Privacy Policy
Effective July 19, 2026 · Last updated July 19, 2026
This policy explains what Mildred Mae LLC collects when you use The Ephemeris, why, who it's shared with, and the control you have over it. Birth details are sensitive personal information, and we treat them that way.
1. What we collect
- Account: your email address and a securely hashed password (we never see your password in plain text).
- Birth details:the birth date, birth city, and — optionally — birth time, name, and gender you enter for yourself or for charts you create. Birth time is always optional; we tell you honestly what a reading can and can't do without it.
- Your reading context:the profile preferences you set and the free-text situation (“what's alive right now”) you optionally provide for a reading.
- Readings: the readings generated for you, saved to your account so you can return to them.
- Usage telemetry (beta): which systems ran, the model used, response latency, token counts, and estimated cost per reading. This measures quality and sets honest pricing. It is tied to your account during the beta and is anonymized when analyzed in aggregate.
- Payment metadata: if you subscribe, Stripe processes your payment and we store identifiers (customer and subscription IDs) to manage your plan. We never receive or store your card number — Stripe holds it.
- Standard logs: our hosting providers record ordinary request data such as IP address and timestamps for security and reliability.
2. How we use it
- To compute placements and generate your readings.
- To save your readings and preferences to your account.
- To operate, secure, and improve the service.
- To measure reading quality and set honest prices during the beta (telemetry).
- To process payments and manage your subscription.
- To contact you about your account or material service changes.
We do not sell your personal information, and we do not use your birth details or reading context to train our own models.
3. Who processes your data
We share data only with the service providers we need to run The Ephemeris, and only for that purpose. When you request a reading, the computed placements and the context you type are sent to our AI provider so Bob can write the interpretation; your birth city is sent to a geocoding service to resolve coordinates and the correct historical timezone.
| Provider | Role | Data it touches |
|---|---|---|
| Supabase | Database and authentication (hosted on Amazon Web Services, US) | Account email, profile, birth data, saved readings, usage telemetry |
| Vercel | Hosts the The Ephemeris web application | Standard server request logs (IP address, timestamps) |
| Railway | Hosts the calculation engine | Birth details in transit while placements are computed (not stored) |
| Anthropic | Provides the Claude models that write the interpretation (Bob) | Computed placements and the context you type for a reading |
| Stripe | Processes payments | Payment card details (held by Stripe — never by us), billing metadata |
| Resend | Sends account email (sign-in confirmations, password resets) and delivers contact-form messages | Your email address, and anything you write in the contact form |
| Cloudflare | Runs the domain's DNS and forwards mail sent to our published addresses | The contents of any email you send to hello@ or privacy@, in transit |
| OpenStreetMap (Nominatim) | Turns a birth city into coordinates and a historical timezone | The birth city name you enter |
These providers are bound by their own terms and process data on our instructions. We may also disclose information if required by law or to protect the rights and safety of our users or the service.
4. Where your data lives
Our database and authentication run on Supabase, hosted on Amazon Web Services in the United States. Some providers listed above may process data in other countries; where they do, they act as our processors under appropriate safeguards.
5. How long we keep it
We keep your account data for as long as your account is open. When you delete your account, your profile, birth details, and saved readings are deleted, and any telemetry is de-identified. We may retain limited records where we're legally required to (for example, payment records held by Stripe for tax and accounting).
6. Your rights and controls
You're in control of your data, directly in the app:
- Access & export: download a copy of your data as JSON from your settings.
- Correct: edit your profile and birth details any time in settings.
- Delete: delete your account and its data from settings — this is immediate and permanent.
Depending on where you live (for example, under the GDPR or the CCPA/CPRA), you may have additional rights, including to object to or restrict certain processing. To exercise any right, use the in-app controls or email privacy@theephemeris.app.
7. Security
Access to your data is protected by database row-level security so that your rows are readable only by you, by encryption in transit, and by provider-side safeguards. No system is perfectly secure, but we design around the principle that your data is yours.
8. Children
The Ephemerisis not directed to children under 18, and we don't knowingly collect their data. If you believe a minor has provided us data, contact us and we'll delete it.
9. Changes to this policy
If we change how we handle data, we'll update the “Last updated” date and, for material changes, notify you. Continuing to use The Ephemeris after a change means you accept the updated policy.
10. Contact
Mildred Mae LLC · Privacy and data requests: privacy@theephemeris.app.