Information we collect
The Service collects the following information, limited to what is needed to provide exploration experiences.
- Account information: your email address when provided, and the configured state of your sign-in methods (Apple, Google, or X account, passkey, and optional two-factor authentication). When you connect X, we also collect your display name, username, and profile image URL.
- Exploration data: the experiences you open, your discovery logs, checkpoint answers, confidence input, and progress.
- Payment information: your current plan (Dawn / Stella / Astra), billing state, and renewal schedule. Card details are handled by Stripe and are never stored on the Service’s servers.
- Technical information: session data used to keep you signed in, your display language and theme settings, and communication logs generated on access.
How we use it
We use the information collected only for the following purposes.
- Authenticating your account and keeping you signed in.
- Saving your exploration experiences and showing you where to return next.
- Providing Stella / Astra features and managing billing.
- Improving the quality of the Service, and investigating and fixing issues.
- Preventing misuse such as unauthorized access and impersonation.
- Sending important notices and responding to your inquiries.
Cookies and browser storage
We use cookies and your browser’s localStorage to retain settings such as your login session, display language, and theme. These are necessary to keep your exploration continuous and are not used for advertising-based tracking.
If you disable cookies in your browser, some features — such as staying signed in — may not work.
External services
The Service uses Supabase to store authentication and data, Stripe to process payments, and an email provider to send authentication-related messages. If you sign in with Apple, Google, or X, we receive the account information needed to verify you from that service. Each service receives only the information needed to fulfill its purpose.
Except where required by law, we do not provide your personal information to third parties without your consent.
Retention
We retain information while your account is active and for as long as needed to fulfill the purposes above.
When you delete your account, we delete or anonymize your information within a reasonable period, except where we are legally required to retain it.
Account deletion
You can start account deletion from Account settings or from the in-app account screen. For safety, scheduling deletion requires verification with two different strong sign-in methods (passkey, Apple, Google, or X) and entry of a confirmation word.
For 30 days after a deletion request, the account remains in a recoverable pending state and we do not delete the account or discovery logs. Before the deadline, you can explicitly choose restoration using a credential that was already verified when the request was made. After 30 days, we delete or anonymize the account, authentication data, discovery logs, progress, and settings.
Billing and transaction records, security audit records, and deletion records may be retained for the period required by law or necessary to prevent fraud. They are retained only for those purposes and are not used for unrelated purposes.
Security
We do not use passwords. Authentication data is protected using secure methods, and communications are encrypted. You can use passkeys, Apple, Google, or X sign-in, together with optional two-factor authentication.
We take reasonable and appropriate measures to prevent the loss, leakage, or damage of information.
Your rights
You can review, correct, or delete your registered information and close your account. We respond to the extent we can confirm your identity.
For these requests, or any questions about how we handle personal information, please use the contact below.
Use by minors
If you are a minor, please use the Service with the consent of a parent or guardian.
Changes to this policy
We may revise this policy in response to changes in the Service or in applicable law. When we make a significant change, we will announce it within the Service.
The revised policy takes effect once posted on this page.
Contact
For any questions about this policy or the handling of personal information, please reach us through the contact form.