The short version: your reading journal stays on your device. We receive limited service and account-wallet data, and your reading content leaves your device only when you choose to request an AI reflection.
Who we are
Sunny Systems provides The Oracle mobile app, its account and reflection services, and this website. This policy explains how we handle information when you use them or contact us.
Information we handle
On your device: saved readings can include your question or topic, optional notes, cast details, reading text, dates, favorites, and saved AI reflections. The app also stores preferences, a random installation identifier, and a local cache of your stalk balance and pending wallet activity.
Account wallet: to make stalks available across your devices, StoreKit provides the app with a signed, app-specific transaction identifier associated with the Apple account used for the App Store. Our account service verifies it and stores a one-way hash, not the raw identifier, as the account key. This pseudonymous account key identifies one shared wallet across compatible devices and is disclosed as a user or account identifier in App Store privacy information. We do not receive your Apple ID, email address, name, contacts, or password.
Wallet reconciliation: the app keeps a local cache of balances and pending wallet activity so eligible readings can continue offline. When the app reconnects, it sends the signed account proof, a random installation identifier, app version, and unique pending claims, debits, or purchase records to reconcile with the shared ledger. We store the account and installation hashes, balance categories, gift and reconciliation dates, operation identifiers, types and times, overdraft state, and limited verified purchase records. Wallet operations do not contain your reading question, notes, cast, or reflection content. Activity on several offline devices can cause the shared balance to adjust after reconciliation, and later gifts or purchases may first settle an overdraft.
AI reflections: reflections are optional. If you request one, we send your question or topic, optional note, and reading details and preferences to The Oracle's service and to OpenAI or Anthropic to generate the reflection. We do not place your question, note, reading text, prompt, or generated reflection in our operational logs.
Service data: we collect limited pseudonymous usage, device, purchase, and reliability data to operate, secure, and improve the service and control costs. This can include a pseudonymous installation label, app and operating-system versions, language, broad region and time zone, feature outcomes, reflection ratings, and service-performance metadata. It does not include reading or reflection content. Our servers and hosting providers also process ordinary technical data such as IP address, request time, path, status, and browser or device information.
Purchases: Apple handles payment details, taxes, receipts, and refunds. We receive limited purchase and refund records needed to provide stalks and keep financial records accurate. We do not receive your payment-card details, buyer name, email address, or Apple ID from these records.
Why we use information
We use information to provide the features you request, process purchases, protect and maintain the service, understand aggregate performance, respond to you, and comply with law.
Where applicable, our legal bases are performance of our agreement with you, your permission when you choose to share content for an AI reflection, our legitimate interests in security and reliable service operation, and compliance with legal obligations. You can avoid future AI sharing by not requesting another reflection.
Service providers and sharing
We share information only as needed to provide or protect The Oracle. We require our providers, through their contracts, terms, and service configurations, to protect personal information consistently with this policy and applicable law.
We do not sell your personal information, use third-party advertising SDKs, or track you across other companies' apps or websites for advertising.
- Apple provides App Store distribution, purchases, app-specific account proof, and optional iCloud or device backup services.
- OpenAI or Anthropic processes the content you choose to send for an AI reflection.
- Amazon Web Services and our website-hosting providers host the service and legal pages.
- Telegram can receive limited pseudonymous operational alerts, but not reading or reflection content.
- Advisers, authorities, or a successor organization may receive information when reasonably necessary for legal compliance, protection, or a genuine business transfer.
Retention
Device data remains until you delete it, clear the app's data, or remove the app, subject to Apple backups and iCloud settings you control. Removing the app does not by itself delete the server-side account wallet or financial records shared with your other devices.
The selected AI provider may retain qualifying API inputs and outputs for up to 30 days for safety, abuse prevention, legal obligations, or security exceptions. Our own operational systems do not keep the content of your AI request or response.
We keep the pseudonymous account wallet while it is needed to provide shared balances and preserve valid purchases. We keep events, service metadata, purchase records, and security or access logs only as long as reasonably needed for service operation, reliability, security, financial records, legal obligations, and dispute resolution. We then delete or de-identify them.
Your choices and rights
You can use the core reading experience without an AI reflection, omit sensitive details, delete saved readings, and manage iCloud or backups in Apple's settings.
Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection, withdraw consent where consent applies, and complain to your local data-protection authority. Email us to make a request. We may need limited information from the app to verify that the request relates to your installation or account, and we may retain records where law or legitimate security needs require it.
Security and international processing
We use reasonable technical and organizational safeguards, including encrypted connections, pseudonymous identifiers, restricted operational data, and separation of reading content from analytics. No system can promise absolute security.
Our providers may process information in countries other than your own. Where required, we rely on appropriate contractual or legal safeguards for those transfers.
Children
The Oracle is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided personal information so we can review and delete it where appropriate.
Changes and contact
We may update this policy when the app, our providers, or applicable law changes. We will post the revised policy here, change the effective date, and provide additional notice when reasonably required.
Questions and privacy requests can be sent to Sunny Systems at privacy@sunnysystems.net.