Privacy Policy

Effective date: [DATE] Last updated: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] ("Oraclite," "we," "us," or "our") collects, uses, and shares information when you use the Oraclite website at oraclite.com (and hex-sign-omen.lovable.app), our mobile apps, and related services (together, the "Service"). We are based in California, United States, and the Service is intended for users in the United States.

Oraclite is provided for entertainment and amusement only. Please also read our Terms of Service and Cookie Policy.

1. A note about sensitive data, in plain language

Oraclite works by reading your birth chart and identifying crystals from photos. To do that we collect information that the law treats as sensitive: your birth date, birth time, and birth place, the astrological sign and chart details we calculate from them, the intentions you set, the photographs you scan, and the messages you send to the Oracle. We keep this information in a separate, encrypted store tied to your account. No analytics or advertising code can read that store. We never send your sign, birth details, intentions, scans, or chat text to any advertising network, and nothing you say to the Oracle is ever used as an advertising signal.

2. Information we collect

A. Information you give us.

• Account details: email address, password (stored hashed), and any display name or handle.
• Sensitive personal information for the core features: birth date, birth time, birth place (city), the astrological sign and natal-chart details derived from them, and the intentions you choose (for example protection or grief).
• Crystal photographs you scan. GPS coordinates are stripped from photos on your device before upload.
• Oracle chat messages and the readings generated for you.
• Purchase information for the $19 digital artifact, memberships, and Moonstone credits (processed by our payment provider; we receive confirmation and limited billing details, not your full card number).

B. Information collected automatically (operational, non-sensitive).

• Install ID, app version, device model, coarse country, session count, and crash logs.
• With your consent, analytics and advertising identifiers and cookies (see the Cookie Policy). We do not set analytics or advertising cookies until you consent, and we honor the Global Privacy Control signal.

C. We do not collect precise location. Your timezone and the city you type are enough for the chart math.

3. How we use information

• To identify crystals and generate readings, and to personalize what the app and the Oracle say to you.
• To create and secure your account and provide customer support.
• To process purchases, memberships, trials, and renewals.
• To send you email you have asked for or consented to, and to let you unsubscribe at any time.
• With your consent, to measure use of our public pages and to show advertising on our content pages.
• To keep the Service safe, prevent fraud and abuse, and comply with law.

We do not use your sensitive personal information to infer characteristics about you for advertising, and we do not sell your sensitive personal information.

4. The third parties we share operational data with

We share only the minimum needed, and only non-sensitive operational data with advertising and analytics vendors. Our main service providers are:

Provider	Purpose	Data involved
Supabase	Database, authentication, file storage, and server functions that run the app	Account data and, in an isolated encrypted store, your sensitive data. Acts as our processor.
Klaviyo	Email (and later SMS) messaging	Email address and safe profile fields only. Never your sign, birth details, intentions, scans, or chat text.
Google (Google Analytics 4, and Google AdSense on public content pages)	Analytics and advertising, only after you consent	Non-sensitive usage events and advertising identifiers/cookies. Gated behind consent and Google Consent Mode.
Ezoic	Advertising on public content pages, only after you consent	Non-sensitive advertising identifiers/cookies.
Paddle	Payments and Merchant of Record for web purchases	Billing and transaction details you provide at checkout.

We may also disclose information to comply with law, respond to lawful requests, enforce our Terms, protect rights and safety, or in connection with a business transfer. We will not sell your data to data brokers.

5. "Selling" and "sharing" of personal information

We do not sell your personal information for money. When you consent to advertising on our public content pages, some advertising identifiers may be "shared" for cross-context behavioral advertising as those terms are defined under California law. You can turn this off at any time using the "Your Privacy Choices" link in our footer, and we treat a Global Privacy Control browser signal as a valid opt-out. We do not knowingly sell or share the personal information of anyone under 16.

6. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know and access the personal information we have collected about you, the categories, sources, purposes, and the parties we disclosed it to, over the prior 12 months.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Limit the use and disclosure of your sensitive personal information to what is necessary to provide the Service.
• Not receive discriminatory treatment for exercising your rights.

How to exercise these rights: use the "Your Privacy Choices" link in the footer, delete your account in two taps in the "You" tab, or email us at [privacy@oraclite.com]. We will verify your identity and respond within 45 days (with one extension when needed). You may use an authorized agent. We honor the Global Privacy Control.

7. Your rights if you are in the EEA or the UK (GDPR)

Oraclite targets US users, but if you reach us from the EEA or the UK, you have rights of access, correction, deletion, restriction, portability, and objection, and the right to withdraw consent at any time. Our lawful bases are your consent (for the birth-chart features, which use special-category data under Article 9, and for non-essential cookies), contract performance (to run your account and purchases), and our legitimate interests (security and service improvement). To make a request, email [privacy@oraclite.com]. You may also complain to your local supervisory authority.

8. How long we keep information

• Scan photographs: 30 days.
• Oracle chat transcripts: 90 days by default; you can extend or delete them at any time.
• Scan history: only the label and timestamp, kept for the life of the account.
• Analytics and advertising events: 13 months.
• Account and purchase records: for the life of the account and as required for tax, accounting, and legal purposes.
• When you delete your account, everything attached to it is purged everywhere, including backups, within 30 days.

9. Security

Sensitive data is held in an encrypted store, isolated from analytics and advertising code. We use industry-standard safeguards. No system is perfectly secure, so we cannot guarantee absolute security.

10. Children

The Service is intended for people aged 17 and older. We do not create accounts for anyone under 13, and we do not knowingly collect personal information from children under 13. If the birth date on an account indicates the user is under 18, the account is flagged and receives no personalized or profiling-based advertising and no third-party data sharing beyond what is needed to run the Service. If you believe a child under 13 has provided information, contact us at [privacy@oraclite.com] and we will delete it.

11. Changes to this policy

We may update this policy. If we make material changes, we will post the new effective date and, where required, notify you. We will not apply materially different practices to information already collected without the consent required by law.

12. Contact us

[LEGAL ENTITY NAME] [MAILING ADDRESS, CALIFORNIA] Email: [privacy@oraclite.com]