Privacy Policy

Last Updated: March 16, 2026

1. Data Controller

I Ching Oracle is operated by Synchronicity, located at Via della Repubblica 1, Roma, Italy. For privacy matters, contact privacy@ichingoracle.app.

2. Introduction

We respect your privacy and are committed to protecting your personal data. This privacy policy describes how we collect, use, and protect your information when you use I Ching Oracle, and explains your rights under applicable privacy laws. We adhere to the principle of data minimization, collecting only what is strictly necessary to provide the service.

3. Data We Collect

We collect minimal data necessary to provide the I Ching experience:

Account Data: If you sign in (via Apple, Google, or email), we store your email and display name.
Profile Data: Your chosen username and your most recent hexagram result (number, name, and symbol).
Social Data: Your friends list and friend requests. We do not access your device contacts.
Readings: Hexagram results, your questions, notes, and AI-generated interpretations.
Learning Progress: Your advancement through educational content.
Preferences: Theme, haptics, and display settings.
Diagnostic Data: Crash reports, performance metrics, and device information collected by Sentry for app stability monitoring.
Purchase Data: Subscription status and purchase history, processed by RevenueCat for in-app purchase management. No financial details (credit card numbers) are collected by us.

4. Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

Contract performance: providing the service you signed up for (account, readings, sync)
Legitimate interest: crash reporting and app stability monitoring (Sentry)
Consent: AI processing of your personal questions for Oracle interpretations

5. How We Use Your Data

Your data is used solely to:

Provide and maintain the Service
Sync your readings across devices (if you sign in)
Generate AI-powered interpretations of your readings
Enable social features: your username is searchable by other users; your most recent hexagram is visible to accepted friends only
Monitor app stability and fix crashes (Sentry)

We do not sell your data to third parties. We do not use your data for advertising or profiling.

6. Data Storage

All your data is stored locally on your device by default. The app works fully without an account.

If you choose to sign in, your readings are synced to our cloud backend (hosted by Supabase on AWS infrastructure) so you can access them across devices. Synced data is transmitted over HTTPS and protected by row-level security policies. Your authentication tokens are stored securely using platform-native mechanisms (iOS Keychain on Apple devices, encrypted storage on Android).

7. AI Processing

When you request an Oracle interpretation, your question and hexagram data are sent to a third-party AI service (Anthropic) to generate a personalized reading. This data is:

Processed in real time and not permanently stored by the AI provider
Not used to train AI models (per Anthropic’s commercial API terms)
Subject to rate limiting and input validation for safety

8. Third-Party Services

We use the following third-party services to operate the app:

Supabase (cloud database and authentication) — privacy policy
Anthropic (AI interpretation) — privacy policy
RevenueCat (in-app purchases) — privacy policy
Sentry (crash reporting and performance monitoring) — privacy policy
Apple (Sign in with Apple, App Store) — privacy policy
Google (Sign in with Google, Google Play) — privacy policy

Our website (ichingoracle.app) uses Vercel Web Analytics for anonymous usage statistics. No cookies are used for tracking in the mobile app.

9. International Data Transfers

Your data may be transferred to and processed in the United States by our service providers (Supabase, Anthropic, RevenueCat, Sentry). These transfers are protected by Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

10. Data Retention

Local data remains on your device until you delete it or delete your account. Cloud-synced data is retained as long as your account is active. When you delete your account, your data becomes immediately inaccessible. All server-side data — including your profile, friends list, friend requests, and readings — is permanently erased from our systems, including backups, within 30 days.

11. Children’s Privacy

I Ching Oracle is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Your Rights

Under GDPR and CCPA, you have the right to:

Access your personal data
Request correction of your data
Request erasure of your data
Object to processing of your data
Request transfer of your data

You can exercise these rights through Settings > Account > Delete Account in the app, or by contacting us at the address below.

You also have the right to lodge a complaint with a data protection authority. In Italy, you can contact the Garante per la protezione dei dati personali (www.garanteprivacy.it).

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date and, where appropriate, through an in-app notification.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@ichingoracle.app