Legal
Privacy Policy
Effective: June 9, 2026
1. Who We Are
The Quiet Oracle is operated by NixxTech Group. This Privacy Policy explains what information we collect, how we use it, and your rights over it. If you have questions, contact us at privacy@the-quiet-oracle.com.
2. Information We Collect
Account information
When you create an account, we collect your email address and a hashed password. If you sign in via a third-party provider (e.g., Google), we receive the information that provider makes available (typically name and email).
Reading content
We store the tarot cards you enter, any question or intention you provide, and the AI-generated interpretation. This content is private to your account.
Journal entries
Journal entries you write are stored and private to your account.
Usage data
We collect basic usage metrics (reading counts, feature usage) to operate and improve the Service. We do not sell this data.
Payment information
Payments are processed by Stripe. We do not store full credit card numbers. We receive billing metadata (plan type, status, customer ID) from Stripe.
Technical data
Standard server logs including IP addresses, browser type, and request timestamps. Used for security and error monitoring only.
3. How We Use Your Information
- ✦To deliver and operate the Service
- ✦To process payments and manage subscriptions
- ✦To send transactional emails (account confirmation, billing notices)
- ✦To monitor for abuse and enforce our Terms of Service
- ✦To improve the Service through aggregated, anonymized analytics
We do not use your personal reading content, journal entries, or questions to train AI models. We do not sell your personal data to third parties.
4. AI Processing
Readings are generated by one third-party AI provider: OpenAI. When you request a reading, the relevant data (your cards, your question, your selected voice, and — where you have provided birth details — the astrological placements derived from them) is transmitted to OpenAI to generate your interpretation. Their data practices are governed by their privacy policy. We do not share your account information or journal entries with AI providers.
What the Oracle remembers
Off by default. If you turn on memory in your settings, we note the subjects you bring to a reading — short phrases such as “a job decision” — and include them as background in your later readings, so the Oracle recognises what you have been sitting with. These notes are derived from your own readings and are never shared with anyone else, including a person you hold a joint reading with.
You can see everything stored about you, at any time, on the memory settings page. You can delete all of it there. Turning memory off deletes what is held rather than hiding it, and notes that have not appeared in a reading for 90 days stop being used.
5. Data Sharing
We share your data only with:
- ✦Supabase — database and authentication infrastructure
- ✦Stripe — payment processing
- ✦OpenAI — AI interpretation generation
- ✦Resend — transactional email delivery
- ✦Sentry — error monitoring (no personal reading content is included)
- ✦Vercel — hosting and infrastructure
We may share data if required by law or to protect the rights and safety of NixxTech Group or others.
6. Data Retention
We retain your account and reading data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records).
7. Your Rights
Depending on your location, you may have the right to:
- ✦Access the personal data we hold about you
- ✦Request correction of inaccurate data
- ✦Request deletion of your account and data
- ✦Export your reading history and journal entries
- ✦Object to or restrict certain processing
To exercise these rights, contact us at privacy@the-quiet-oracle.com. We will respond within 30 days.
8. Cookies
We use session cookies required for authentication. We do not use advertising cookies or third-party tracking cookies. Analytics, if used, are privacy-preserving and cookie-free.
9. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No system is completely secure; we cannot guarantee absolute security.
10. Children
The Service is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the Service. The effective date at the top of this page reflects the most recent update.
12. Contact
Questions or concerns about this Privacy Policy? Reach us at privacy@the-quiet-oracle.com.