ORACUL Privacy Policy

1. Who we are

ORACUL is operated by Artur Avtukhov, an independent developer established in Italy.

For the purposes of the EU and UK General Data Protection Regulation we are the data controller for the personal data described in this Policy.

Privacy contact: artooles1@gmail.com. General support: artooles1@gmail.com.

We have not appointed a data protection officer; privacy requests are handled by the contact above.

2. Scope

This Policy covers the ORACUL mobile application for Android and iOS, the https://oracu1.com website, and the backend API that serves them.

It applies to everyone who uses the Service, including people in the European Economic Area, the United Kingdom, Switzerland, the United States and Canada.

It does not cover the App Store, Google Play or any other third-party service you reach from the App; those have their own privacy policies.

3. Information you provide

Almost everything we hold about you is something you typed or uploaded yourself. We do not buy personal data, and we do not receive it from data brokers or advertising networks.

4. Account information

When you register and use your profile, we store:

• Your name and email address.
• Your password, stored only as a bcrypt hash — we never store or see the password itself.
• Your gender selection (male, female or “prefer not to say”), used so that generated text reads naturally.
• An optional avatar image you choose, stored with your account record.
• An optional current city with its timezone and coordinates, used for lunar and forecast calculations.
• Your subscription state (tier, status, period dates) and the time of your last sign-in.
• A short-lived record while registration is pending: until you enter the four-digit code from your email, your details live in a temporary record that expires automatically, and no account exists.

5. Birth information and astrology data

To provide the core function of the Service we store your date of birth, time of birth, place of birth (as text), its timezone, and its latitude and longitude.

This data is used to compute your natal chart, house cusps, planetary positions, aspects, daily and annual transits, solar and lunar returns, lunar-calendar days, numerology numbers and compatibility scores. Those calculations run on our own server with an ephemeris library; no personal data is sent anywhere for them.

Derived astrological facts (for example “Sun in Virgo, Moon in the 4th house, Mercury retrograde”) are then sent to our AI provider so that it can write the interpretation you read. Your name, email address and photographs are not part of that request, except where the section is explicitly about your name.

We treat your date of birth as ordinary personal data used to deliver a feature you asked for. We use it for astrological calculation only: we do not use it to infer health, religious or philosophical beliefs, sexual orientation or any other special category of personal data, and the Service must not be used to do so. Free-text fields are covered in section 12.

You can edit or delete a birth profile at any time in the App, and deleting your account deletes all of them.

6. Content you submit to ORACUL

Depending on which sections you use, we also store:

• Dream texts you write, together with the interpretation, the extracted symbols and your dream statistics.
• Questions you ask in the horary (yes/no) section and the request and answers you give in the Leela game.
• Career profile answers (activity, role, work context) when you fill in the career questionnaire.
• Names and birth data of other people you add to compatibility, family, friends, colleagues, the family tree or the child name-harmony calculator, along with the relationship layout you arrange.
• Photographs of your palm and of your face that you upload for palmistry and portrait readings, the annotated version generated from them, and the resulting reading.
• Notification preferences: whether forecast, affirmation and insight notifications are on, and the time of day you chose.

7. Information about other people that you enter

When you add another person to a compatibility, family, friends, colleagues or family-tree section, you provide their name and birth data. We process it only to produce the reading you asked for, and only within your account.

You are responsible for having a lawful basis to enter that data. Keep it to the minimum needed and never enter sensitive information about another person.

That data is deleted when you delete the entry, and when you delete your account.

If someone believes their data has been entered into ORACUL without a lawful basis, they can write to artooles1@gmail.com and we will investigate and, where appropriate, remove it.

8. Technical and device data

We record a deliberately small amount of technical data, and only for security, abuse prevention and operating the Service:

• Sign-up, sign-in and password-reset events: the IP address we observed, the User-Agent header, and the device information the app reports (platform, app version). Kept as a security log of account access.
• App activity: the fact that the app was opened, and the names of screens from a fixed allowlist. No screen contents, no parameters, no text you entered.
• A random installation identifier generated on your device, stored only as a one-way keyed hash, used to enforce the limit on how many accounts can be created from one device.
• AI usage records: which feature was used, which model, how many tokens it cost, and the IP address and country of the request. Used for cost control and capacity planning.
• Push devices: the Firebase push token of your device, its platform, its timezone and the notification time you selected, plus a short delivery log kept for 30 days.
• Security events (for example a rejected app-attestation check) and, where an administrator has blocked an address, an abuse-prevention record keyed to an email address or an IP address.
• Website visits to the landing page: session and page-view events and an all-time counter of free natal charts built from one IP address.

We do not use advertising identifiers. There is no advertising SDK, no analytics SDK, no crash-reporting SDK and no tracking pixel in the mobile app.

Your country is derived from your IP address using an offline database file stored on our own server; your IP address is not sent to any geolocation service.

9. Subscription and payment information

Subscriptions are purchased through the Apple App Store or Google Play. Those stores process the payment.

We never receive, see or store your card number, bank details or billing address.

We store only the resulting entitlement on your account: the tier, the status, the product identifier and the period dates.

10. AI processing

Interpretive text in the Service is generated using the OpenAI API. One provider is used. As we are established in the EEA, our contracting party for these services is OpenAI Ireland Ltd.; OpenAI may involve its affiliates and sub-processors to provide them, as explained in section 14.

• Text interpretation — forecasts, tarot, horary, dreams, numerology, name analysis, relationship and career readings, the Leela guide and the daily affirmations. What is sent is a compact JSON payload of calculated facts and, where the section requires it, the text you wrote (for example a dream or a question) and first names.
• Palmistry — here the uploaded photograph of your hand is itself sent, first to produce the annotated image and then to produce the reading.

For the portrait (face) section the photograph is not sent to any AI provider. The image is analysed on our own server and only aggregated numeric signals — proportions and symmetry values between 0 and 1 — are sent for the written interpretation.

We do not send your email address, password, avatar, or precise home address to any AI provider.

Deterministic readings are cached on our server so the same calculation is not paid for twice. Cached readings tied to a person are scoped to an opaque key and are deleted with the account. Readings that depend on your own private text — the Leela game — are deliberately not cached.

OpenAI states that data sent to the OpenAI API is not used to train or improve OpenAI models unless the customer explicitly opts in to share data. We have not opted in.

Under OpenAI's standard API data controls, OpenAI generates abuse-monitoring logs that may contain the content of requests and responses, and keeps them for up to 30 days unless longer retention is required by law or reasonably necessary to protect its services or third parties from harm.

OpenAI publishes its own terms and privacy policy on its website. We make no commitment on its behalf beyond what those documents say.

AI output can be wrong. It is not a factual statement about you and must not be relied on for health, legal, financial or safety decisions.

11. Purposes of processing

We process personal data in order to:

• Create and maintain your account and verify that the email address is yours.
• Perform astrological, numerological and symbolic calculations and generate the readings you request.
• Store your journal, saved profiles and preferences so they are there next time.
• Send the push notifications you enabled and the transactional emails you asked for.
• Manage subscription entitlements and unlock paid sections.
• Keep the Service secure: verify that requests come from a genuine app build, limit registration abuse, rate-limit expensive endpoints and block confirmed abuse.
• Monitor the health and the operating cost of the Service.
• Comply with our legal obligations and respond to lawful requests.

12. Legal bases under the GDPR

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases (Article 6(1) GDPR):

• Performance of a contract (Art. 6(1)(b)): creating and running your account, performing the calculations and generating the readings you request, delivering the notifications you enabled, and providing paid features.
• Legitimate interests (Art. 6(1)(f)): security, fraud and abuse prevention, rate limiting, service monitoring and cost control. We have balanced these against your rights and keep the data minimal.
• Consent (Art. 6(1)(a)): marketing communications, where you opted in. You can withdraw consent at any time without affecting anything you received before.
• Legal obligation (Art. 6(1)(c)): where we must retain or disclose data under applicable law.

We do not ask for special categories of personal data (Article 9 GDPR) — for example information about health, religious or philosophical beliefs, or sex life and sexual orientation — and we do not infer them. Date of birth is used for astrological calculation, not to draw conclusions about health, beliefs or sexual life.

Some sections accept free text: dreams, horary questions, the Leela game and career answers. Please do not include information of this kind there. If you choose to include it, that text is processed only as far as necessary to provide the feature you requested, which includes sending it to our AI provider as described in section 10.

Photographs of a palm or a face are analysed as images. We do not run biometric identification, and we do not use the photographs, or any measurements derived from them, to identify or recognise you.

13. Service providers and processors

These are the third parties that actually receive data in the current implementation:

• Amazon Web Services (AWS Lightsail, Frankfurt, Germany) — hosting of the API, the database and the website. All account data and uploaded photographs are stored there.
• OpenAI (OpenAI Ireland Ltd. as our contracting party, together with its affiliates and sub-processors as applicable) — AI text generation, palm-image annotation and the palm reading, as described in section 10.
• Google (Firebase Cloud Messaging, Firebase App Check, Google Play services) — delivery of push notifications to your device, and verification that API requests come from a genuine app installation. Google Play also processes subscription purchases on Android.
• Apple (App Attest / DeviceCheck, App Store) — app attestation on iOS and subscription purchases on iOS.
• Resend (email delivery, SMTP) — sending the verification code, the password-reset link and the account-deletion confirmation link to your email address.
• OpenStreetMap Foundation (Nominatim) — place search. Only the city or country text you typed is sent, together with our application identifier; your account is not identified.
• NOAA Space Weather Prediction Center — public geomagnetic-activity data. No personal data is sent.

Server health alerts are sent to a private operational chat through the Telegram Bot API. Those messages contain service status only — never user content or personal data.

We do not share personal data with advertisers, data brokers or analytics companies, and we do not sell personal data.

14. International data transfers

Your account data is stored in the European Union (AWS, Frankfurt, Germany).

Some of our service providers may process personal data outside the EEA, each only when its own service is used:

• AI processing — when you request an AI-generated reading, the data described in section 10 is sent to OpenAI. Our contracting party is OpenAI Ireland Ltd. Under OpenAI's Data Processing Addendum, where OpenAI Ireland Ltd. transfers such data to OpenAI affiliates or third parties outside the EEA to provide the service, it does so on the basis of the European Commission's Standard Contractual Clauses or an adequacy decision.
• Google and Apple — push-notification delivery, app attestation and store purchases, when you use those functions.
• Resend — delivery of the transactional emails listed in section 13, when such an email is sent to you.

A reading does not, by itself, send data to Google, Apple or Resend. For those providers we rely on the transfer safeguards set out in their own data processing terms.

What is transferred for a reading is limited to what section 10 describes: a compact set of calculated facts plus, where the section requires it, the text you chose to write, a first name, or — for palmistry only — the photograph of your hand. Your email address, password, avatar and precise home address are not part of it.

Using the AI-generated sections is your choice. If you do not want your data transferred outside the EEA, do not use them: the calculated parts of the Service — charts, house cusps, transits, lunar days, numerology numbers and compatibility scores — are computed on our own server and work without any AI provider.

You may ask us for more information about how a particular transfer is handled by writing to artooles1@gmail.com.

15. Data retention

We keep data only as long as it has a purpose:

• Account, birth profiles, journals, saved people and readings: for as long as your account exists.
• Pending registrations: automatically deleted about an hour after they are created if the code is never confirmed.
• Password-reset and account-deletion tokens: stored only as a hash and only until they are used or expire (60 minutes).
• Push delivery log: 30 days.
• Cached AI readings: up to 90 days.
• Account access and app activity logs: kept while the account exists and deleted with it.
• AI usage and cost records: retained for operating and accounting purposes, with the account reference removed when the account is deleted.
• Abuse-prevention blocks: retained by email address or IP address for as long as the block is in force, independently of any account.

16. Security

All traffic between the App, the website and our API runs over HTTPS.

Passwords are stored as bcrypt hashes. Password-reset and account-deletion tokens are stored only as SHA-256 hashes, are single-use, and expire.

API requests from the mobile app are verified with Firebase App Check (Play Integrity on Android, App Attest on iOS), and sensitive endpoints are rate-limited.

Administrative access uses a separate session mechanism, restricted by IP address at the reverse proxy.

The database is not exposed to the public internet.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and, where the risk is high, we will notify you.

17. Account deletion

You can delete your account and its data in two ways, and both run the same deletion procedure on our server:

In the App: Profile → Delete account. You confirm with your current password, and the deletion happens immediately.

From any browser, with or without the App installed: https://oracu1.com/delete-account. You enter your account email address, we send a one-time confirmation link that expires in 60 minutes, and the deletion happens only after you confirm on the page the link opens.

Deleted immediately and permanently: your user record, birth profiles, career profile, relationship groups and family-tree layout, dream journal and dream statistics, palmistry analyses and jobs, portrait analyses, push devices and delivery log, personal forecast caches, account access events, app activity events and security events. All existing sessions stop working at once because the account they point to no longer exists.

Kept, but no longer linked to you: AI usage and cost rows, with the account reference, IP address and country removed — they are needed to account for operating cost and can no longer identify you. Abuse-prevention blocks are also kept, because they act on an email address or IP address rather than on an account; otherwise deleting an account would be a way to escape a block.

Deletion is irreversible. It does not cancel an App Store or Google Play subscription — cancel that in your store account settings.

18. Your rights

Wherever you live, you can access, correct and delete most of your data directly in the App: your profile, birth profiles, saved people, dream entries and readings are all editable and deletable there, and account deletion is available both in the App and from the web page above.

For anything the App does not cover, write to artooles1@gmail.com. We answer within one month; complex requests may take up to a further two months, and we will tell you if that happens.

We may ask you to confirm control of the email address on the account before acting on a request — not to obstruct you, but to make sure we do not disclose or delete someone else's data.

Exercising your rights is free. We may charge a reasonable fee or refuse only where a request is manifestly unfounded or excessive, and we will explain why.

We do not discriminate against you for exercising a privacy right: the Service, its price and its quality stay the same.

19. Rights under the GDPR (EEA, UK, Switzerland)

If the GDPR or the UK GDPR applies to you, you have the right to:

• Access your personal data and receive a copy of it (Art. 15).
• Have inaccurate data corrected (Art. 16).
• Have your data erased (Art. 17) — available directly through account deletion.
• Restrict processing in certain cases (Art. 18).
• Receive the data you provided in a portable, machine-readable format and have it transmitted to another controller where technically feasible (Art. 20).
• Object to processing based on our legitimate interests (Art. 21).
• Withdraw consent at any time where processing is based on consent (Art. 7(3)) — this applies to marketing communications.
• Lodge a complaint with a supervisory authority in the country where you live, work, or where the alleged infringement took place (Art. 77).

We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22. The AI-generated readings are content, not decisions about you: they do not affect your access to the Service, its price, or any right.

20. United States privacy rights

If you live in California, Colorado, Connecticut, Virginia, Texas or another US state with a comprehensive privacy law, you have the right to know what personal information we collect and why, to obtain a copy of it, to correct it, and to have it deleted.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act as amended. There is therefore no “Do Not Sell or Share My Personal Information” process to run — there is nothing to opt out of.

We do not use or disclose sensitive personal information for purposes other than providing the Service you requested.

We do not use personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise a right, delete your account in the App or at https://oracu1.com/delete-account, or write to artooles1@gmail.com. An authorised agent may submit a request on your behalf with proof of authorisation.

If we deny a request you may appeal by replying to our response; we will inform you of the outcome and, where your state provides it, of your right to contact your state Attorney General.

21. Canadian privacy rights

If you are in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial laws including Quebec's Law 25.

We collect personal information with your knowledge and consent, we limit collection to what is needed for the purposes described in this Policy, and we do not use it for a new purpose without asking you.

You have the right to access the personal information we hold about you, to ask for corrections, and to withdraw consent — subject to legal and contractual limits, and understanding that withdrawing consent for core processing means the Service can no longer be provided.

Personal information is stored and processed outside Canada (see sections 13 and 14) and may therefore be accessible to the courts and authorities of those countries.

Address privacy questions and complaints to artooles1@gmail.com. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

22. Marketing communications

During registration you may separately opt in to receive news, offers and promotional messages. This is optional: registration works exactly the same if you leave it unchecked, and the checkbox is never pre-ticked.

We record whether you opted in and when. Marketing consent is separate from accepting the Terms of Use and from acknowledging this Policy.

You can withdraw consent at any time by writing to us, and every marketing email we send will contain an unsubscribe link.

Transactional messages are not marketing and are sent regardless of this setting: the email verification code, the password-reset link and the account-deletion confirmation link.

Push notifications — forecasts, affirmations, insights and birthday greetings — are controlled separately in Profile → Notifications and can be turned off there.

23. Children and age restriction

ORACUL is for adults only. You must be at least 18 years old to create an account, and you confirm this at registration.

We do not knowingly collect personal data from anyone under 18. If we learn that we hold data about a person under 18, we delete the account and the associated data.

If you believe a minor has created an account, write to artooles1@gmail.com and we will act promptly.

Do not enter identifiable data about a child into any section of the App unless you are their parent or guardian and it is lawful for you to do so.

24. Changes to this Privacy Policy

We may update this Policy as the Service changes. Each revision carries a version number and an effective date, shown at the top of this page.

We recorded the version you acknowledged when you registered. Where a change is material, we will notify you in the App before it takes effect.

The current version is always available in the App under Profile → Legal, and at the public address below.

25. Contact details

Data Controller: Artur Avtukhov

Country of establishment: Italy

Privacy contact: artooles1@gmail.com

Support: artooles1@gmail.com

Legal notices: artooles1@gmail.com

This Policy: https://oracu1.com/privacy-policy

Terms of Use: https://oracu1.com/terms

Account deletion: https://oracu1.com/delete-account