Privacy Policy

1. What we collect

• Account: your email address and a securely hashed password (we never see your password in plain text).
• Waitlist: your email address, when you joined, and the optional question you submit. Joining the waitlist does not create an account.
• Birth details:the birth date, birth city, and — optionally — birth time, name, and gender you enter for yourself or for charts you create. Birth time is always optional; we tell you honestly what a reading can and can't do without it.
• Your reading context:the profile preferences you set and the free-text situation (“what's alive right now”) you optionally provide for a reading.
• Readings and conversations: saved readings, their input choices, chat messages, and your daily tarot card and interpretation. We save an account timezone so the daily card resets consistently across devices.
• Optional reading feedback: the thumbs you press and any improvement category you choose, linked to that saved reading. You can skip the question or change your answer. We keep your latest answer and use aggregate reports to guide improvements.
• Usage telemetry (beta): which systems ran, each model call, response latency, input/output and cache token counts, estimated cost. Account-linked usage records also enforce allowances independently of deleting a reading or chat message. Failed or uncertain calls may have incomplete cost data. We use aggregated reports to assess quality and costs.
• Page analytics:our host, Vercel, records which pages are visited, roughly where in the world from, and what referred you. It sets no cookies, does not follow you across other sites, and is not linked to your account. Separately, our own page measurement stores the page path, referring site, a random identifier held in the current browser tab, and cumulative time the page is visible. Signed-in visits are linked to the account; a shared-reading visit also stores that reading's share token. Visible time does not establish that someone read or understood the page.
• Support and access: contact-form messages, invite or waitlist records, and short-lived request-limit counters. Request-limit identifiers are hashed with a server secret; the counters expire after two days.
• Payment metadata: if you subscribe, Stripe processes your payment and we store identifiers (customer and subscription IDs) to manage your plan. We never receive or store your card number — Stripe holds it.
• Standard logs: our hosting providers record ordinary request data such as IP address and timestamps for security and reliability.

2. How we use it

• To compute placements and generate your readings.
• To save your readings and preferences to your account.
• To operate, secure, and improve the service.
• To measure reading quality and set honest prices during the beta (telemetry).
• To manage the waitlist in join order and contact you about Ephemeris access. Joining does not subscribe you to a newsletter.
• To process payments and manage your subscription.
• To contact you about your account or material service changes.

We do not sell your personal information, and we do not use your birth details or reading context to train our own models.

3. Who processes your data

We share data only with the service providers we need to run The Ephemeris, and only for that purpose. When you request a reading, the computed placements and the context you type are sent to our AI provider so Bob can write the interpretation; your birth city is sent to a geocoding service to resolve coordinates and the correct historical timezone.

Your optional waitlist question is stored in Supabase and can be read by authorized operators. The waitlist form itself does not send it to any AI provider. Authorized operators may use AI-assisted tools to view and manage waitlist records.

These providers are bound by their own terms and process data on our instructions. We may also disclose information if required by law or to protect the rights and safety of our users or the service.

4. Where your data lives

Our database and authentication run on Supabase, hosted on Amazon Web Services in the United States. Some providers listed above may process data in other countries; where they do, they act as our processors under appropriate safeguards.

5. How long we keep it

We keep waitlist details until we close the waitlist or you ask us to remove them. You do not need an account to request removal; email privacy@theephemeris.app. Account deletion also removes waitlist records matching your verified email.

We keep your account data for as long as your account is open. When you delete your account, your account-linked profile, birth details, readings, chats, daily cards, reading feedback, usage records, support messages, and activity measurements are deleted. Consumed invite codes are retired so they cannot be reused. Messages also sent to a support mailbox and provider logs or backups follow those systems' separate retention processes. We may retain limited records where we're legally required to (for example, payment records held by Stripe for tax and accounting).

6. Your rights and controls

You're in control of your data, directly in the app:

• Access & export: download a copy of your data as JSON from your settings.
• Correct: edit your profile and birth details any time in settings. Corrected birth details apply to future readings; saved readings retain the chart calculated when they were created.
• Delete: delete your account and its data from settings. Active subscriptions must end, outstanding billing must settle, and any in-progress or uncertain reading must be resolved first. Once the app confirms deletion, its account data is permanently removed.

Depending on where you live (for example, under the GDPR or the CCPA/CPRA), you may have additional rights, including to object to or restrict certain processing. To exercise any right, use the in-app controls or email privacy@theephemeris.app.

7. Security

Database row-level security restricts access to account data. Waitlist records are available only through our server and authorized operators, not through public or signed-in browser access. We also use encryption in transit and provider-side safeguards. No system is perfectly secure, but we design around the principle that your data is yours.

8. Children

The Ephemeris is not directed to children under 18, and we don't knowingly collect their data. If you believe a minor has provided us data, contact us and we'll delete it.

9. Changes to this policy

If we change how we handle data, we'll update the “Last updated” date and, for material changes, notify you. Continuing to use The Ephemeris after a change means you accept the updated policy.

10. Contact

Mildred Mae LLC · Privacy and data requests: privacy@theephemeris.app.