Privacy Policy
Last updated: September 6, 2026
This policy explains how SPIRIT SOARE ȘI LUNĂ S.R.L. processes personal data when you use the Cristina Zurba website or mobile application on iOS or Android.
Data controller
SPIRIT SOARE ȘI LUNĂ S.R.L., CUI 44614150, Jud. Iași, Sat Vișan, Comuna Bârnova, Str. Sf. Ilie nr. 96AC1, Et. 1, Ap. 4, România. Contact: zurbacristina@gmail.com.
Data we may process
Depending on the features you use, we may process account data (name, email address and user identifier), profile data, analyses and content created in the app, voluntarily uploaded images, approximate location or city, app interaction data, device identifiers, and technical or diagnostic data.
Why we use data
We use data for authentication, providing requested analyses and content, account synchronisation across devices, support, security, error diagnosis, abuse prevention and service improvement. We do not require contact data again after Sign in with Apple when Apple or an existing account already provides it.
Service providers and advertising
We use Firebase (Authentication, Firestore and Storage) for accounts, app data and uploaded files; Google AdMob and User Messaging Platform for advertising and consent management; and Sentry for error reporting. These providers may process technical data, identifiers or usage data on our behalf, under their own policies.
Advertising, GDPR and App Tracking Transparency
We request GDPR consent where required before requesting ads on iOS and Android. On iOS, we separately request App Tracking Transparency permission only when a user is eligible for personalised advertising. ATT is an iOS-specific permission; on Android, UMP/Google consent and personalisation choices apply. If you decline consent or ATT permission, the app remains functional and may show only non-personalised ads. Choices can be reopened from Settings → Privacy options.
Sign in with Apple
When you choose Sign in with Apple, we may receive your Apple identifier and, on first authorisation, the name or email address you choose to share. Apple may provide a private relay address. On later sign-ins Apple may not send your name again; we retain available profile data to operate the account.
Data retention and deletion
We retain data for as long as needed to operate the account, provide the service, address requests, or comply with legal obligations. You can request deletion of the account, profile, analyses and associated images. We may retain only information that we are legally required to keep.
Your rights and choices
You may request access to, correction of, or deletion of your data. For advertising choices, use in-app options and iOS settings. For personal data requests, use our privacy choices page; we respond within 30 days, subject to identity verification.
Changes and contact
We may update this policy to reflect changes to services or legal obligations. We will publish the current version on this page.