Privacy Policy

1. Introduction

Awakened Sanctuary LLC ("we," "our," "us," or "Company") operates the Starseed Oracle website (thestarseedoracle.com) and the Starseed Oracle mobile application (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

We are committed to protecting your privacy and handling your personal information responsibly and transparently.

2. Information We Collect

Information You Provide Directly:

• Account Information: Email address and display name when you create an account
• Authentication Data: If you sign in with Google or Apple, we receive your email and name from those services
• Oracle Questions: The questions and messages you submit to the Oracle
• Reading History: Your conversation history with the Oracle
• Transaction Records: Records of Crystal purchases and subscription activity (payment details are processed by Apple/Google, not stored by us)
• Feedback: Any testimonials, reviews, or feedback you voluntarily provide
• Support Communications: Messages you send to our support team

Information Collected Automatically:

• Device Information: Device type, operating system, and unique device identifiers
• Usage Data: Features used, screens viewed, and interaction patterns
• App Performance Data: Crash reports and error logs to improve stability
• Analytics Data: Aggregated, anonymized usage statistics

Information We Do NOT Collect: We do not collect precise location data, contact lists, photos, browsing history outside our app, or data from other apps on your device.

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Generate Oracle readings and personalized content
• Maintain Your Account: Store your reading history and preferences
• Process Transactions: Manage Crystal balances and subscription status
• Send Communications: Password resets, account notifications, and important updates
• Improve Services: Analyze usage patterns to enhance features and user experience
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: Comply with applicable laws and legal processes
• Customer Support: Respond to your inquiries and resolve issues

4. Data Storage & Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Infrastructure-Level Encryption: Our database provider (Supabase) encrypts all stored data at rest using AES-256 encryption at the infrastructure level
• Access Controls: Strict access controls limit who can access personal data
• Regular Security Reviews: We conduct periodic security assessments
• Secure Authentication: We support secure sign-in methods including Google and Apple Sign-In

Your Oracle Questions: Your questions to the Oracle are stored in our database and processed by AI systems to generate responses. While our team does not routinely read individual questions, we may access them for technical support purposes or legal compliance if necessary.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Service Providers

We work with the following third-party services to provide and improve our Services:

• Supabase: Database hosting and authentication services (stores account and reading data)
• OpenAI: AI service provider that processes your Oracle questions to generate responses (questions are sent without your email or personal identifiers)
• RevenueCat: Subscription and in-app purchase management (does not receive payment card details)
• Apple App Store & Google Play Store: Process payments for Crystal purchases and subscriptions
• Google Sign-In & Apple Sign-In: Optional authentication services
• Fly.io: Backend server hosting
• Sentry: Error monitoring and crash reporting (receives anonymized error data)
• PostHog: Privacy-focused product analytics (collects anonymized usage statistics)

Each third-party provider is bound by their own privacy policies and data protection obligations. We select providers who demonstrate commitment to data security and privacy.

6. Data Retention

Active Accounts: We retain your account information and reading history for as long as your account remains active.

Inactive Accounts: Accounts that have been inactive for more than 2 years may be archived or deleted after providing notice to the email address on file.

Deleted Accounts: When you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, accounting, or security purposes.

Transaction Records: We retain transaction records for 7 years as required for tax and accounting purposes.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-Out: Opt out of certain data processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@thestarseedoracle.com. We will respond to your request within 30 days.

8. Minors & Parental Consent

Our Services are not intended for users under 18 years of age without parental or guardian consent. If you are under 18, you may only use the Services with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal information from minors without appropriate parental consent.

If you are a parent or guardian and believe your minor child has provided us with personal information without your consent, please contact us immediately at support@thestarseedoracle.com.

If we discover that we have collected personal information from a minor without proper consent, we will delete that information promptly.

9. Data Sharing & Disclosure

We Do Not Sell Your Personal Information. We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who help us operate our Services (as listed in Section 5)
• Legal Requirements: When required by law, court order, or government request
• Safety: To protect the safety, rights, or property of our users, ourselves, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• With Your Consent: When you have given us explicit permission to share

10. Cookies & Tracking Technologies

Website: Our website uses minimal session cookies necessary for basic functionality (such as maintaining your logged-in state). We do not use advertising cookies or cross-site tracking cookies.

Mobile App: The mobile app uses device identifiers for anonymous analytics and to maintain your preferences. You can reset these identifiers through your device settings.

We do not engage in behavioral advertising or sell data to advertisers.

11. International Data Transfers

Our servers are located in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.

By using our Services, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

12. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: (a) your consent, (b) contract performance, (c) legitimate interests, or (d) legal obligations
• Right to Object: You may object to processing based on legitimate interests
• Right to Restriction: You may request restriction of processing in certain circumstances
• Data Protection Authority: You have the right to lodge a complaint with your local data protection authority

For GDPR-related inquiries, contact us at support@thestarseedoracle.com.

13. California Users (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about what personal data we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (we do not sell or share your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information

To exercise your California privacy rights, contact us at support@thestarseedoracle.com or use the "Delete Account" feature in the app settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Posting a notice within the app
• Sending an email to your registered email address (for significant changes)
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: