Privacy Policy

Natal ("the App") is developed by Nigelware ("we", "our", "us"). Natal is built so your birth data stays on your iPhone. This policy explains what stays on the device, what leaves it when you use Ask the Sky, and who processes that request.

1. No account

Natal does not require a sign-up. We do not create user accounts, and we do not operate a natal-data database. Deleting the App from your device deletes the birth data, chart snapshot, and Ask history stored there.

2. Data that never leaves your device

The following is stored only on your iPhone (and, for the widget, in the App's shared App Group container on that same device). It is never uploaded to Nigelware:

• Birth data: date, time (if you enter one), place name, coordinates, and time zone.
• Your chart and Daily Sky snapshot: calculated locally with the Swiss Ephemeris bundled in the App.
• Ask the Sky transcript: saved on the device so the conversation is still there when you reopen the App. It is not sent with later questions.
• Settings: house system, morning summary time, haptics, and similar preferences.
• Natal Plus status and monthly Ask count: stored locally; Apple is the source of truth for whether a subscription is active.

Charts, transits, house ingresses, widgets, and morning summary notifications are computed on the device. They do not require a network connection.

3. Ask the Sky (the only cloud request)

Ask the Sky is optional. A request is sent only when you submit a question. The App does not send your birth date, birth time, coordinates, or place name.

What is sent:

• Your question text.
• A reduced snapshot of calculated placements: Sun, Moon, Ascendant when known, and any natal point named by the transits in view, plus those transits and house ingresses (sign, degree, house, orb, and dates). This snapshot is derived from the on-device chart. It is not a dump of the full natal chart, and it is not anonymous — it is a small set of astrological facts about a chart.
• A random per-install identifier, used only by our proxy to rate-limit abuse. It is not an account, and it is not sent on to the language-model provider.

Where it goes:

• Our proxy — a Cloudflare Worker we operate. It injects the API key, enforces daily limits (including by install and by IP address), and forwards the snapshot and question to the model. Cloudflare's processing of Worker traffic is described in Cloudflare's Privacy Policy.
• The language-model provider (currently Google Gemini). It generates the reply from the snapshot and question we send. That processing is governed by Google's Privacy Policy.

The interpreter is instructed to write only from the calculated snapshot. It cannot invent a position, aspect, or date, and it is not given the data that would let it reconstruct your birth record.

4. Place lookup

If you type a birth place or use the current-location shortcut, the App uses Apple's geocoder (CLGeocoder) so it can store coordinates and a time zone on the device. That lookup is handled by Apple, not by Nigelware. We do not receive the place string.

5. Purchases

Natal Plus is an auto-renewable subscription sold through the App Store. Payment, receipts, and restore are handled by Apple. We do not receive your name, payment card, or Apple ID. See Apple's Privacy Policy.

6. Notifications and widgets

Morning summaries and widgets are built on the device from your calculated sky. They are not sent through our servers.

7. What we do not collect

• Analytics or advertising identifiers
• Crash reports to a third-party service
• Contacts, photos, microphone, or health data
• A social graph or other people's charts

8. Children's privacy

Natal is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact

Questions: nigeldbentley@gmail.com