← Back to Quantum Oracle

Privacy Policy

Last Updated: December 2, 2025 | Version 1.0.0

1. Information We Collect

Account Information:

• Email address and name (for account creation)
• Password (encrypted and securely stored)
• Subscription tier and payment history

Personal Spiritual Data:

• Birth chart information (date, time, and location of birth)
• Tarot reading history and interpretations
• Journal entries and personal reflections
• Goal tracking and progress data

Usage Information:

• Device information (type, operating system)
• App usage patterns and feature interactions
• Reading preferences and favorite decks

Payment Information:

• Processed securely through Stripe
• We do not store credit card details
• Stripe handles all payment data under PCI-DSS standards

2. How We Use Your Information

To Provide Personalized Experiences:

• Calculate and interpret your astrological birth chart
• Provide AI-powered tarot readings tailored to your cosmic profile
• Track your spiritual journey and reading patterns
• Connect journal entries with relevant past readings

To Improve Our Service:

• Analyze usage patterns to enhance features
• Improve AI interpretation quality
• Optimize app performance and user experience
• Develop new features based on user needs

To Process Transactions:

• Manage subscription billing through Stripe
• Send payment receipts and subscription updates
• Handle upgrade and cancellation requests

To Communicate:

• Send transactional emails (account creation, password resets)
• Notify you of subscription changes
• Share important updates (if opted in)
• Respond to support requests

3. Data Sharing and Third Parties

We partner with trusted service providers:

Supabase (Database & Authentication):

• Stores user accounts and application data
• Provides secure authentication services
• Data encrypted at rest and in transit
• SOC 2 Type II compliant

OpenAI ChatGPT API (AI Processing):

• Processes reading interpretations
• Your prompts are used to generate personalized readings
• OpenAI's data usage policy: does not use API data for model training
• No personally identifiable information sent in prompts

Stripe (Payment Processing):

• Handles all subscription billing
• PCI-DSS Level 1 compliant
• We never see or store your credit card details

4. Data Security

Encryption:

• All data encrypted in transit (HTTPS/TLS 1.3)
• Database encrypted at rest (AES-256)
• Passwords hashed using bcrypt

Access Controls:

• Row-level security enforces data isolation
• Multi-factor authentication available
• Regular security audits and updates

Data Retention:

• Account data retained while account is active
• Reading history stored according to subscription tier
• Deleted accounts removed within 30 days

5. Your Rights and Choices

Access Your Data:

• View all your readings, journal entries, and profile information
• Export your reading history to PDF

Modify Your Data:

• Update profile and birth chart information anytime
• Edit or delete journal entries
• Manage notification preferences

Delete Your Data:

• Delete individual readings or journal entries
• Request account deletion (removes all associated data)
• Data permanently deleted within 30 days

Opt-Out:

• Unsubscribe from notification emails
• Disable push notifications in settings
• Control data sharing preferences

6. Children's Privacy

Quantum Oracle is rated 17+ and not intended for children under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided information, please contact us immediately.

7. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards:

• Standard contractual clauses with service providers
• Compliance with GDPR (EU) and CCPA (California)
• Data processing agreements with all partners

8. Cookies and Tracking

Essential Cookies:

• Session management and authentication
• Security and fraud prevention

Analytics (Optional):

• Usage patterns and feature popularity
• Crash reporting for bug fixes
• Can be disabled in settings

No Advertising Trackers:

• We do not use third-party advertising networks
• No cross-site tracking
• No behavioral profiling for ads

9. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what data we collect
• Right to delete personal information
• Right to opt-out of data sales (we don't sell data)
• Right to non-discrimination for exercising rights

To exercise these rights: Email support@quantumoracle.com

10. European Privacy Rights (GDPR)

EU/EEA residents have rights under GDPR:

• Right to access your data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing

Legal Basis for Processing:

• Contract performance (providing our service)
• Legitimate interests (improving features)
• Consent (optional features like notifications)

Data Protection Officer: dpo@quantumoracle.com

11. Changes to This Policy

We may update this Privacy Policy to reflect:

• New features or services
• Changes in legal requirements
• Improvements to our practices

Notification of Changes:

• Email notification for material changes
• In-app notification upon next login
• Continued use constitutes acceptance

12. Contact Us

← Return to Quantum Oracle | Terms of Service