Privacy Policy
Mystic Lens is built so that the most personal thing it touches — your face — never leaves your phone.
The short version. Your selfie is analysed on your device and is never uploaded, never saved, and never shown to anyone. We have no accounts, no logins, and no analytics or tracking of any kind. We cannot identify you.
Your photo
When you take or choose a selfie, Apple's Vision framework measures it entirely on your device. The app reads facial landmarks and derives a handful of descriptive qualities from them — how open your eyes are, the curve of your mouth, how level your head is, the dominant colour around you.
The image itself is held in memory only for as long as that measurement takes. It is not written to disk, not stored in the app, and not transmitted anywhere. Closing the app discards it. We never receive it and could not produce it if asked.
What is sent when the oracle speaks
If you have an active subscription, the app can ask our server to voice your reading in richer prose. What it sends is a small set of words, not measurements — roughly 1.4 KB of text describing the reading:
- Descriptions of the qualities above, as plain phrases such as "steady", "wide awake", or "close to even" — never numbers, never landmark coordinates, never anything from which a face could be reconstructed.
- Your sun sign and its traditional associations.
- The current moon phase, the tarot cards drawn, and the meanings of your numerology numbers.
Your date of birth is never transmitted. It stays on your device; only the resulting sun sign is sent. Your name is never collected at all — the app never asks for it.
Our server passes this text to Google's Gemini API, which writes the prose and returns it. Google processes it to generate that response under the Gemini API terms. Because the request contains no identifiers, it cannot be linked back to you.
If you have no subscription, or if the network is unavailable, the app composes the entire reading on your device and sends nothing whatsoever.
What stays on your device
Stored locally in the app, and never uploaded:
- Your date of birth, if you enter one.
- Today's reading and your saved reading history.
- Your preferences, such as the daily reminder time.
Deleting the app erases all of it. There is no cloud copy to delete because there was never a cloud copy.
Verifying that a request is genuine
To stop others from abusing the service we pay for, the app uses Apple's App Attest. Your device proves it is running a genuine copy of Mystic Lens by signing each request with a key held in its Secure Enclave. We store that key's public identifier and a request counter so we can enforce daily limits.
This identifier is generated for this purpose alone. It is not your Apple ID, not your device's serial number, and not usable to identify you or track you across apps or websites. It expires automatically after a period of inactivity.
Subscriptions
Purchases are handled by Apple; we never see your payment details. To confirm a subscription is active, the app sends Apple's signed receipt to our server, which verifies Apple's signature. We record only the anonymous transaction identifier it contains, so that one subscription is not shared across unlimited devices.
No tracking
Mystic Lens contains no analytics, no advertising, no third-party trackers, and no crash-reporting SDKs. We do not build a profile of you, and we do not sell or share data — we hold nothing that could be sold.
Notifications
If you allow them, daily reminders are scheduled locally by your device. No push server is involved and no notification data reaches us. You can turn them off in iOS Settings at any time.
Children
Mystic Lens is not directed at children under 13, and we do not knowingly collect information from them.
Your rights
Because we hold no personal information about you, there is nothing for us to export, correct, or delete on request. To remove everything the app holds, delete the app from your device.
Changes
If this policy changes materially, we will update the date above and note the change in the app release notes.
Contact
Questions about privacy: privacy@mysticlens.app