Last updated: September 17, 2026
Effective date: September 17, 2026 Last updated: September 17, 2026
Zoroastrian Light (the "App," "we," "us") is operated by Zoroastrian Light LLC, a New Jersey limited liability company, with its principal place of business at 86 Valley Road, Montclair, NJ 07042.
This policy explains what we collect when you use zoroastrianlight.com and the Zoroastrian Light application, why we collect it, who we share it with, and what control you have. It applies to all users worldwide.
Questions, or want to exercise a privacy right? Contact us at zoroastrianlight@gmail.com.
Zoroastrian Light is a devotional and educational app for the Zoroastrian tradition. Because of that, the simple fact that you hold an account with us — and certainly your prayer history and lesson progress — may reveal or imply something about your religious beliefs or interests.
Under the EU and UK General Data Protection Regulation, information revealing religious or philosophical beliefs is a special category of personal data and receives heightened protection. We treat it accordingly.
We process this information only with your explicit consent, which you give when you create an account after being shown this policy. You can withdraw that consent at any time by deleting your account (Section 9), which ends our processing for the future. We do not sell this information, we do not use it for advertising or profiling, and we do not share it with anyone except the service providers listed in Section 6 who need it to operate the App on our behalf.
If you would prefer not to have religious-inference data associated with an identified account, you can use the App's publicly available pages without registering.
Account information. When you register with an email address and password, we collect your email address and a securely hashed version of your password. We never store your password in readable form.
Sign-in through Google, Facebook, or Apple. If you use one of these providers, they send us a limited profile: typically your name, email address, profile picture, and a provider-specific user ID. We do not receive your password for those services, and we do not gain access to your contacts, posts, friends, or other data held by those providers.
If you use Sign in with Apple and choose "Hide My Email," Apple gives us a private relay address instead of your real one. We can email you at that address but we never learn your actual email address, and that is fine — the App works normally.
Preferences. Your chosen interface language (English, Persian/Farsi, or Young Avestan transliteration), reminder and notification settings, and any display preferences you set in Settings.
Payment information. Subscriptions are processed by Stripe, Inc. Your full card number, expiry date, and security code are entered directly into Stripe's systems and never reach our servers. Stripe returns to us a customer identifier, your subscription status, the last four digits and brand of your card, and your billing country. We use those to manage your subscription and provide support. Stripe processes your payment data as an independent controller under its own privacy policy (stripe.com/privacy).
Communications. If you email us for support, we keep that correspondence so we can help you and maintain a record of the issue.
Devotional and learning activity. Which prayers you open or play, which lessons and sequences you begin and complete, your progress through the Gathas, Yashts, Yasna and other texts, streaks and milestones shown on your Journey page, and any bookmarks or favorites you save.
Magi chat conversations. Magi is an AI-powered chat feature. The messages you send to it, and the responses it generates, are stored and associated with your account so that your conversation history is available to you across sessions. Section 4 explains this in detail.
Technical and log data. IP address, browser type and version, operating system, device type, referring page, timestamps, pages requested, and error diagnostics. We use this to keep the service running, investigate faults, and detect abuse.
Local storage. We store a small amount of data in your browser or device to keep you signed in and remember your preferences. This is essential to the App functioning. We do not use third-party advertising cookies or cross-site tracking.
We want to be specific about this, because it involves sending your words to another company.
When you send a message to Magi, that message — together with relevant context from your conversation — is transmitted to a third-party AI provider, which generates the response. This happens over an encrypted connection.
For users in the EEA and UK, we rely on the following legal bases under GDPR Article 6, and where religious-inference data is involved, Article 9(2)(a) explicit consent:
| What we do | Why | Legal basis | |---|---|---| | Create and maintain your account | To let you sign in and keep your progress | Performance of a contract | | Deliver prayers, lessons and sequences | Core function of the App | Performance of a contract | | Record devotional and learning activity | To show progress, streaks, and personalized content | Contract, plus explicit consent for religious inference | | Operate the Magi chat | To provide the feature you requested | Contract, plus explicit consent | | Process subscriptions | To charge you and manage renewals | Performance of a contract | | Send reminders and notifications | Because you enabled them | Consent | | Send service and billing emails | To notify you of changes, receipts, and security matters | Contract and legitimate interests | | Diagnose faults and secure the service | To keep the App working and prevent abuse | Legitimate interests | | Comply with tax, accounting and legal obligations | Because the law requires it | Legal obligation |
We do not carry out automated decision-making that produces legal or similarly significant effects.
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We disclose it only to the following categories of recipients:
Service providers acting on our behalf:
Each is bound by contract to process your information only on our instructions and to protect it appropriately.
Identity providers. Google, Facebook, and Apple receive confirmation that you signed in, as an inherent part of the sign-in flow you chose.
Legal and safety disclosures. We may disclose information if we are required to by law, court order, or lawful government request, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of our users, the public, or us.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may transfer to the successor entity. We will notify you before your information becomes subject to a materially different privacy policy.
We are based in the United States, and our service providers operate in the United States and other countries. If you are located in the EEA, the UK, or Switzerland, your personal information will be transferred outside your country.
Where we transfer personal information out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary measures where required. You may request a copy of the relevant safeguards by writing to zoroastrianlight@gmail.com.
When you delete your account, we remove or irreversibly anonymize your personal information within 30 days, except for records we must keep for the reasons above. Encrypted backups may retain copies for up to a further 90 days before being cycled out.
Everyone. You can view and change your account details and preferences in Settings, delete individual Magi conversations, and delete your account at any time. To delete your account, use the option in Settings, or email zoroastrianlight@gmail.com and we will action it. When you delete your account, we cancel any active or trialing Stripe subscription, delete your preferences, saved journey items, routines, and upgrade event history, and then delete your account itself.
If you are in the EEA or UK, you have the right to: access your personal data; correct inaccurate data; have your data erased; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
If you are in California, you have the right to know what personal information we collect and how we use and disclose it; to request deletion; to request correction; and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we do not process personal information for cross-context behavioral advertising. Because we process religious-inference data, you may also limit our use of sensitive personal information — though doing so will prevent the App from functioning, since that data is the App.
If you are in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, or another US state with a comprehensive privacy law, you have comparable rights of access, correction, deletion, portability, and appeal. To appeal a decision we make on your request, reply to our response and we will review it.
We respond to rights requests within 30 days, or within the shorter period your local law requires. We may need to verify your identity before acting, which usually means confirming control of the email address on the account.
Facebook Login users: if you remove the App from your Facebook account, Facebook notifies us and we delete the associated data. You can also request deletion directly at zoroastrianlight@gmail.com.
We protect your information with encryption in transit (HTTPS/TLS), encryption at rest for our databases, hashed password storage, access controls limiting who on our side can reach production data, and reliance on established infrastructure providers.
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
Zoroastrian Light is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly — please contact zoroastrianlight@gmail.com if you believe a child under 13 has given us information.
If you are between 13 and the age of digital consent in your country (which is 16 in some EEA member states), you may use the App only with the consent of a parent or guardian, and they must agree to these terms on your behalf.
Because a paid subscription is a contract, users under 18 should not subscribe without a parent or guardian's involvement.
We may update this policy as the App develops or the law changes. We will post the revised version here with a new effective date. If the change is material — for example, a new category of data, a new purpose, or a new class of recipient — we will notify you by email or through the App before it takes effect, and where the law requires it, we will ask for your consent again.
Zoroastrian Light LLC 86 Valley Road, Montclair, NJ 07042 Email: zoroastrianlight@gmail.com