Privacy Policy
Last updated on June 1, 2025
Preamble
What are we talking about?
Personal data refers to all information that allows you to be identified, either directly or indirectly. For example, personal data includes your contact information (name, first name, postal address) as well as your location, an identification number (IP address), a photograph, etc.
This Privacy Policy applies only to natural persons, hereinafter referred to as "Users", whether individuals or professionals, excluding legal entities.
These users benefit from our automated astrological analysis services powered by artificial intelligence through the Moania platform, hereinafter referred to as "Moania Services".
IMPORTANT AGE RESTRICTION: our services are strictly reserved for adults according to the legislation of their country of residence, with an absolute minimum age of 18 years. This restriction applies to all our users, regardless of their nationality or place of residence.
At Andelios, we only collect personal data that is strictly necessary for the realization of determined, explicit, and legitimate purposes.
What is the applicable regulation?
This Privacy Policy is primarily based on:
The Regulation (EU) 2016/679 of April 27, 2016, hereinafter referred to as "GDPR"
The law No. 78/17 of January 6, 1978, as amended, hereinafter referred to as "Data Protection Act"
International standards for the protection of personal data
For our international users: Andelios applies the highest data protection standards, drawing inspiration from the European GDPR, even for users residing outside the European Union.
Where can I find the mentions that concern me?
For the greatest possible clarity, we offer you several sources of information:
This Privacy Policy explains how we handle your personal data
The General Conditions of Sale (GCS) govern the commercial conditions applicable to our offers
The Legal Notices provide access to any useful information regarding our company
Data Controller
In accordance with the regulations (GDPR, article 4), the data controller is the entity that determines the purposes and means of processing.
ANDELIOS
Legal form: Simplified joint-stock company (SAS)
Head office: 17 Alfred Roll Street, 75017 Paris, France
RCS: Paris SIRET: 98820552200010
Intra-community VAT: FR49988205522
Email: support@moania.ai
PERSONAL DATA COLLECTED
Which of your personal data is being processed?
2.1 Personal information provided by you
The personal information we collect depends on the context of your interactions with us and our Services, the choices you make, and the features you use:
Identification data:
Last name, first name, gender
Email address
Proof of majority (declaration on honor of your age)
Contact or authentication information:
Phone number (optional)
Postal address (if applicable)
Country of residence
Specific astrological data:
Complete date of birth (day, month, year)
Time of birth
Place of birth (city, country, postal code, region)
Specific astrological questions or themes submitted
Astrological preferences and interests
2.2 Technical and navigation data
If you use our platform, we collect automatically:
Device Data:
Identifier of your mobile device/computer
Device model and manufacturer
Operating system and version
System configuration information
Device and application identification numbers
IP Address (Internet Protocol)
Browser type and version
Language of the browser or mobile device/computer
Usage Data:
Pages visited and time spent
Features used
Actions taken on the platform
Usage preferences
Login and activity logs
2.3 Geolocation Data
We may request access to your device's location information to improve the accuracy of our astrological analyses. If you wish to change our permissions, you can do so in your device settings.
2.4 Payment Data
Billing information
Transaction history
Payment methods used (bank data is processed by our secure provider)
Currency of payment and billing country
Important : all personal information you provide to us must be truthful, complete, and accurate. You must inform us of any changes to this information.
Among the processed data, which ones are considered sensitive?
Under Article 9.1 of the GDPR and Article 6.1 of the Data Protection Act, certain data is considered "sensitive" and is prohibited from processing except in certain cases.
You are expressly informed that:
Your personal astrological data (date, time, place of birth, spiritual themes) may be considered indicative of your philosophical or religious beliefs.
The collection and processing of such data are based solely on your explicit consent, which you can withdraw at any time.
Specific purpose: this data allows for the generation of personalized astrological analyses and the improvement of our AI algorithms.
PROCESSING TERMS OF YOUR DATA
We use your personal data for the following purposes:
3.1 Provision of services (legal basis: performance of the contract)
Generation of personalized astrological analyses by AI
Saving and consulting your analyses
Technical and customer support
Age eligibility verification (legal majority)
3.2 Improvement and development (legal basis: legitimate interest)
Assessment of your use of our Services
Improvement of existing Services
Creation of new Services
Development and training of our AI algorithms
Anonymized statistical analyses
3.3 Security and compliance (legal basis: legitimate interest + legal obligations)
Securing our systems
Detection of fraudulent or illegal activities
Verification of age restriction compliance
Verification of compliance with the terms of use
Cooperation with authorities if legally required
3.4 Personalization (legal basis: consent/legitimate interest)
Understanding your profile and preferences
Improving your user experience
Personalized recommendations
Adaptation based on your geographical location
3.5 Communications (legal basis: contract execution + consent)
Sending confirmations, invoices, updates
Support and administration messages
Newsletter and marketing communications (with your consent)
Communications tailored to your language and timezone
3.6 Commercial management (legal basis: execution of the contract + legal obligations)
Payment processing
Accounting management and invoicing
Customer relationship
Management of currencies and exchange rates
How do we collect your data?
We collect your data in three ways:
Direct collection: through your browsing and use of our platform
Indirect collection: via our technical partners (with consent)
Automatic collection: technical and browsing data
Are your data shared with third parties?
We only share your personal data with recipients who strictly need it:
Technical providers:
Hosting and infrastructure (OVH)
Payment processing (Stripe, PayPal)
Emailing services (Brevo)
Analytics and audience measurement (Google Analytics)
Customer support and client relations
Referral platforms (GetRewardful, Tremendous)
Legal obligations:
Regulatory authorities, jurisdictions if required
Accountants, statutory auditors
Lawyers, bailiffs in case of disputes
All our service providers are bound by subcontracting contracts that comply with GDPR or equivalent international standards.
Is your data transferred outside of the European Union?
Some data may be transferred to third countries, primarily to the United States and Canada where our technical service providers are located.
We ensure that any transfer is:
Made to a country with an adequacy decision from the European Commission, OR
Governed by standard contractual clauses with appropriate safeguards
Protected by additional technical and organizational measures
For our international users: we apply the same standards of protection during transfers, regardless of your location.
How long are your data retained?
Active account data:
Identification data: for the duration of the contractual relationship
Age verification data: for the duration of the contractual relationship
Astrological data: for the duration of the contractual relationship + 3 years
Generated analyses: according to your settings (deletion possible at any time)
Closed/Inactive Account Data:
Automatic deletion 3 years after closure or last login
Possible retention for legal obligations (accounting: 10 years)
Technical data:
Connection logs: maximum of 12 months
Cookies: according to chosen settings (maximum 13 months)
Commercial prospecting:
Non-clients: 3 years from the last contact
Former clients: 3 years from the end of the relationship
YOUR INDIVIDUAL RIGHTS
What rights do you have regarding your personal data?
Right of access (article 15 GDPR) You can request confirmation that your data is being processed and obtain a copy of your personal data.
Right to rectification (article 16 GDPR) You can obtain the rectification of inaccurate data or their completion.
Right to erasure (article 17 GDPR) You can obtain the erasure of your data, in particular when:
They are no longer necessary for the original purposes
You withdraw your consent
They have been subject to unlawful processing
Right to restriction (article 18 GDPR) You can obtain the restriction of processing your data in certain circumstances.
Right to object (article 21 GDPR) You can object to processing based on legitimate interests for reasons relating to your particular situation.
Right to data portability (article 20 GDPR) You can receive your data in a structured, machine-readable format, and transmit it to another controller.
Rights related to automated decision-making (article 22 GDPR) You can contest a decision made solely through automated processing and request human intervention.
For our international users: Andelios acknowledges these same rights to all its users, regardless of their geographical location.
How to exercise your rights?
Contact : Email : support@moania.ai
Required Information:
Clear indication of the rights exercised
Proof of identity if there are doubts about your identity
Country of residence (to tailor our response according to applicable regulations)
Response time: 1 month maximum (extendable to 3 months for complex requests)
Do you have the right to file a complaint?
For EU residents: You can file a complaint with the National Commission on Informatics and Liberty (CNIL):
Online: www.cnil.fr
Mail: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
For international users: you can contact the relevant data protection authority in your country of residence, or contact us directly to resolve the dispute amicably.
MANAGEMENT OF COOKIES AND TRACKERS
In order to improve the functioning of the site and optimize your browsing, we may place cookies through subcontractors or partner companies.
Types of cookies used
Essential cookies (no consent required)
User session management
Authentication and security
Shopping cart functionality
Essential browsing preferences
Age eligibility verification
Analytical cookies (consent required)
Audience measurement
Visit statistics
User experience improvement
A/B testing for optimization
Anonymized geographical analyses
Marketing Cookies (consent required)
Advertising personalization
Social networks
Remarketing
Campaign performance measurement
Management of your cookie preferences
You can set your preferences via:
The consent banner during your first visit
Your account settings
Your browser settings
Retention periods
Life span of the trackers: 13 months maximum
Information collected: 25 months maximum
reCAPTCHA
Our site uses Google's reCAPTCHA to detect human browsers and prevent automated abuses.
TREATMENT BY ARTIFICIAL INTELLIGENCE
Nature of AI treatment
Our artificial intelligence algorithms:
Analyze your astrological data to generate interpretations
Personalize recommendations based on your profile
Improve based on anonymized user feedback
Adapt to cultural and geographical differences
Automated decision-making
Our analyses are automatically generated by AI
No decision with significant legal effects is made without possible human intervention
Automatic age verification during registration (with the possibility of appeal)
Improvement of algorithms
Anonymized data may be used to:
Train and improve our AI models
Develop new features
Conduct overall statistical analyses
Adapt our services to different cultures
Legal basis: Legitimate interest, with the possibility of opposition
DATA SECURITY
Technical measures
Encryption of sensitive data (AES-256)
Secure protocols (HTTPS/TLS 1.3)
Strong and multi-factor authentication
Automatic encrypted backups
Continuous access monitoring and intrusion detection
Organizational measures
Regular training of staff on GDPR and international standards
Strict access procedures according to the principle of least privilege
Confidentiality agreements for all participants
Regular security audits by third parties
Documentation and traceability of processing
Data breach
In case of a violation, we commit to:
Notify the competent authorities within 72 hours if there is a high risk to your rights
Inform you directly if there is a high risk
Document the incident and the corrective measures taken
Implement additional preventive measures
AGE RESTRICTION AND VERIFICATION
Minimum age required
ABSOLUTE RULE : Our services are strictly prohibited to minors.
Definition of a minor : Any person who has not reached the legal age in their country of residence, with an absolute minimum age of 18 years for all our users.
Universal application : This restriction applies to all our users, regardless of their nationality, place of residence, or applicable local regulations.
Verification procedures
When using our services:
Mandatory declaration of your majority
Automated verification with the provided birth data
Measures in the event of detecting a minor
By using our services, you certify under oath:
To be of legal age according to the laws of your country of residence
To be at least 18 years old
Not to use the service on behalf of or for the benefit of a minor
DISPUTES AND MEDIATION
Applicable law
This Policy is subject to French law.
For international users: In the event of a conflict between French law and your local law regarding data protection, the provisions most favorable to the user will apply.
Friendly resolution
In the event of a dispute, we strive to reach a good faith amicable resolution within 60 days.
Mediation
European users:
European RLL platform: https://ec.europa.eu/consumers/odr/
Accredited consumer mediator
International users:
Local mediation according to available organizations
Remote mediation via our customer service
Competent jurisdiction
In the absence of an amicable resolution:
French residents: Paris courts
European residents: French courts or courts of your country of residence, at your choice
International residents: Paris courts, unless otherwise provided by international agreement