Privacy
Privacy and data protection
What we keep, why, for how long and how you delete it. In plain language, not in legalese.
Sua data de nascimento, sozinha, é dado comum. O conteúdo das suas conversas não é: ele revela convicção filosófica ou religiosa, e a LGPD classifica isso como dado pessoal sensível (art. 5º, II). Dado sensível não pode ser tratado pelas bases do art. 7º — exige consentimento específico e destacado do art. 11. É por isso que o cadastro tem duas caixas de aceite em vez de uma. A caixa separada não é burocracia nossa; é a única forma legal de fazer isto.
What we keep
| What | Why | Legal basis | For how long |
|---|---|---|---|
| Name and email | To identify your account and talk to you. | Performance of a contract | While the account exists. |
| Date, time and city of birth | To compute your chart. Without it there is no product. | Performance of a contract | While the account exists. |
| The content of your conversationssensitive | To answer with context and remember what you told us. | Specific, highlighted consent | Until you delete it. The conversation goes with the account. |
| Memories extracted from conversationssensitive | It is what makes it remember in July what you said in March. | Specific, highlighted consent | Until you delete them one by one, on the Memory screen. |
| Tarot readingssensitive | An auditable record of the draw — the seed proves the card was not hand-picked. | Specific, highlighted consent | Until you delete them. |
| Charts of other people you savesensitive | Synastry comparisons and the family mediation circle. You choose to save, person by person. | Your consent — and your statement that you have that person’s permission | Until you delete them, one by one, on the Connections screen. |
| Payments | To charge the subscription and pay whoever reviews the letters. | Legal and tax obligation | 5 years, required by tax law. It cannot be deleted sooner. |
Commitments
None of this trains an AI model
Neither ours nor anyone else’s. Your conversations go to the model to generate that moment’s answer and enter no training set. It is in the contract with the provider, not only on this page.
Data hosted in Brazil
Database and backups in a Brazilian region. It is not only latency: it is jurisdiction.
Encryption at rest, with a key per person
Conversation content is encrypted in the database. A leaked dump does not hand over what you wrote.
Deletion that actually deletes
Deleting means deleting: record, vector index and backups, within the rotation cycle. It is not hiding it from the interface.
Separate consent, not bundled
Accepting the terms and authorising the processing of conversation content are two distinct boxes at sign-up. The law requires prominence for sensitive data — and a single acceptance is not prominence.
We never sell or share for advertising
There is no ad integration, no social network pixel and no selling of the base. The revenue model is subscription, and it is that way on purpose.
Your rights
All guaranteed by law. You exercise the first four yourself, through the interface, without asking anyone.
- Confirmation and access
- See everything that exists about you, in a readable format.
- Correction
- Fix incomplete or wrong data — including the birth time.
- Anonymisation or deletion
- Delete data processed on the basis of consent.
- Portability
- Take your data to another service.
- Information about sharing
- Know who we share with and why.
- Withdrawal of consent
- Withdraw the authorisation at any time, without losing the account.
Data protection officer
Appointed from day one, as the law requires. Requests for access, correction or deletion are answered within 15 days.
Impact assessment
The data protection impact assessment is completed before the product opens to the public, not after. Processing sensitive data at scale without one is operating in the dark.
How to delete right now
Item by item, on the Memory screen. What you delete leaves the context immediately — not on the next conversation, not the next day.
This page describes how the product handles data. It does not replace the contract: the full text is in the terms of use. Where the two diverge, whichever is more protective of you prevails.