Soulfate
The small print

Privacy Policy

In force from 16 October 2026

1. Controller

The controller of your personal data is Paweł Czarniecki Web Development, ul. Konwaliowa 18D/60, 81-651 Gdynia, Poland, VAT ID PL5862345478. Contact for anything privacy-related: [email protected].

2. What we collect

  • Account: your email address, a hash of your password (never the password itself), your language, whether you signed in with Google, and when you accepted these terms and confirmed being an adult.
  • Guest account: you can start without an email or password. A guest account holds the same as any account (profile, conversations, notes, streak, the trial wishes) — minus an email address and password — and only the session cookie in this browser ties it to you. Your answers in the first steps (your birth date included) stay on your device until you accept the terms; only then do we create the account and store them. Making an account later keeps the same account — nothing is copied.
  • Profile: the name, birth date, birth time and birth place you give us, and optionally your gender, relationship status and what's on your mind. We turn the birth place into coordinates to calculate your chart.
  • Conversations and readings: the messages you send and the replies, tarot readings, horoscopes, chart and numerology texts generated for you, and short memories the app keeps so the characters remember you. If you compare numerology with someone else, the name and birth date you enter for them.
  • Inferred traits: from your answers and conversations the app estimates a few personality tendencies (for example how you relate to others) to tailor the tone of replies. These are never shown in the app and never used for anything but your own readings.
  • Purchases: what you bought, when, for how much, and the payment provider's reference. We never see or store your card details.
  • Activity and reminders: the days you did something in the app (to count your streak), and — if you mention something coming up in a conversation — a short note so the guide can ask afterwards how it went.
  • Notifications: what the app told you in its notification list (the bell) and whether you read it, gifts of wishes and whether you opened them; and, if you turn push on, your browser's push service address with its encryption keys, the hour you chose, and which notifications we sent and whether they were opened.
  • Technical: a session cookie that keeps you signed in, and your IP address, used briefly to limit abuse on sign-in and sign-up (it is not stored with your account). Starting as a guest uses no IP address at all — not to recognise you, not to limit you. Moving a guest account from an in-app browser (Messenger, Instagram) to your regular one uses a one-time link valid for 10 minutes; we store only its hash.
  • Usage statistics: the pages visited (with any tokens stripped from links), where you came from, device type, browser, language, country, and the names of steps in the app (such as "signup" or "card of the day turned") — no content, no account, no cookies.
  • Session replays (only with your consent): how a visit goes — pointer movement, taps, scrolling, the layout and addresses of pages, device and browser type, and approximate location from your IP address. What you write, your conversations and your readings are masked in your browser and never enter the recording.

Please don't share health, sexual, religious, political or similar sensitive details unless you want them to be part of your conversation. If you do, you explicitly consent to our processing them to reply to you; you can withdraw by deleting that conversation or your account.

3. Why, and on what basis

  • To provide the Service — your account, readings, memory and purchases (GDPR Art. 6(1)(b), contract).
  • To keep it safe — preventing fraud and abuse, rate limits, bot checks, and showing help lines when a message suggests a crisis (Art. 6(1)(f), our legitimate interest in a safe service).
  • To understand how the Service is used — aggregate, cookie-free usage statistics that don't identify you, including anonymous tap positions on pages (no account, no session) to improve the layout (Art. 6(1)(f)). They run from the first visit; you can object by choosing "Reject" or switching them off in cookie settings. They don't run when your browser sends Do Not Track or Global Privacy Control.
  • Recordings of how you use the app (session replays and heatmaps, Microsoft Clarity) — to see where the app is confusing and what breaks in use. Only with your consent (Art. 6(1)(a)), off by default; withdraw it any time in cookie settings.
  • Notifications — only once you turn them on (Art. 6(1)(a), consent; turn them off in your profile or your browser). Streaks and the guide asking how something went are part of the Service (Art. 6(1)(b)).
  • To meet legal duties — keeping payment records for tax and accounting (Art. 6(1)(c)).

We make no decisions about you that have legal or similarly significant effects based solely on automated processing. Tailoring the tone of your readings is profiling, and you can object to it by writing to us.

4. Who processes it for us

We share only what each provider needs to do its job:

  • Google (Ireland, USA) — Gemini writes the replies and readings, from your message, recent conversation, profile and memories. On our paid plan Google does not use them to train its models.
  • OpenRouter (USA) — passes those requests on to Google and keeps no copy of them.
  • Groq (USA) — reads each message to route it (question, follow-up, crisis) and summarises conversations into memories.
  • Stripe / Link (Ireland, USA) — payments; as the seller of record it is also an independent controller of payment data under its own privacy policy.
  • Resend (USA) — sends account emails (confirmation, password reset, purchase confirmation).
  • Cloudflare (USA, global network) — delivers the site, protects it from attacks, and runs the bot check on signup and when you start as a guest (Turnstile).
  • Google (USA) — only if you choose to sign in with Google.
  • Microsoft Ireland Operations Ltd. (Clarity; data stored in the USA) — only if you turn session replays on: receives the recording described above, content masked. Microsoft also processes it under its own privacy statement.
  • Your browser's push service (e.g. Google, Apple, Mozilla) — delivers notifications if you turn them on; their content is encrypted so the service can't read it.
  • Komoot (Photon) (Germany) and OpenStreetMap (Nominatim) — turn the birth place you type into coordinates.

The Service itself — database, conversations, voice rendering and usage statistics (Umami, on our own server) — runs on servers in the European Union. Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long we keep it

  • Account and profile: until you delete your account.
  • Guest account: deleted with everything in it after 7 days without a visit, and at once when you sign out. The guest's session cookie lasts 30 days and renews on every visit. Making an account before then keeps everything.
  • Messages: 24 months from when they were written; messages that triggered the crisis response: 90 days.
  • Free accounts that haven't been used for 24 months are deleted with everything in them.
  • Payment records: 5 years from the end of the year of the payment, as tax law requires — after account deletion, detached from anything that identifies you.
  • Sent-notification history, notifications you have read and anonymous tap positions: 12 months. Unread notifications, gifts, activity days and notification settings: until you delete your account.
  • Usage statistics (Umami): aggregate visit data with no account identifier, for as long as the Service runs.
  • Session replays (Microsoft Clarity): 30 days; heatmaps built from them: 13 months. Clarity's cookies (_clck, _clsk): up to a year, unless you withdraw consent first, which deletes them.
  • Server logs: rotated and kept only briefly, for troubleshooting.

6. Your rights

You can see and correct your profile at any time, download everything we hold about you and delete your account from your profile page — deletion is immediate. You also have the right to restrict or object to processing and to data portability, and to withdraw any consent at any time (which doesn't affect processing before). Write to [email protected] for anything the app doesn't do itself; we answer within a month.

You may complain to a data protection authority — in Poland the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live.

7. Cookies and similar

Strictly necessary: one cookie of our own that keeps you signed in (for a guest, the only thing linking the browser to the account), and your theme and cookie choice saved in your browser's storage. Cloudflare may set security cookies to tell people from bots. Our usage statistics are cookie-free and can't follow you across sites.

With your consent: Microsoft Clarity sets the _clck and _clsk cookies (they link the pages of one visit and recognise a returning browser). Without consent the Clarity script isn't loaded at all. We use no advertising cookies. Change your choice any time: .

8. Adults only

The Service is for people aged 18 and over. If we learn that an account belongs to a minor, we delete it.

9. Security

Connections are encrypted (HTTPS). Passwords are stored as salted scrypt hashes, and sessions and emailed links as hashes too. Access to production data is limited to the operator.

10. Changes

When this policy changes materially, we'll tell you by email or in the app before the change takes effect.