Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how Mazalot Inc. ("Mazalot," "we," "us," or "our") collects, uses, shares, retains, and protects personal information when you use the Mazalot mobile application (the "App"). Mazalot is a voice-first AI astrology companion available on iOS and Android. Please read it alongside our Terms of Service.

1. Who we are

Mazalot is operated by:

2. Information we collect

We collect the following categories of personal information, in each case to provide the App and the astrology companion experience.

Account and identity

• Name: how the companion addresses you.
• Phone number: used to sign you in with a one-time passcode (OTP) and to send account and session messages. Mazalot does not use passwords.
• Email address: collected if you choose to protect your account, and used for account recovery and important account notices (such as a deletion confirmation).
• Region: a country indicator derived from your phone number, used to show the right local safety and crisis resources.

Astrology inputs

• Birth date, birth time, and birth place: required to calculate your natal (birth) chart, which is the basis of the companion's insights. Your birth place is converted into map coordinates using a geolocation provider (see Section 9).
• Gender: collected during onboarding, with a "rather not say" option, because it can inform the astrology and how the companion relates to you.

Conversations and audio

• Voice audio: recordings of your voice sessions. See Section 4.
• Transcripts: text transcriptions of your voice sessions, and any text you type in the App's secondary text input.
• Memory: personal notes, themes, and summaries the companion derives from your conversations and stores long-term, including as mathematical representations called vector embeddings. See Section 6.

Meditation and scheduling

• Meditation content: personalized meditation scripts and generated audio, and any feedback you give on them.
• Scheduled sessions and reminders: the times you set for sessions and reminders, and push-notification tokens used to deliver them.

Usage, billing, and diagnostics

• Usage data: such as voice minutes used, sessions completed, and features accessed.
• Subscription and purchase data: your subscription status, minute packages, and store transaction identifiers. Payments are processed by the Apple App Store or Google Play, not by Mazalot; we do not receive or store your full payment card details.
• Analytics events: product-usage events that carry identifiers and metadata (for example which screen was used, app version, and device platform). By design, analytics never include your conversation content.
• Diagnostic data: crash and error reports, tagged only with an account identifier, never your conversation content.
• Technical data: limited technical information such as IP address may be processed incidentally by our hosting and communications providers to deliver and secure the App.

3. How we use your information

• To calculate your birth chart and generate personalized, astrology-rooted conversations.
• To operate the voice conversation in real time and transcribe it.
• To build and maintain the companion's memory so it can recognize and remember you across sessions.
• To create your daily and personal reading cards and personalized meditations.
• To schedule sessions and send the reminders and notifications you have set up.
• To authenticate you, manage your account, and process subscriptions and minute packages.
• To provide support, keep you safe (including crisis-resource responses), prevent abuse and fraud, and comply with law.
• To maintain, secure, and improve the reliability and quality of the App, including using de-identified data as described in Section 7.

4. Voice recordings and biometric information

Because Mazalot is a voice product, we collect and process recordings of your voice and transcripts of what is said, so the companion can understand you and respond, and so we can maintain safety and quality.

We do not create a voiceprint or use your voice to identify or authenticate you. Mazalot converts speech to text and generates spoken responses; it does not build a biometric identifier from your voice. If we ever introduce any feature that would create a biometric identifier from your voice, we will first obtain your separate, informed, written consent and publish a specific retention and destruction schedule, as required by biometric-privacy laws such as the Illinois Biometric Information Privacy Act (BIPA) and comparable laws in Texas and Washington.

5. Memory and how it works

Mazalot's value is that it remembers you. To do this, after your sessions we extract personal notes, themes, life events, and preferences from your conversations and store them long-term, including as vector embeddings (numeric representations that let the companion recall relevant context). We treat this "Memory" as its own sensitive category of information.

• You can exclude an individual session from memory generation using the in-session control.
• Memory is retained while your account is active. When you delete your account, the display text and the underlying embeddings are handled as described in Section 11.

6. Information about other people

Some features let you enter information about other people. For example, you may add another person's birth details to explore a relationship or compatibility reading, and the companion may note people you mention in conversation (such as a partner, parent, or friend).

• Your responsibility: by entering another person's information, you confirm that you have that person's permission, or another lawful basis, to provide it to us.
• No independent profile: we use another person's birth details only to compute charts and readings for you. We do not create an account or an independent marketing profile for a person who is not a Mazalot user.
• Their right to deletion: if you are a person whose information was entered by a Mazalot user and you want it removed, contact compliance@mazalot.ai and we will take reasonable steps to locate and delete it.
• Comparing charts directly between two Mazalot users requires the mutual, revocable consent of both users; either person can revoke it, which removes the shared view.

7. AI providers and model training

Mazalot relies on third-party artificial-intelligence providers (for the conversational voice, the language model, and the embeddings) to deliver the companion. These providers process your information as our service providers, to provide their features to us.

We may use de-identified conversation data (data from which your identity has been removed) to maintain, debug, secure, and improve the App and the quality of the companion. We do not use your information to serve you third-party advertising. Where you have excluded a session from memory, it is not used to build your memory. If we introduce any program that would use your identifiable conversations or voice to train models, we will disclose it and provide a way to opt out.

8. Service providers we share information with

We share personal information with a limited set of service providers who process it on our behalf, under contract, only to provide the App. These providers are described by category and function:

• Conversational-voice provider: powers the real-time spoken conversation and generates the companion's voice.
• AI language-model providers: generate the companion's responses and process transcripts to produce insights and memory.
• Embeddings provider: converts memory into vector embeddings so the companion can recall relevant past context.
• Hosted database and storage provider: a managed database and file storage that securely holds your account, chart, conversation, memory, and media data.
• Geolocation provider: converts your birth place into map coordinates for accurate chart calculation.
• Astrology-calculation service: computes your chart from your birth data and coordinates.
• SMS verification provider: sends the one-time passcodes and any account text messages.
• Push-notification provider: delivers the reminders and notifications you have enabled.
• Transactional email provider: sends account emails such as deletion confirmations.
• Image-generation provider: creates the artwork for your daily and reading cards.
• App-store billing (Apple and Google): processes subscriptions and purchases.
• Analytics and error-monitoring providers: help us understand reliability and detect crashes; they receive identifiers and metadata only, never your conversation content.
• Cloud hosting and infrastructure providers: run our servers and network.

We may also disclose information if required by law, to protect the rights, safety, and security of our users or the public, or in connection with a corporate transaction such as a merger or acquisition, in which case we will require the recipient to honor this Policy.

9. We do not sell your information, and we show no ads

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and the App shows no third-party advertising. Sharing information with the service providers listed above, so they can run the App for us, is not a sale.

10. Sensitive personal information

Some of what you share is sensitive: your precise birth details, your gender, the contents of your conversations, and your voice. We collect and use this information only to provide the App and the features you use, and, where a law requires opt-in consent for sensitive data, we ask for it. We do not use sensitive information to infer characteristics for advertising.

11. Data retention and deletion

We keep your personal information for as long as your account is active and as needed to provide the App. Your conversation history and memory are retained over time on purpose, because the value of the companion grows as it remembers you.

You may request deletion of your account and personal information at any time from the App's settings or by emailing compliance@mazalot.ai. When you request deletion:

• There is a 7-day grace period during which you can cancel and restore your account, in case the request was accidental. Access is suspended immediately, and we email you a confirmation.
• After the grace period, we permanently delete your identifying account data, including your name, email, phone, region, gender, and your birth chart, along with your voice-minutes ledger and notification preferences.
• To keep the service safe and functional and to meet our legal obligations, some conversation content, derived memory, and vector embeddings are anonymized rather than hard-deleted: they are disconnected from your identity so that no remaining data identifies you. As a result, details of other people you mentioned in conversation may persist in anonymized form after your account is gone.
• We retain limited records where the law requires it (for example, payment and tax records, typically for about seven years), and we keep an audit log of deletions as required by privacy law.

You can also request access to, or a copy of, the personal information we hold about you, as described in Section 12.

12. Your privacy choices and rights

Mazalot Inc. is a California corporation. Depending on where you live, you may have some or all of the following rights over your personal information:

• Know and access: what personal information we collect, use, and disclose, and a copy of it.
• Delete: personal information we have collected, subject to certain exceptions.
• Correct: inaccurate personal information.
• Limit: the use of sensitive personal information to what is necessary to provide the App.
• Portability: a copy of certain information in a portable format.
• Appeal: ask us to reconsider if we decline a request, where the law provides this right.
• No discrimination: we will not treat you differently for exercising these rights.

These rights are provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and under comparable laws in other U.S. states. Because we do not sell or share your personal information for advertising, no "Do Not Sell or Share" action is needed.

Global Privacy Control. We honor recognized opt-out preference signals, including Global Privacy Control (GPC), where your browser or device sends them.

To exercise any right, email compliance@mazalot.ai. We will verify your request against the information associated with your account before responding, and you may use an authorized agent where the law permits.

13. Push notifications and messages

We distinguish two kinds of messages. Transactional messages, such as your one-time login passcode and reminders for sessions you scheduled, are part of the service. Non-essential notifications, such as daily card prompts and re-engagement messages, can be turned off in your device settings or in the App, and any SMS messages include opt-out instructions (reply STOP). We do not send third-party marketing.

14. Referrals and shared cards

If you invite a friend, the invitation is sent from your own device through your phone's share options; you choose who receives it. Please invite only people who agree to hear from you. Cards you choose to share are designed to be anonymous, but a card may include your chart-based content, so share only what you are comfortable sharing.

15. Safety and crisis situations

Mazalot is for reflection and entertainment and is not a crisis, medical, or mental-health service. If a conversation suggests you may be in crisis, the companion may pause its normal flow and share a local crisis resource based on your region. Information indicating a possible crisis is used only to respond appropriately and is never used for analytics or marketing.

16. Security

We use administrative, technical, and organizational safeguards designed to protect your personal information, including encryption in transit, access controls, and passwordless sign-in. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

17. Children's privacy

Mazalot is intended for users aged 18 and older. The App is not directed to anyone under this age, and we do not knowingly collect their personal information. If you believe someone under this age has provided us personal information, contact compliance@mazalot.ai and we will take appropriate steps to delete it.

18. International users

Mazalot is operated from the United States, and your information is processed there. If you access the App from outside the United States, you understand that your information will be transferred to and processed in the United States. Where we transfer personal information of individuals in the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

19. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and provide notice in the App or by email before the change takes effect where the law requires. Your continued use of the App after an update means you accept the revised policy.

20. Contact us

For any privacy question or request, contact us: