Privacy Policy

Version 1.1 · Last updated 7 September 2026

This policy is written to apply wherever you live. Rather than granting one set of rights in Europe and a weaker set everywhere else, we give everyone the same ones. If the law where you live gives you more than what is written here, you have those too — this policy never reduces them.

Wakeline has not launched yet. This policy takes effect the day the app becomes available, and describes how it works from that day.

The short version

Wakeline collects your birth date, what you tell us you are carrying, and your answers to the evening check-in. Your birth time and birth place stay on your device and are never sent to us. We do not sell your data, we do not share it with advertisers, and we do not track you across other apps or websites. You can export everything and delete everything, permanently, from Settings.

1. Who we are, and how to reach us

Wakeline is made and operated by Baloot.my, based in Malaysia.

For any question about this policy, or to make an access, correction, export or deletion request, email hello@wakelineapp.com. A person reads that address. We answer privacy requests within 30 days and usually a great deal sooner.

2. What we collect, and where it lives

Birth date, birth time and birth place together can identify a person. We treat them accordingly, and deliberately keep the two most identifying parts off our servers entirely.

Your birth chart is calculated on your device. Only the derived results of that calculation are sent to us. Our servers never need — and never receive — the exact minute and coordinates of your birth.

Signing in is optional

Your Wakeline account has no email address, no password and no username. It is created silently when you first open the app, and by default it exists only on that device. That has one consequence worth being plain about: if you lose the device without signing in, your history cannot be recovered by us or by anyone.

Signing in with Apple (on iPhone and iPad) or with Google (on Android) is what makes recovery possible. If you do, we receive an identity token from Apple or Google that contains an identifier for you and, depending on the provider, your name and email address.

We read only the identifier, and we do not store even that in readable form. It is put through a one-way hash with a key held on our server, and the hash is what we keep. We never read or store your name, and we never read or store your email address — including Apple's private relay address. There is nowhere in our database for either of them to go.

You can sign in later, or never. You can also disconnect it at any time from the You tab: your history stays exactly as it is, and the account simply goes back to living on that device alone.

3. Why we collect it

• Birth date and derived signs — to generate your daily reading and action.
• What you are carrying — to tune the reading to what you told us matters right now.
• Check-in answers and mood logs — to reference yesterday in today's reading, and to build Patterns.
• Account identifier — to sync across your devices and to verify your subscription.

That is the complete list. We do not collect anything for a purpose we have not named here, and we do not collect anything "just in case it is useful later".

4. Your consent

We ask for your consent on a dedicated screen before collecting any birth data, and we record when you gave it and which version of this policy was in force at the time. We rely on that consent to process your birth data, and on the need to actually run the service to keep your account and subscription working.

Withdrawing consent is never harder than giving it. Deleting your account withdraws it and removes the data, and that is two taps inside the app.

5. Who else processes your data

Your readings are generated by an AI model operated by a third-party provider. To do that, we send it your derived signs, the tags you selected, and your recent check-in answers. We do not send it your birth time, your birth place, your name, or your email address.

We use two categories of provider, both outside Malaysia: an AI model provider to generate readings, and a hosting provider to run the service and this website. Both are bound by contract to process data only on our instructions, to keep it secure, and not to use it for their own purposes or to train their own models on it. Because they are outside Malaysia, using the app involves your data crossing borders.

We do not use any other third party. There is no advertising network, no analytics company, and no data broker anywhere in this product.

6. Readings are generated, not written by a person

Your daily reading is produced by an AI model using your birth chart and your recent answers, and checked automatically before it reaches you. No human astrologer writes it, and we never claim one does. We say this plainly here rather than leaving it to be inferred.

You can read the fuller explanation on How readings are made.

7. How it is protected

• In transit: TLS 1.3, with certificate pinning to our backend.
• On your device: stored using the operating system's own file protection.
• On our servers: encrypted at rest, with birth dates encrypted separately at the application layer.
• Authentication tokens: held in the system keychain, never in general storage.
• Logs: we log account identifiers only. We do not log birth data or the text of your readings, and reading content never appears in crash reports.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your data, we will tell you what happened and what we are doing about it.

8. How long we keep it

We keep your data for as long as your account exists. When you delete your account, we delete it: immediately in normal operation, and within 30 days at the outside. The 30 days exists only to cover backup rotation — nothing is deliberately retained past the moment you ask for it to go.

If you stop using Wakeline without deleting your account, we do not keep your data forever. After 24 months with no activity we delete the account and everything in it. We email you first, at least 30 days before, so you have a chance to come back or export.

9. Your rights

These apply to you wherever you live. You can do all of them yourself, in the app, without contacting us and without waiting for us:

• See and export your data — Settings → Export produces a readable file of your profile, all your readings, all your check-ins and all your custom affirmations.
• Delete everything — the You tab → Delete everything. Reachable within two taps, one confirmation, irreversible. If you signed in, the stored hash of your Apple or Google identifier is deleted with it, and signing in again afterwards produces a new, empty account rather than restoring the old one.
• Correct anything — every answer you gave during onboarding stays editable in Settings.
• Withdraw consent — the same delete action, above.

Deleting your account removes your records from our servers, including readings, check-ins and mood logs, and purges the local store on your device. We honour it even if you have an active subscription — though you will need to cancel that separately through Apple, because only Apple can.

If you would rather we did any of this for you, email hello@wakelineapp.com. If you are unhappy with how we have handled a request, you can complain to the data protection authority where you live, and we would rather you told us first so we can put it right.

10. What we never do

• We do not sell, share or license your data to anyone.
• We do not use advertising SDKs. There are none in the app.
• We do not track you across other apps or websites. There is no advertising identifier and no tracking prompt, because there is nothing to track you with.
• We do not use analytics that fingerprint you.
• We do not let our providers use your data to train their models.

11. This website

Everything above describes the app. This site collects far less.

• No cookies. This site sets none — not for analytics, not for preferences, not for anything. There is no consent banner because there is nothing to consent to.
• No analytics and no trackers. There is no measurement script of any kind, and no third-party resource is loaded: no fonts, no tag manager, no embedded media. Every page here loads only from this domain.
• Server logs. Our hosting provider records standard request logs, including IP addresses, to keep the site running and to stop abuse. They are kept for 30 days and then discarded. We do not use them to build a profile of you and we never combine them with app data.

12. Children

Wakeline is rated 12+ and is not intended for children under 13. We do not knowingly collect data from them. Where the law where you live sets a higher age for agreeing to data being processed, that higher age applies instead. If you believe a child has given us data, email hello@wakelineapp.com and we will delete it.

13. Changes to this policy

If we change this policy we will update the version and date at the top. Where a change materially affects how we use your data, we will ask for your consent again rather than assuming we still have it.

14. Contact

hello@wakelineapp.com — for anything in this policy, or anything else.

Wakeline is a product of Baloot.my. These terms sit alongside our Terms of Service.