Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account and use the Service, we collect the following information:

• Account Information: Your name and email address, used for account creation, authentication, and communication.
• Profile Information: Date of birth, life priorities, personal preferences, and responses to onboarding questions. This information is used to personalise your daily readings.
• Coffee Cup Images: Photographs of coffee cups that you upload for reading. These images are stored securely and used solely to generate your readings.
• Daily Responses: Your answers to daily micro-questions and evening reflection responses, used to improve reading personalisation and track Oracle accuracy.
• Payment Information: Payment details are processed securely by Stripe. We do not store your full credit card number, CVV, or other sensitive payment data on our servers. We store only a Stripe customer ID and subscription status.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage Data: Pages visited, features used, reading frequency, and interaction patterns within the app.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Timezone: Your device timezone, used to send emails and show features at appropriate local times.

1.3 Information from Third Parties

Horoscope Data: We retrieve general daily horoscope information based on your zodiac sign from third-party astrology APIs. This data is not personally identifiable and is used as one of several inputs for reading personalisation.

2. How We Use Your Information

We use the information we collect to:

• Provide and personalise your daily coffee cup readings
• Generate your Oracle memory profile, which allows readings to improve over time
• Send transactional emails (welcome, subscription confirmation, trial reminders)
• Send daily reading reminders and evening reflection reminders (with your consent)
• Process payments and manage your subscription
• Analyse usage patterns to improve the Service
• Respond to your enquiries and provide customer support
• Comply with legal obligations

We do not use your personal information for advertising purposes. We do not sell your data to third parties. We do not display advertisements in the Service.

3. AI Processing

Your profile information, daily responses, coffee cup images, reading history, and reflection data are processed by artificial intelligence systems to generate personalised readings. This processing includes:

• Image analysis of your coffee cup photographs
• Generation of personalised reading text based on your profile and history
• Creation of an "Oracle memory" summary that helps the AI provide increasingly personalised readings over time

The AI systems we use are provided by third-party providers (including OpenAI and Google). When your data is sent to these providers for processing, it is transmitted securely and used solely for the purpose of generating your reading. These providers process the data in accordance with their own privacy policies and data processing agreements.

We do not use your data to train AI models. Your readings and personal data are processed in real-time and are not retained by AI providers for model training purposes.

4. Data Storage and Security

Your data is stored securely using cloud database platforms with industry-standard security measures including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security policies ensuring users can only access their own data
• Regular security updates and monitoring

Coffee cup images are stored in secure cloud storage with permanent URLs accessible only through authenticated requests.

While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

5. Data Sharing

We share your personal information only with the following categories of third parties, and only as necessary to provide the Service:

• Payment Processing: Stripe processes your payment information. Stripe's privacy policy is available at https://stripe.com/privacy.
• AI Processing: OpenAI and/or Google process your reading data to generate personalised content. Data is transmitted securely and used solely for content generation.
• Email Delivery: Resend delivers emails on our behalf. Resend's privacy policy is available at https://resend.com/legal/privacy-policy.
• Hosting: Our database and file storage are hosted on secure cloud infrastructure.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

6. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to Erasure: You may request that we delete your personal data. You can delete your account through the Settings menu in the app, which will permanently remove your profile, readings, images, and all associated data.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. You can unsubscribe from marketing emails using the unsubscribe link in any email.

To exercise any of these rights, please contact us at help@coffeeoracle.app. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service.

If you delete your account, we will permanently delete your profile information, reading history, coffee cup images, reflection data, and Oracle memory within 30 days. Certain data may be retained longer if required by law or for legitimate business purposes (such as payment records for tax compliance).

If your subscription lapses but you do not delete your account, your data is retained so that you can access it if you resubscribe.

8. Email Communications

We send the following types of emails:

• Transactional Emails: Account confirmation, subscription confirmation, trial ending reminders. These are necessary for the operation of the Service and cannot be opted out of while your account is active.
• Retention Emails: Daily morning reading reminders and evening reflection reminders. You can opt out of these at any time by clicking the unsubscribe link in any email or adjusting your email preferences in the Settings menu.

We will never send you promotional emails from third parties.

9. Cookies and Tracking

The Service uses essential cookies and local storage for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. International Data Transfers

Your data may be processed in countries outside the United Kingdom, including the United States (where our AI processing and hosting providers are located). Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top of this policy indicates when it was last revised.

13. Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

Soft Intel Partners LTD
128 City Road, London, EC1V 2NX, United Kingdom
Email: help@coffeeoracle.app

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113