Privacy Policy

When you use Souls Matter we collect what we need to give you a reading and keep your account working:

• Your email address (to sign you in via magic link and, if you ask, to email you readings).
• Your name and birth details (date, time, location) — required for astrology / Human Design / numerology math.
• Charts you save, readings you unlock, tips and payments you make.
• Standard server logs (IP, user-agent, timestamps) for security and debugging.

We use your information to:

• Compute and personalize your readings.
• Sign you in, keep your account secure, and prevent abuse.
• Process payments and grant the things you paid for.
• Email you the readings you request, and (if you opt in) occasional product updates.
• Improve the app — make it kinder, clearer, less confusing.

We don’t sell or trade your information to advertisers. We do use a small set of third-party services to actually run the app. Each one only sees what it needs to do its specific job:

• Stripe — payments and subscriptions. Handles card data; we never see your card number.
• EmailIt — transactional email (sign-in links, your PDF readings).
• OpenRouter / Anthropic Claude — generates your personalized Synergistic Reading text.
• MarkupGo — generates the PDF of your reading.
• MongoDB Atlas — stores your account, charts, and entitlements.
• PostHog — privacy-respecting product analytics. Lets us see which features people use and where the app gets confusing. No third-party ad cookies. We never sell this data.

Each of these has their own privacy policy. We pick services that take privacy seriously.

You can:

• Delete your account and all your charts at any time — drop us a line and we’ll wipe it within 7 days.
• Export your data on request.
• Opt out of any non-essential email.
• Not give us a birth time if you don’t want to (some features won’t work, but the choice is yours).

Souls Matter is for adults. We do not knowingly collect information from anyone under 16. If you believe a child has used the service, contact us and we’ll remove the account.

Passwords don’t exist here — we use magic-link sign-in. Sessions are HTTP-only cookies. Payments are handled entirely by Stripe (PCI-DSS Level 1). Backups are encrypted. We’re a small team, we’re not perfect, but we try.

Send us a message via the contact form. A real human will answer.