privacy notice

if you don't sign in, your work — readings, charts, grimoire entries, sigils — is stored in your browser's local storage on your device. we don't receive it. clearing your browser data clears it. the free daily card needs no account.

to remember you across devices we store, in our database (Supabase): your email, your chosen path and display name, your tier and when it expires, and the things you choose to save — readings, grimoire and journal entries, natal charts, sigils, and companion conversations. we use your email to send the magic sign-in link, receipts, and the notes you ask for.

a natal chart needs your birth date, time and place. if you save a chart, we store those details with your account so the companion can read from them. journal and grimoire entries are yours: they are visible only to your account, and we don't read them except where needed to keep the service running, investigate abuse, or comply with the law. when you ask the companion for a reading, the relevant parts of your saved chart, recent draws and entries are sent with your message to the AI provider below so it can answer in context. please don't write down anything you wouldn't want processed that way.

crypto payments are processed by NowPayments; card payments by Gumroad. we never see your wallet keys or card number. we keep a record of each purchase — what you bought, the amount, the processor's payment id, and for crypto the currency used — to unlock your access, handle refunds, and keep our books. we keep these records for as long as the law requires accounting records to be kept. the processors handle your payment data under their own privacy policies.

readings and companion replies are generated by a third-party AI model from the text you submit and the context described above. the provider is currently Groq, and we may switch to another (for example Anthropic); either way we send a provider only what it needs to answer, and we don't sell your data or allow it to be used for advertising. because readings are machine-generated, they can be wrong — see the terms.

Cloudflare (hosting, delivery and security), Supabase (database & sign-in), Resend (transactional email), NowPayments (crypto checkout), Gumroad (card checkout), our AI model provider (above), and our analytics service (below). we send these providers only what each needs to do its job. they may process data outside your country; where that applies we rely on the safeguards the provider offers. we do not sell your personal data to anyone.

we measure aggregate use of the site — which pages are visited and in what order, device type, and rough country — with a privacy-light analytics service. it is used to understand what to fix and build, not to build advertising profiles or follow you across other sites. if we ever use analytics that needs your consent, we will ask first.

if you opt into the evening sending, we store the push subscription your browser issues so we can deliver it. turn it off in your browser or device settings at any time. we send email only for sign-in, receipts, and notes about your account, plus anything you opted into; optional emails carry an unsubscribe link.

we use only what is needed to keep you signed in, remember small preferences (such as an anonymous browser id and dismissed prompts), and run the site. no advertising cookies.

account data is kept while your account exists. if you ask us to delete your account we remove your profile, saved readings, charts and journal entries within 30 days, except records we must keep by law (such as payment records) and short-lived backups that expire on their normal schedule.

you can ask us for a copy of what we hold, ask us to correct it, ask us to delete your account and its data, or object to how we use it. write to hello@thevesperine.app from the email on the account and we'll act within 30 days. depending on where you live (for example the EEA, UK or California) you have further legal rights, and you may complain to your local data-protection authority. you can also clear local-storage data yourself at any time.

the vesperine is for adults. we don't knowingly collect data from anyone under 18. if you believe a child has given us data, write to us and we'll delete it.

we use encrypted connections and access controls, but no system is perfectly secure. if this notice changes materially we'll update the date above and, for significant changes, tell signed-in users.