1. Who we are
Quintessa is a self-knowledge app for iOS and Android, and this website is its presentation page. The controller of your personal data, meaning whoever decides how it is handled, is Jupiter Stein, CNPJ 28.866.798/0001-78, based in Jundiaí, SP, Brazil.
For questions, requests about your data or anything covered by this policy, write to hello@quintessa.me. That is also the contact for our data protection officer (“encarregado” under the LGPD, art. 41): João. We answer most messages within 2 business days and formal data requests within 15 days, as the LGPD requires.
2. The essentials
What we don't do:
- We don't sell your data. No advertisers, no data brokers, no “data partners.”
- We don't show third-party ads and we don't use your data to advertise for other companies. The only sales notices we send are about Quintessa's own plans, and only if you agree to get them (section 4).
- We don't hand an AI anything that identifies you. The app's texts (the daily tip, the weekly forecast, the readings and the couple's texts) are written by a generative artificial intelligence model, from the chart and temperament we calculated ourselves: signs, aspects and percentages, plus the form of address you chose, only so the words agree with you. Name, email, birth date, time and city, coordinates and the content of your answers never go to it. Details in section 5.
- We don't ask for your location. The app doesn't use GPS: you pick your birth city from a list that lives on your device, and that search sends nothing to anyone.
- We don't ask for access to your camera, microphone or contacts, and we don't read the photos you already have. The only thing the app may ask about photos is permission to add your result image to your photos, and only when you tap “Save”.
What we do:
- We keep your birth data in a private area of the database. The access rules allow only your account to read that area.
- We let you export everything and delete your account right in the app, in two taps.
- If you use the couple feature, we only link two accounts after both people agree, and either of them can undo the link whenever they want.
- We measure app usage only with events we choose, with no personal data, and you can turn that measurement off in your Profile.
- We use service providers to run the app (database, notifications, subscriptions, metrics). They are listed in section 6, with what each one receives.
3. What we collect
Three kinds of data: what you give us, what the app generates for you, and what comes from using the app and this website.
What you give us
- Account: email and, if you sign in with Apple or Google and allow it, your name. If you use Apple's “hide my email”, we receive the forwarding address Apple creates.
- Name (your first name, as you want to be called) and the form of address you ask for (feminine, masculine or other). It is used so the texts agree with you, and only for that.
- Birth data: date, time (optional; you can say you don't know it) and city. From the city you choose we keep the name, state, country, the coordinates of the city center and the time zone. These are not your device's coordinates.
- Your answers to the temperament questionnaire (24 statements) and the manual adjustment of the result, if you make one.
- Preferences: notification time and on/off setting, whether you agreed to get notices about the plans, theme (light, dark or automatic) and language.
- Tips you mark as favorite or read.
What the app generates for you
- A birth chart calculated from your birth data: positions of the planets, ascendant, houses and aspects. If you don't enter a birth time, the ascendant and houses are estimated.
- Your temperament result: percentages, primary and secondary temperament.
- Texts generated for you: the daily tips, the weekly forecast and the readings of the Full Reading, with the transits used and the time they were generated.
- Your Quintessa Plus subscription or the couple plan, if you subscribe: plan, expiry date and whether it renews. For the couple plan, we also keep which of the two accounts pays and until when the other has access. Card details stay with Apple or Google and never reach us.
App and device usage
- Account identifier (uid) and the device's notification token, needed to send notifications: the daily tip, the couple's notices and, if you agree, notices about the plans.
- Technical crash data when the app closes unexpectedly: device model, system and app version, and the technical error log (Firebase Crashlytics).
- Technical logs of our server functions, used to find and fix problems.
- Usage events (PostHog): for example, that the questionnaire was completed, which screen was opened, the resulting temperament, the platform and the app version. The full list is limited by our code and never includes name, email, birth date, time or city, coordinates, tip texts or the content of your answers.
Couple and invitations
If you invite someone by link and they complete sign-up, we record that the invitation was accepted so the agreed benefit can be granted, without revealing their personal data to you.
The couple feature only links two accounts if both people agree: whoever invites agrees to share before getting the link, and whoever accepts agrees before the link exists. While the link exists, each one sees the following about the other, and nothing more:
- first name and form of address (feminine, masculine or other);
- temperament: the questionnaire percentages, the primary and the secondary;
- the positions of the birth chart (the planets and, when the birth time is known, the ascendant, each with its sign) and whether the time is known.
We don't show the other person your birth date, time and city, your email, your questionnaire answers or your tips. But be aware: someone who knows astrology can work out the day of the year, the approximate year and sometimes the time of your birth from the positions of the planets. So we don't say your birth date stays secret; we say we don't share it. If that doesn't work for you, don't use the feature.
From this data the feature writes (with AI, section 5) the couple's reading and the map of frictions and care, which both read; for each of you, the tips and the weekly forecast get a line or a block about the other person; and the “Before you talk” script is only for whoever asks for it: the other person doesn't see the subject you chose.
You can also set the date you began. It applies to both, either of you can change it, we keep who changed it and when, and the other person is told by notification. On the day the date completes another year, we notify both of you.
To undo the link, either of you asks for a 6-digit code, which we send to the account's email (through an email provider, section 6), and types it in the app. The code is valid for 10 minutes and we keep only a coded version of it. When the link is undone, we erase what was shared, the couple's reading, the map of frictions and care, the start date, the scripts and the lines about the other person that were in each one's tips and forecasts, and we notify the other person by notification and email, without saying why. Deleting the account also undoes the link.
On this website
- Visit metrics (PostHog): pages opened, clicks on the page's buttons, the language and theme you chose, where you came from, browser and device type, and the approximate country and city, inferred from the IP address. PostHog receives the connection's IP address to deliver the events.
- Initial theme: to test which look works better (an A/B test), we randomly assign each visitor a theme for the page, light or dark. The draw is random and based on the anonymous identifier that PostHog keeps in your browser, not on your country or any other data about you, and it repeats on later visits from this browser. If you pick a theme with the button on the page, your choice takes priority and is saved in your browser.
- Browser storage: we save the language and theme you chose so we can remember them on your next visit. Details in section 9.
4. What we use it for and the legal basis
The LGPD requires a purpose and a legal basis for each use of data. Here is the full list:
- Creating and maintaining your account, calculating your chart and temperament, and generating your tips and readings: performance of a contract (LGPD, art. 7, V). Without this data the app doesn't work.
- Sending the daily tip and the couple's notices as notifications: consent (art. 7, I), given when you allow notifications in your system settings. You can turn them off in your Profile or in your device settings, at any time.
- Sending notices about Quintessa's plans (news and offers for Plus, the Full Reading and the couple plan) as notifications: consent (art. 7, I), asked for separately in the app. These notices stay off until you agree. To choose which notice makes sense for you, we use whether you already have a plan, which one, and your language. You can turn off just these notices in your Profile, at any time, without losing the daily tip.
- Billing and unlocking Quintessa Plus and the couple plan: performance of a contract (art. 7, V) and, for the records tax law requires us to keep, compliance with a legal obligation (art. 7, II).
- Security, abuse prevention and fixing crashes: legitimate interest (art. 7, IX). Keeping the service safe and working is in everyone's interest.
- Usage metrics and A/B tests, in the app and on this website (including the random choice of the page's theme, light or dark): legitimate interest (art. 7, IX), with a simple opt-out and no direct personal data. We assessed this interest in writing, together with the balance against your rights. In the app, the “Share usage data” switch is in Profile, Privacy section.
- Anonymous research, if you turn the option on: consent (art. 7, I). See section 8.
- Writing the app's texts with an AI (tips, weekly forecast, readings and the couple's texts): performance of a contract (art. 7, V). It receives only the chart and temperament already calculated, with nothing that identifies you (section 5).
- Couple feature: sharing with the other person what is described in section 3, writing the couple's texts and notifying them when the start date changes, has an anniversary or the link is undone: consent of both people (art. 7, I), given before the link and which you withdraw at any time by undoing it.
- Sending the account's email the code to undo the link: performance of a contract (art. 7, V) and legitimate interest (art. 7, IX) in protecting the link from an accidental tap or from someone else using your device.
- Answering your requests and defending ourselves in legal proceedings: compliance with a legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI).
Sensitive personal data, under the LGPD (art. 5, II), covers racial or ethnic origin, religion, political opinion, health, sex life, genetic or biometric data and others listed in the law. Birth date, birth chart and temperament are not on that list, and Quintessa asks for no sensitive data. Even so, we handle your birth data and profile with extra care, in a private area. If the app ever starts using sensitive data, we will ask for your specific consent first.
We don't collect anything we don't use. If you find something on this list that makes no sense to you, write to us. We will explain it or stop collecting it.
5. Calculations and automated decisions
The birth chart is calculated by a program from astronomical data, and the temperament result comes from a fixed scoring of your 24 answers. The texts (the daily tip, the weekly forecast, the readings and the couple's texts) are written by a generative artificial intelligence model, which receives the chart and temperament already calculated: signs, aspects, percentages and, if you gave it, the form of address, only so the words agree. We don't send it your name, email, birth date, time or city, coordinates, the content of your answers or the name of the person you are linked with. A program of ours checks the text before showing it; if the model doesn't answer or the text doesn't pass the check, we use a default text we wrote or tell you it wasn't possible.
These results are suggestions for self-knowledge. They have no legal effect on you and don't restrict your access to anything. You can adjust your temperament manually, and the questionnaire result stays saved. If you would like us to explain or review any result (LGPD, art. 20), write to hello@quintessa.me.
7. International transfers
Quintessa is operated from Brazil, but some providers process data in other countries, mainly the United States and the European Union. This means your data may leave Brazil.
When that happens, we rely on the LGPD mechanisms (arts. 33 to 36 and ANPD Resolution CD/ANPD no. 19/2024): standard contractual clauses and other safeguards that the providers themselves offer in their data processing agreements, and countries with an adequate level of protection where applicable. The details for each one are in the policies of the providers listed in section 6.
8. Anonymous research (optional)
Your Profile has an “Anonymous research” option, off by default. If you turn it on, you agree that information about your chart and temperament, without name, email or birth date, time or city, may be included in aggregate statistics, so we can understand patterns and improve the app.
You can turn it off at any time, and that applies from then on. Statistics that have already been aggregated anonymously can't be undone, because they no longer point to you.
9. Permissions, cookies and local storage
In the app
The app asks for two permissions, each only when you use the feature: notifications, to send the daily tip (and, if you agree, notices about the plans), and adding your result image to your photos (on iPhone, “add photos”; on Android, the storage permission, depending on the system version), when you tap “Save”. The app only writes the image: it doesn't read the photos you already have. If you deny a permission, the rest of the app keeps working, and you can still share the result image without saving it. The app doesn't use cookies. It keeps your preferences and a copy of your data on the device so it opens faster and works offline.
To turn off usage metrics, go to Profile, Privacy section, and switch off “Share usage data”. After that, no usage event leaves the app, or our server on your behalf.
On this website
We save the language and theme you chose in your browser and, so the page is painted correctly on your next visit, the theme that was drawn for you. These are just preferences, and they don't leave your browser.
The site's metrics use PostHog, which stores an anonymous identifier in your browser (cookie or local storage) to recognize repeat visits. We don't use advertising cookies, cross-site tracking or browser fingerprinting. We respect your browser's “Do Not Track” signal: when it is on, no metrics are sent.
You can turn off this site's metrics at any time:
10. Your rights
The LGPD (art. 18) gives you, as the data subject, these rights, and we honor them for all users:
You can:
- Confirm whether we process your data and get access to it.
- Correct incomplete, inaccurate or outdated data. You can do much of this directly in your Profile, by editing your birth data or retaking the questionnaire.
- Request anonymization, blocking or deletion of data that is unnecessary, excessive or processed in violation of the law.
- Request portability of your data. In the app, “Export my data” creates a structured file.
- Delete data processed on the basis of your consent. To delete the whole account, use “Delete account” in your Profile.
- Know which entities we share your data with (section 6).
- Know that you may refuse consent and what the consequences are. For example, without notifications you won't get the tip at your chosen time, but you can still open it in the app.
- Withdraw consent at any time, free of charge.
- Undo the couple link whenever you want, under “Undo link” on the couple screen, which withdraws the consent given to it: what was shared stops being shown and is erased.
- Request review of decisions made solely by automated processing (art. 20), as described in section 5.
To exercise these rights, use the app's features or write to hello@quintessa.me. We reply within 15 days. If your request is complex, we will tell you why and give you the new deadline.
We may ask you to confirm your identity before handing over or deleting data, to protect you from anyone trying to impersonate you.
If you think we haven't handled your request properly, you can complain to Brazil's National Data Protection Authority (ANPD): https://www.gov.br/anpd/.
11. How long we keep your data
When you delete your account, we erase your chart, your questionnaire result and your tip history and, if you are in a couple, we undo the link and erase what was shared with the other person, and this cannot be undone. We may keep only what the law requires or what we need to defend ourselves in legal proceedings.
| Data | How long we keep it |
|---|---|
| Account, birth data, chart, temperament and tips | As long as your account exists |
| Couple: shared data, the couple's reading, the map of frictions and care, start date and scripts | Until the link is undone or one of the accounts is deleted, when they are erased on both sides |
| Code to undo the link (only the coded version) | Valid for 10 minutes and erased when the link is undone or, at the latest, 24 hours after the request |
| Couple emails (Resend) | According to the provider's rules |
| Data after you delete your account in the app | Removed from active systems immediately and from backups within 30 days |
| The device's notification token | Until you sign out, delete the account or the system invalidates the token |
| Technical logs of server functions | 30 days |
| Crash data (Crashlytics) | 90 days |
| Usage events (PostHog) | 1 year |
| Subscription data (status and expiry) | As long as your account exists. Purchase records are also kept by Apple, Google and RevenueCat, under their rules and the law |
| Requests and messages to support | As long as needed to answer and to prove that we did |
12. Security
We protect your data with standard industry practices: encrypted traffic (TLS), data encrypted at rest on Google's servers, access rules that isolate each account (only you can read your private area), and internal access limited to what is necessary.
No system is infallible. If a security incident occurs that may cause you risk or significant harm, we will notify the ANPD and you within the regulatory deadlines (currently up to 3 business days, ANPD Resolution CD/ANPD no. 15/2024), saying clearly what happened and which data was affected.
To report a security flaw, write to hello@quintessa.me with the subject “Security”.
13. Children and teenagers
Quintessa is for people aged 18 or over. We don't knowingly collect data from minors. If you know of an account belonging to a minor, tell us by email: we will close the account and delete the data.
14. Changes to this policy
We may update this policy as the app evolves. For important changes, such as adding a new provider that receives personal data or changing retention periods, we notify you in the app or by email at least 30 days ahead. For small adjustments, such as fixing a typo, we only change the update date at the top.
Previous versions are archived and can be requested by email.
15. Contact
For questions, requests about your data or anything covered by this policy:
For LGPD matters you can also contact Brazil's National Data Protection Authority (ANPD) directly: https://www.gov.br/anpd/.