Privacy Policy

We take your privacy seriously. This policy explains what data we collect, how we use it, and what rights you have — including how your data interacts with the AI services that power our platform.

We collect only the data necessary to provide and improve our services:

• ·Account data: Name, email address, and hashed password — provided when you register
• ·Profile data: Birth date, birth place, gender, and personality type information you voluntarily enter to personalise readings
• ·Content data: Tarot questions, dream entries, journal notes, and other text you submit to receive AI-generated interpretations
• ·Purchase data: Order details, product purchased, and transaction ID — required for billing and fulfillment
• ·Technical data: IP address, browser type, device type, and pages visited — collected automatically for security and performance

We do not collect or store payment card details. All payment processing is handled exclusively by Stripe.

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:

• ·Art. 6(1)(b) — Contract: Processing necessary to provide your account, generate readings, and fulfill purchases
• ·Art. 6(1)(a) — Consent: Where you have given explicit consent (e.g. analytics cookies, marketing communications)
• ·Art. 6(1)(c) — Legal obligation: Where retention is required by applicable law (e.g. tax and accounting records)
• ·Art. 6(1)(f) — Legitimate interests: For fraud prevention, platform security, and service improvement

Your data is specifically used to: create and manage your account, generate AI readings and interpretations, process purchases, send transactional emails, improve platform security and performance, and respond to support requests.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Omniscient Insight uses Google Gemini (and may use other AI providers) to generate the interpretations, readings, and insights you receive. This section explains exactly how your data interacts with these services.

We do not use your inputs to train AI models. Your submitted content is sent to the AI provider solely to generate your response and is not retained by us beyond displaying your reading history.

AI providers process the data they receive according to their own privacy policies. For Google Gemini, see: policies.google.com/privacy.

Best practice recommendation: Do not include sensitive personal information — such as financial account numbers, medical history, or government ID numbers — in any text you submit for AI processing.

When you first visit, a consent banner lets you accept all, reject all, or choose per category (Analytics and Marketing) via "Customize". You can change or withdraw your choice anytime using the button below. We use the following:

• ·Essential storage: Required for authentication, session management, and basic PWA functionality. Always active; cannot be disabled.
• ·Analytics (Plausible): Privacy-friendly, cookieless usage statistics. Loaded only if you allow the Analytics category. Otherwise no analytics script is loaded.
• ·Marketing — referral cookie (ref_code): If you arrive via a referral or affiliate link, a 30-day cookie records the referrer so credit is attributed. Set only if you allow the Marketing category.
• ·Preference storage: Stores UI settings (e.g. voice playback options) locally in your browser. No data is sent to our servers.
• ·Product analytics: We record anonymous, first-party counts of which landing-page version led to a sign-up. These contain no personal data, set no cookies, and are never shared with third parties.

We use selected third-party services to operate our platform. Each processes data under their own privacy policies:

• ·Stripe — payment processing: stripe.com/privacy
• ·Supabase — database and authentication infrastructure
• ·Google Gemini — AI interpretation engine: policies.google.com/privacy

We retain your data only as long as necessary for the purposes described in this policy:

• ·Account data: Retained for the lifetime of your account, plus up to 30 days following a deletion request
• ·Reading and journal content: Retained while your account is active; deleted when your account is closed
• ·Purchase and billing data: Retained as required by applicable accounting and tax law in your jurisdiction
• ·Support communications: Retained for up to 3 years from the date of last contact
• ·Analytics data: Aggregated and anonymized after 14 months

As a data subject under the EU General Data Protection Regulation, you have the following rights:

• ·Right of access (Art. 15): Request a copy of the personal data we hold about you
• ·Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• ·Right to erasure (Art. 17): Request deletion of your personal data
• ·Right to restriction (Art. 18): Request that we limit how we process your data
• ·Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• ·Right to object (Art. 21): Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@omniscient-insight.com. We will respond within 30 days as required by GDPR Art. 12.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law.

We implement appropriate technical and organizational measures to protect your personal data — including encrypted data transmission (TLS/HTTPS), hashed passwords, and strict access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

We may update this Privacy Policy to reflect changes in our practices or to comply with applicable law. Material changes will be communicated via a notice on our platform or by email. Continued use of the platform after any update constitutes acceptance of the revised policy.

For questions about this policy, contact: privacy@omniscient-insight.com