Your data, plainly

Elora is a tarot and astrology app for people aged 18 and over. Your birth details and journal are personal, so this page says exactly what we keep, why, and how to take it back. Questions: [contact email, set before launch].

What we keep

• Your email, and with Google your account's name, when you sign in. With Google we never see your password; with an email and password, your password is stored only as a secure hash by our sign-in provider (Supabase), and we never see it either.
• Your birth date, time (if you give it) and place, and the chart we work out from them, so readings can use your Sun, Moon and rising sign.
• Your daily cards, moods, journal lines and 👍/👎, and the readings you do while signed in, including the question you asked. This is what your journal and Patterns are made of. We may also use questions, with names and personal details removed, to teach the app to understand questions better.
• How you feel, and what you tell us about yourself: the feeling you pick each day and any words you add, and the few sentences from “Tell us about yourself”. They're used only to write your own readings (so tomorrow's card can remember today) and are never shown to anyone. As a guest, they stay in your browser.
• What you share about someone you've matched with, only ever visible to you. If they're on Elora and you tick the box, the topic (like “time together”) can shape a gentle suggestion in their own readings: never your words, and never that it came from you. Likewise, your readings may carry a gentle suggestion shaped by what someone matched with you shared. Anything that sounds like you're not safe is never passed on.
• Match, if you use it: the name and birth details you enter for someone else (only you can see them, so please only add people who'd be happy with that), the people you've matched with on Elora and what you call them, invites you've made (the name, and the number if you typed one) and your match readings. When you match with someone on Elora, each of you sees the other's Sun sign; once the match is unlocked, also their Moon and rising sign and the sign each planet was in. Never your birth date, time, place or number.
• Unlocks you buy: the pack, the amount and currency, and Razorpay's order and payment numbers, so your unlocks are counted. Your card, UPI or bank details go to Razorpay, our payment provider, and never reach us.
• Your place on the waitlist, if you join it before payments open: the pack you picked, and your email if you joined without signing in. It's used only to tell you when unlocks open. Deleting your account removes it; to remove a guest email, write to [contact email, set before launch].
• Your WhatsApp number, only if you turn on “Let friends find you” in Profile. It's used only so friends who have it saved can send you a match request, and it's never shown to anyone. When you check whether a contact is on Elora, we look up that one number and keep nothing.
• Reports (“Seems inaccurate? Report it”): which reading it was, never the question.

Without an account

Guests can do every reading. Your question is sent to our server to write the reading and is not stored. If you tap 👍 or 👎, we keep only the vote, the reading type and its share code, nothing about you. Today's free card and the birth details you enter before signing up stay in your own browser until you sign up.

What we don't do

• No AI: readings are written by our own rules from an open card-meanings dataset. Your questions aren't sent to any AI service.
• No selling or renting your data, and no advertising.
• Share links carry only the cards and the reading type, never your question or your chart.
• We don't send messages for you: a Match invite opens WhatsApp on your phone with the message typed out, and you send it.

Where it lives

Your account data is stored with Supabase (a Postgres database) in Mumbai, India. The app runs on Vercel. When you search for your birth place, what you type is sent to the Open-Meteo place-search service. If product analytics are switched on, we use PostHog to count which screens are used; it does not receive your birth details, questions or journal.

Your rights

• See it: Profile → Download my data gives you everything as one file.
• Correct it: Profile → Change birth details.
• Delete it: Profile → Delete my account removes your account and everything in it, straight away. Encrypted backups roll over within 30 days.
• Complain: write to [contact email, set before launch]. We reply within 30 days. You can also go to the Data Protection Board of India.

Age

Elora is for people 18 and over. We don't knowingly keep data about anyone younger, and Match won't take the birth details of anyone under 18; if you think we have, tell us and we'll delete it.

Changes

If this policy changes in a way that matters, we'll say so in the app before it applies.