Privacy Policy

Scope

This privacy policy applies to the Augurine website (augurine.com) and the Augurine Android mobile application available on Google Play. References to "the service" or "Augurine" throughout this policy refer to both platforms.

1. Information We Collect

We collect the following categories of information:

• Account information: Email address and password (hashed) when you create an account. If you sign in with Google or Apple, we receive your name and email address from those providers and store them with your account; we do not receive your password.
• Birth data: Date of birth, time of birth (optional), and birth location (city, latitude, longitude) used to calculate your natal chart.
• Journal entries: Mood ratings, emotion tags, domain tags, and text entries you voluntarily submit.
• Partner data: Birth data for partners you add for compatibility readings.
• Witness Marks and reflections: Astrological context attached to a moment you choose to mark, plus any written reflection. Reflection text is stored as ciphertext (in the database column note_ciphertext) and is not readable by us in queryable form.
• Chapter reflections: Short memory lines (up to 500 characters) you optionally add to chapters in Astro Replay.
• Predict questions: Questions you submit to the Predict feature, together with the location context at the time of asking.
• Residency and relationship periods: Time ranges (with city, latitude, and longitude) for places you have lived, and time ranges (with partner name and optional notes) for relationships, used to anchor chapters in Astro Replay.
• Push notifications: If you enable notifications, we store the web push subscription or Android push token required to deliver them.
• Usage data: Anonymous product analytics via PostHog on the web, Android, and server side (screens viewed, features used, anonymous device or browser identifier, app or browser version). Page-view and Core Web Vitals data via Vercel Analytics and Vercel Speed Insights (anonymous Vercel-assigned identifier, device type, country). All are configured to avoid collecting personally identifiable information beyond a pseudonymous user ID.
• Error and performance monitoring: When the application encounters an error, Sentry receives the stack trace, the request URL, and (for authenticated sessions) your pseudonymous Supabase user ID so we can correlate the report with your account on request.
• Subscription identifiers (Android): When you start, change, or cancel a mobile subscription, an anonymous purchase identifier and your pseudonymous user ID are shared with RevenueCat so we can grant the correct access. No payment card information is shared with RevenueCat.
• Payment information: On the website, payments are processed securely through Stripe. On the Android app, subscriptions are processed through Google Play Billing. We do not store credit card numbers on either platform.
• Device permissions (Android): The Android app requires internet access and network state detection. If you enable daily reading notifications, the app uses notification permissions. No location, camera, contacts, or other sensitive device permissions are required.

2. How We Use Your Information

• Calculate your natal chart, transits, and forecasts
• Generate personalized readings based on your chart data
• Analyze journal patterns against Today activation context and legacy transit data for weekly insights
• Process subscription payments
• Send daily reading notifications (if enabled)
• Verify you are a real user during signup and login via an invisible bot challenge
• Improve our services through anonymous usage analytics and error monitoring

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase with row-level security (RLS) policies ensuring you can only access your own data. All connections are encrypted via TLS. Passwords are hashed using bcrypt. The application is deployed on Vercel with HTTPS enforced. Reflection text attached to Witness Marks is encrypted at rest in a dedicated ciphertext column.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising. Your birth data and journal entries are never used for advertising. We use the following service providers who may process data on our behalf:

• Supabase: authentication and database hosting
• Vercel: application hosting, anonymous website analytics (Vercel Analytics), and Core Web Vitals (Speed Insights)
• PostHog: anonymous product analytics on the web, Android, and server side
• Sentry: error and performance monitoring (receives stack traces, request URLs, and your pseudonymous Supabase user ID for authenticated sessions)
• Cloudflare Turnstile: invisible bot challenge during signup and login (Cloudflare receives the visitor IP and challenge metadata)
• Resend: transactional and digest email delivery (recipient address and message content)
• OpenStreetMap (Nominatim): city-to-coordinates geocoding when you search a birth or current location
• CartoCDN: vector map tiles for astrocartography (your IP and tile coordinates are visible to the tile server while a map renders)
• Upstash Redis: rate limit counters keyed on your account ID
• Google and Apple: optional OAuth sign-in (we receive your name and email if you choose to use them to sign in)
• Stripe: payment processing (website)
• Google Play: subscription billing and app distribution (Android)
• RevenueCat: mobile subscription entitlement management (receives a pseudonymous user ID and purchase metadata; no payment card information)
• OpenAI: reading, insight, and Predict narration generation. We send your birth data, computed chart placements, the daily activation context, recent journal entry text when generating journal-driven readings, partner birth data for compatibility readings, and the text of questions you submit to the Predict feature along with the associated timing and observation context. Inputs are not retained or used for model training under our API agreement.

5. Your Rights

You have the right to:

• Access your personal data via your account settings
• Update or correct your birth data at any time
• Delete your account and all associated data via account deletion on the website or from within the Android app
• Export your data. Premium users can export journal and transit data from Settings. All users can request a full export of their personal data by emailing support@augurine.com; we respond within 30 days.
• Opt out of analytics tracking via cookie preferences

6. Cookies

On the website, we use essential cookies for authentication (Supabase session tokens). Vercel Analytics and Speed Insights load only after you accept cookie consent. PostHog product analytics is treated as a first-party tool: it initializes automatically for signed-in users (on the lawful basis of performance of our Terms of Service) unless you reject analytics in cookie preferences. Signed-out visitors are not tracked by PostHog until they accept cookie consent. The Android app does not use cookies; it uses local secure storage for session tokens and a pseudonymous identifier for PostHog analytics. You can change your cookie preferences at any time. We do not use advertising or tracking cookies on either platform.

7. Data Retention

Your data is retained for as long as your account is active. When you delete your account, your profile, birth data, journal entries, readings, partner data, Witness Marks, and chapter reflections are removed immediately. Anonymized analytics events that contain no personally identifiable information may be retained by our analytics providers under their own retention schedules.

8. Children's Privacy

Augurine is not intended for children under 16, or the higher minimum age set by the law of your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, contact us at support@augurine.com.