Leaving Normal

Privacy Policy

Effective July 26, 2026

At Leaving Normal (“we,” “our,” or “us”), your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services (the “Services”). By using the Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

Information You Provide Directly

  • Account Information: Name, email address, password, and billing details when you create an account or subscribe.
  • Birth Chart Data: Date, time, and location of birth that you provide for personalized astrology, tarot, and numerology services. This information is essential for creating your personalized spiritual content.
  • Camera-Derived Readings (Sage tier tools): If you choose to use the Aura Reader or Biofield Scanner, your device camera is used on-device to estimate your heart rate and heart rate variability. The images themselves never leave your device; we receive only the derived numbers. See Section 4 for full details.
  • Crystal Collection App. When you use our Crystal Collection companion app, you can photograph crystals you own to identify and catalog them. These photos, along with details you enter — such as a stone’s type, weight, where you acquired it, and your own notes — are saved to your account so your collection is available across your devices. If you enable notifications, we store a device identifier so we can send you alerts, such as when a crystal you requested has been added to the library.
  • Community photo gallery. When you add or edit a stone, a sharing option (on by default) lets you contribute that photo to the community gallery for that crystal type, where other members can see it. Gallery photos are shown anonymously, with no name or identifying information. You can turn sharing off for any photo, or stop sharing later by editing the photo. Any member can report a gallery photo, which hides it immediately for review.
  • Payment Information: Processed securely by our third-party payment providers. We do not store your full credit card details.
  • Content You Share: Any information you voluntarily provide, such as community posts, support requests, or feedback about your personalized readings.

Information Collected Automatically

  • Usage Data: IP address, browser type, device type, operating system, pages visited, and how you interact with personalized content and features.
  • Cookies and Tracking: We use cookies and similar technologies to keep you logged in, remember preferences, and analyze site usage.

2. How We Use Your Information

We use the information we collect to:

  • Provide and personalize the Services, including generating your birth chart, personalized horoscopes, tarot readings, numerology calculations, affirmations, and meditations.
  • Generate Aura Reader and Biofield Scanner readings from camera captures you initiate.
  • Process payments and manage subscriptions.
  • Communicate with you, including welcome emails, personalized content you have opted into, and promotional offers you can opt out of at any time.
  • Improve our personalization and content quality.
  • Ensure compliance with our Terms of Service and community guidelines.
  • Comply with legal obligations.
  • To operate the Crystal Collection app: storing your catalog, identifying stones from the photos you take, estimating values, and sending any notifications you have turned on.

3. Birth Data: Encryption, Sharing, and Deletion

Your birth information (date, time, and location) is sensitive personal information, and we treat it that way.

Encryption. Your birth data is encrypted in transit using TLS whenever it moves between your device and our servers. It is also encrypted at rest on our servers: birth data fields are stored in encrypted form, with the encryption key held separately from the database.

Never sold. We never sell your birth data or any other personal information. We never share it with advertisers or data brokers.

Limited processing partners. Generating your personalized content requires sending birth data or chart-derived data to a small number of service providers who process it solely on our behalf and under contractual confidentiality obligations:

  • An astronomical calculation service, which computes planetary positions from your birth date, time, and location.
  • An AI provider (Anthropic), which receives your chart placements to generate personalized written content such as affirmations. Anthropic does not use data sent through its API to train its models.
  • Our hosting, payment, and email delivery providers, which handle account and billing data as needed to run the Services.

None of these providers may use your data for their own purposes, and none of them receive it for advertising.

Deletable anytime. You can delete your birth data at any time from the My Data tab in your account, or by emailing support@leavingnormal.net. When you cancel your membership, your birth data, chart, and reading history are deleted automatically within 30 days of cancellation. Billing records we are legally required to keep, such as invoices, are retained only as long as the law requires. Before you cancel, you can export a copy of your data from the My Data tab in your account.

Deleting your birth data means we can no longer provide personalized content, though you can still access general educational content.

4. Camera and Biometric Data (Aura Reader and Biofield Scanner)

The Aura Reader and Biofield Scanner are optional Sage-tier tools that use your device camera. Here is exactly what happens when you use them:

  • You are in control. These tools only activate the camera when you start a session, and your browser or device will ask for camera permission first. You can decline, and the rest of the Services work normally.
  • What is captured. A short camera capture during your session: on mobile, your fingertip over the camera and flash; on desktop, your face via the front camera. The Aura Reader on desktop also takes a photo used to create your aura portrait.
  • Everything happens on your device. Camera images and video are processed entirely in your browser, on your own device. They are never transmitted to us, never uploaded, and never stored on our servers. We cannot see them, and neither can our service providers. Your aura portrait is composited on your device as well.
  • What we derive and receive. Your device analyzes the capture locally to estimate your heart rate and heart rate variability from small color changes in your skin (a technique called photoplethysmography). Only these derived numbers, together with the details you choose to enter such as your name, birth date, and focus, are sent over an encrypted connection to generate your reading. For members whose readings are AI-generated, those same inputs are processed by our AI provider (Anthropic) as described in Section 3; Anthropic does not use data sent through its API to train its models.
  • No identification. We do not use camera captures to identify you. We do not create, collect, or store biometric identifiers such as facial geometry templates, fingerprints, or voiceprints, and we do not use facial recognition.
  • Not medical. Heart rate and heart rate variability estimates are used solely to personalize interpretive spiritual content. They are not medical measurements, are not diagnostic, and should not be relied on for any health purpose.

Camera data is never sold, never shared with advertisers, and never used for any purpose other than generating the reading you requested.

Note that this on-device handling applies to the Aura Reader and Biofield Scanner. Photos you take in the Crystal Collection app are different: those are uploaded and saved to your account, as described above.

5. Sharing of Information

We do not sell your personal information. We share information only in these limited circumstances:

  • Service Providers: With trusted third parties that help us operate the Services, as described in Sections 3 and 4, including payment processors, hosting, email delivery, astronomical calculation, and AI content generation. Each receives only what it needs for its function.
  • Legal Requirements: If required by law, court order, or government request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets. Your birth data and camera data would remain subject to the protections in this policy under any new ownership.

6. Your Privacy Rights

Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete information, including birth data.
  • Right to erasure: Request deletion of your personal data.
  • Right to restrict processing: Request limits on how we use your data.
  • Right to data portability: Receive a copy of your data in a machine-readable format.
  • Right to object: Object to the processing of your data, for example for marketing.

Deleting your birth data will prevent us from providing personalized content, though you can still access general educational content. To exercise these rights, use your account settings or contact us at support@leavingnormal.net.

Under CCPA/CPRA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to know what personal information we collect and how we use it.
  • Right to access a copy of the personal information we hold about you.
  • Right to delete your personal information.
  • Right to correct inaccurate information, including birth data.
  • Right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CPRA.
  • Right to limit use of sensitive personal information. Your birth data and camera data are sensitive personal information under the CPRA. We use them only to provide the Services you request, which is a permitted purpose, and for nothing else.

You may designate an authorized agent to exercise these rights on your behalf.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential site functionality, including keeping you logged in.
  • Remember your preferences and settings.
  • Analyze traffic and usage trends.
  • Provide relevant marketing, only if you consent.

When required by law, we display a cookie consent banner that lets you accept or reject non-essential cookies. You can also manage cookies in your browser settings.

8. Your Privacy Choices

  • Emails: Unsubscribe from any email at any time using the link in the footer, or manage preferences from your account dashboard.
  • Cookies: Manage via your browser settings or the consent banner.
  • Account Information: Update or delete your account from your account settings, or by contacting support@leavingnormal.net.
  • Birth Data: Update or delete your birth information at any time through your account settings. Deletion affects personalized services as described in Section 3.
  • Camera Tools: Entirely optional. Never used without your permission for each session.

9. Security

We protect your information with encryption in transit, access controls, and administrative, technical, and physical safeguards. No system is 100 percent secure, and we cannot guarantee absolute security, but protecting your birth data and camera data is a design requirement of the platform, not an afterthought.

10. Children’s Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have done so, we will delete it.

11. International Users

If you access our Services from outside the United States, you understand your information may be processed and stored in the United States, where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date will always show the most recent version. Continued use of the Services after updates means you accept the new Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, reach us at support@leavingnormal.net.