optional and uses a separate authorization screen. An authorized assistant can request your saved chart, calculated timing periods, an opaque account identifier and your display name. It cannot read your email, stored birth coordinates or birth time, private events or Luna conversations, or change records or payments. The assistant provider processes the readings under its own terms and privacy policy. These tools do not send a Luna message or use your Luna allowance.

Review or disconnect access at Connections. Disconnects can take time to propagate and cannot remove readings already received by an assistant. Connection metadata is included in account export; access credentials are not.

Optional microphone dictation

You can type without microphone access. Tapping the microphone requests device or browser permission if needed, then opens recording controls in the composer. A first-use inline hint says: “Audio is transcribed online. Review before sending.” Stop recording, or reaching the 60-second limit, sends the audio to Cloudflare Workers AI, using its Cloudflare-hosted Whisper model, to turn speech into an editable draft. Dictation never sends a Luna message automatically; review or edit the text before choosing Send. Cancel discards the recording. Avoid recording other people or unnecessary sensitive details.

The browser holds audio temporarily in memory. The native app uses a temporary cache file and removes it before uploading the audio held in memory. Cancel, leaving the screen or backgrounding starts capture cleanup and cancels an in-flight request; cancellation cannot undo audio already transmitted. Native cleanup failures are shown while the screen is active. Reopening dictation retries removing leftover feature recordings older than ten minutes. Novamris does not save dictation audio or the returned transcript as server content. If you choose Send, the edited text becomes a normal Luna message under the conversation processing and retention rules below.

Limited account-linked request identifiers, request hashes, status and attempt counts are retained for duplicate protection, security and usage limits, not a voice or training dataset. Duplicate-protection records expire after 24 hours and are removed by scheduled cleanup; usage counts remain with the account. Dictation does not enable personal memory or research permission and does not use a Luna message allowance. Cloudflare’s Workers AI data policy describes its processing and says customer content is not used for training or service improvement without explicit consent. This is not a guarantee that every provider retains no data; provider terms and security obligations still apply.

Subscriptions and payment providers

Where purchases are available, plan, checkout, restore and subscription-management features use RevenueCat. We give RevenueCat an opaque identifier linked to your Novamris account, not an anonymous identity. RevenueCat processes purchase receipts or tokens, product and subscription identifiers, store, renewal, expiry, cancellation and refund status, and technical information needed for its service. This supports access verification, restoring purchases, billing support and subscription reporting. RevenueCat also records when its paywall is shown or closed and related purchase interactions, linked to that identifier, for subscription and paywall analytics. Novamris stores subscription status and limited transaction metadata to keep plan access in sync.

Apple App Store and Google Play handle their respective in-app purchase flows. Where web checkout is offered, it uses RevenueCat with Stripe for payment processing. Payment and contact details entered at checkout are processed by the relevant providers; Novamris does not store full payment-card details. Our billing integration does not send your birth details, chart, saved life events or Luna conversations to these providers. See RevenueCat’s privacy information and Stripe’s privacy policy for their data practices.

Deleting your Novamris account does not cancel a subscription or automatically delete the providers’ billing records. Manage or cancel a subscription through the platform where you purchased it, using the subscription-management option in Account. Providers may retain records for their legal obligations, disputes and payment administration. Contact Novamris support for a billing-data rights request; this notice does not promise immediate removal from every provider.

Personal memory and research

Personal memory lets Luna use your saved events for context and automatically save clearly stated, dated everyday life events you share in chat. It is off by default and separate from research permission. Free access requires neither. Luna shows a saved event so you can review, edit or undo it in Calendar. Events identified as sensitive require your confirmation before saving. Turning memory off stops future automatic saves and retrieval; it does not delete existing events or the messages you send. Earlier memory choices do not enable this new automatic-save behavior until you review and accept the updated notice.

Research permission is also off by default. Research collection is not active. Before it begins, we will explain the particular data, purpose and withdrawal process and ask for a specific choice. Saving events, First look answers or message ratings does not train Luna or change the chart calculation. Message ratings store the rating, optional reason, answer reference and limited diagnostic metadata, not a copied transcript for staff review.

If you explicitly choose Report answer, we make an encrypted copy of only the selected answer for safety review by authorized support staff. This does not share the rest of the conversation or enable research or model training. The report expires with that answer’s remaining retention period, no later than 30 days after the answer was created; deleting the conversation or account also removes access to it.

Storage and retention

Account, birth, saved event, First look and prediction records last with the account. Removing an event from Calendar hides it from normal use; its stored record and revisions can remain until account deletion. Corrections can leave version history; published predictions keep their original record while the account exists. Contact support about a request to erase particular underlying records.
Conversation text expires from available history after 30 days and is removed by scheduled cleanup. Answer ratings expire with the original answer’s 30-day window. Conversation metadata and sanitized calculation or tool evidence can remain until account deletion.
Account export downloads require sign-in and expire after seven days. The artifact buckets have an eight-day export-file expiry safety net; storage expiry is asynchronous, so removal may happen after that deadline. A downloaded copy remains under your control.
Web offline snapshots are optional, off by default, encrypted and expire after 24 hours. The native app does not save or restore personal offline snapshots. Both clients can keep protected pending-request records for safe retries; these are separate from offline snapshots and memory or research permission. Encrypted web retry storage is checked for expiry when read, 72 hours after its latest write; an open tab can retain pending requests longer in memory. Native retry entries are valid for 72 hours from their first creation; the whole expired entry is removed the next time the app successfully checks pending requests, including when it starts or returns to the foreground. A closed app is not woken to delete it at the deadline. Native session credentials also remain in secure device storage. Sign-out and accepted account deletion initiate local cleanup; any cleanup failure is shown rather than treated as confirmed removal. Uninstalling an app does not delete the server account.
Queue/model failure audit records have a 90-day limit; staff-access audit records have a 365-day limit. Notification delivery records have a 30-day cleanup limit; notification choices and their consent history remain until account deletion. Cleanup is scheduled, not instantaneous.
Other operational records and support correspondence are reviewed according to whether they are still needed to resolve the request or incident, verify its handling, resolve a dispute or meet an identified legal obligation. Records no longer needed for those purposes should be removed. These criteria do not authorize indefinite retention of unrelated private history. Provider-held billing and security records follow the applicable provider’s obligations and retention rules, not the app’s conversation timer.

We use encrypted transport, access controls and encryption for stored conversation text and private offline records. This is not end-to-end encryption: the service must process data to provide its features. No service can guarantee absolute security.

Sharing and staff access

Where receipt sharing is available, it requires your explicit action. A public link exposes a minimized verification record, not your name, birth details, messages or event notes. You can revoke hosted access, but cannot retrieve copies another person already saved. Authorized account-support staff can access limited account details; operations staff see restricted diagnostic metadata. The staff console does not provide a private-chat browser.

Export or delete your Novamris account

Open Account on the web to request an export or choose Delete account, then confirm. You can use the website without reinstalling the Android app. If you cannot sign in, contact support to request account deletion. We may need to verify account ownership; never send your password or an identity document in your first email.

An accepted deletion request closes account access and starts a recoverable deletion job for the account’s profiles, events, conversations, prediction chains and export files. A receipt lets you check progress; a failed or pending job is not completed deletion. The public status record contains an opaque receipt identifier and status timestamps, not your account or birth details. Any legally required retention exception must be identified, not used as a blanket reason to keep private history.

Database recovery history can contain earlier records within its 30-day recovery window. To prevent a restore from reactivating a deleted account, we retain a protected hashed account marker separately from that history. Its storage rule expires it 31 days after its latest write; storage expiry is asynchronous. The marker contains no email, birth data or conversation text. The separate non-identifying deletion-status receipt remains available so you can check the result; it is not your retained account history.

Other privacy requests and changes

You can correct profile details in Account, manage saved events in Calendar, and change memory or research preferences separately. Depending on applicable law, you may also have rights to access, portability, correction, deletion, restriction, objection, withdrawal of consent and a complaint to a privacy authority, including the authority where you live or work in the EEA or the UK Information Commissioner. Contact support to make a request, identify the records concerned, or ask us to reconsider a response. We may verify ownership and will explain our response and any applicable exception within the time required by law. Withdrawing consent does not undo processing already lawfully carried out. Exercising privacy rights is not a reason to withhold Free access.

Novamris is restricted to adults aged 18 or older. Do not create an account or submit personal data if you are under 18. Web email signup asks you to confirm that you are 18 or older using an unchecked control. Whatever sign-in method you use, including native or social sign-in, we separately record your adult attestation and current Terms acceptance before birth-profile onboarding or AI use. These are self-declarations, not identity or age verification. A birth profile does not verify the account holder's age. Contact support if you believe a child has submitted personal data. Material changes need a new revision date and clear notice; new optional uses require a separate choice, not retroactive permission inferred from an old setting.