Privacy Policy

Love Oracle (“we”, “us”) operates loveoracle.ai and is the data controller for the personal data described here. Contact: privacy@loveoracle.ai.

• ✦Your questions and readings. The question text you type, the cards drawn, the reading generated for you, any follow-up questions, and notes you add. This is the service; without it there is no reading and no history.
• ✦Account data. Your email address, chosen language, credit ledger, daily-card streak and plan. Only if you create an account.
• ✦Guest usage signal. If you read without an account we set a random identifier cookie and store a truncated salted hash of your IP address. We do not store your IP itself, and the hash deliberately excludes your browser user-agent. It exists for one purpose: enforcing the one-free-reading limit.
• ✦Technical data. Standard server request data needed to serve and secure the site, including rate-limiting counters held in memory.
• ✦Analytics and session replay — only with your consent. Product events (pages viewed, readings completed) and, if enabled, an anonymised recording of your session used to diagnose usability problems. Recordings mask all form input, redact authentication traffic, and strip tokens from URLs. Nothing in this category runs before you accept.

• ✦Payment card numbers. If and when payments launch they are handled entirely by Stripe; card data never reaches our servers.
• ✦Special category data as a deliberate collection: we do not ask for your health, sexuality, religion, politics or biometrics. If you volunteer something in a question, it is stored as ordinary question text — see section 10 on deletion.
• ✦Your contacts, calendar, location, camera, microphone or files.
• ✦Data purchased from brokers, or profiles built by combining you across other sites.

• ✦Performance of a contract — delivering readings, your history, credits and account.
• ✦Legitimate interests — keeping the service secure, preventing abuse of free limits, and fixing faults. We have balanced these against your rights; the guest signal is hashed and truncated precisely because of that balancing.
• ✦Consent — analytics, session replay and any marketing email. Withdrawable at any time, as easily as it was given.
• ✦Legal obligation — where we must retain or disclose something by law.

Your question and the drawn cards are sent to our AI model provider to generate the reading. We instruct the provider not to train on this data. Readings are generated fresh each time; we do not use your questions to fine-tune any model of our own.

The Oracle is entertainment. It refuses medical, pregnancy, legal, financial and self-harm questions and redirects to real support. Do not use it as a substitute for a professional.

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We use a small number of processors, each bound by contract:

• ✦Supabase — database, authentication and storage.
• ✦Our AI model provider — question and card text, to generate the reading.
• ✦Vercel — hosting and delivery.
• ✦PostHog — product analytics, only after consent.
• ✦Stripe — payments, if and when enabled.

We may also disclose data where legally compelled, or to protect the rights and safety of users and the service.

Our processors may handle data outside your country, including in the United States. Where data leaves the UK or EEA we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, together with the technical measures described in this policy.

• ✦Readings and questions — while your account exists. On the free tier, older readings drop out of your journal as described on the pricing page.
• ✦Guest readings — retained to enforce the free limit, then pruned.
• ✦Account data — until you delete your account, then removed within 30 days except where we must keep records by law.
• ✦Session recordings — short retention, automatically pruned by a scheduled job.
• ✦Analytics events — per our analytics provider’s retention settings.

Data is encrypted in transit. Database access is constrained by row-level security so one account cannot read another’s readings, and write access to sensitive columns (plan, role, ban status) is revoked from ordinary user roles rather than merely hidden in the UI. Administrative access is restricted to an explicit allowlist and every administrative action is written to an audit log.

No system is perfectly secure. If a breach affects your rights we will notify you and the relevant supervisory authority as required.

Depending on where you live you have the right to access, correct, delete, port, restrict or object to our processing of your data, and to withdraw consent. Residents of California and other US states with comprehensive privacy laws additionally have the right to know, to delete, to correct, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights.

To exercise any of them, email privacy@loveoracle.ai. We respond within 30 days. You may also complain to your local supervisory authority.

• ✦Essential — your session, and the guest identifier that enforces the free-reading limit. These are required for the site to work and are not optional.
• ✦Analytics — set only after you accept the banner. Decline and they are never set. You can change your mind by clearing this site’s storage in your browser.

Love Oracle is for adults, 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

If we change this policy we update the date above. Material changes will be announced in the product before they take effect.

privacy@loveoracle.ai · See also our Terms of Service.