Privacy Policy

1. The short version

• We keep your account, your journal and its pictures, your birth details and your progress, so that the journal works on every device you sign in on.
• To make a picture, the words of that entry are sent to AI services run by other companies. They get the words. They do not get your name, your email address or your birth details.
• Payment goes through Gumroad. We never see your card.
• There is no advertising and no tracking, and we do not sell your data.
• You can export or delete your journal yourself, or ask us to do it.

2. Who is responsible for your data

The journal is run by Dino Venturino, trading as Seerix, an individual based in the Netherlands (“we”, “us”). In the language of data protection law that makes us the “controller” of your personal data: we decide what is collected and why, and we answer for it.

To ask a question or to use any of your rights, write to [CONTACT EMAIL ADDRESS].

By post: [POSTAL ADDRESS].

3. What we collect and why

Your account

Your name, your email address and your password. They let you sign in, reset your password, and hear from us about your account. The password is never stored as you typed it: only a salted hash of it is kept, which lets us check a password without being able to read it.

Your sign-ins

Each time you sign in we keep a session record: a random token, when it expires, and the IP address and browser type you signed in from. It keeps you signed in on that device, and it is there so that misuse of an account can be investigated.

To slow down anyone guessing passwords, the journal also counts the requests made to its sign-in system: signing in, making an account, asking for a password reset and checking who is signed in. The count is kept in the database against the IP address the requests came from and the page they were made to, with the time of the latest one. It is not linked to an account.

Your journal

The entries you write, their dates, the pictures generated for them or uploaded by you, and the description each generated picture was drawn from. This is the journal itself. We store it so that you can read it on any device you sign in on.

Your birth details

Your date, time and place of birth (the place as a name, its coordinates and its time zone), and the name you give your chart. They are stored with your account and used to work out your natal chart, numerology and biorhythms, and for nothing else.

Your progress

What the journal's progress features record, stored with your account so that every device shows the same: which screens you have opened, how many summaries of your day you have made, and the days on which you checked the sky, made a summary of your day or looked at your patterns; your focused writing sessions (when each began and ended, how long it ran, the label you gave it, the kind of star it lit, whether you finished it and, if you wrote an entry during it, which entry and how many words); your stardust, the star kinds you have unlocked and chosen, and your weekly goal; and the words of your vision board (its name, when the board was made, how far you have got through building it and whether you have finished building it, each intention as you wrote it, the area of your life it belongs to and when you made it, its three first moves and which you have done, and the days you tended it). It is kept until you delete your account.

The version before your latest save is kept in the same record, so that a mistaken save can be undone, and it is deleted with your account.

Your subscription

Gumroad tells us that you have subscribed and keeps us up to date: the email address you bought with, whether your subscription is in trial, active, cancelled or ended, the dates that go with that, and Gumroad's reference for the sale. We use it to switch your subscription on and off. We also keep a count of the pictures generated for you each month, to apply your allowance. We never receive your card number.

Requests to download or delete

So that a download of your whole journal cannot be asked for over and over, and a signed-in browser cannot be used to guess your password where an account is deleted, the journal notes each time your account asks to download its data or tries to delete itself: which of the two, and the time. It keeps only the last few, an hour's worth at most, and a note is dropped once it is an hour old. The rest are deleted with your account.

Technical records

Like any website, the servers that run the journal keep short-lived logs: the time of a request, the address requested, the IP address and browser it came from, and any error. When a picture is generated, the log also records which service drew it and the picture's place in the entry (the third of eight, say), never the words it was drawn from. We use logs to find faults and to investigate abuse.

Kept only on your device

Some things are stored only in your browser, and we cannot see them:

• the pictures on your vision board, and the photo of yourself at its centre;
• meditation recordings you add to the player;
• a copy of your journal, your progress and the words on your vision board, so that they open quickly and keep working if the connection drops while they are open. Once a change has been sent to your account, the account holds the original and these are copies; until then (when you are offline, say, or while the journal cannot confirm who is signed in), the copy on your device may be the only one.

There is one exception. If you ask the journal to draw a tile for your vision board, the words of that tile are sent to the picture services in the same way as a journal entry. The photo of yourself is never sent anywhere.

These stay until you clear your browser's site data. Signing out does not remove them, so on a device you share with other people, clear the site data when you finish. Deleting your account clears your journal's copy and your vision board from the browser you delete it in, but not your meditation recordings: they are your own files, so remove them in the player if you want them gone.

What we do not collect

We use no advertising or analytics trackers, we do not build a profile of you, and we do not buy data about you from anyone.

4. Dreams are sensitive, and we treat them that way

What people write about their dreams and visions often reveals things the law gives special protection: health, beliefs, sexuality and the like. We do not ask you for any of that, but we assume your journal may contain it, and we handle all of it as sensitive.

• Your journal and your vision board can be opened only from your own account.
• The patterns and statistics the journal shows you are worked out in your own browser, for you alone. We do not analyse your writing for any purpose of our own, and no decision about you is made by a machine.
• Your writing is sent to other companies only to turn it into pictures, as set out below.
• We do not read your journal or your vision board. The exceptions are when you ask us to look into a problem with it, and when the law compels us.

Every entry you save is illustrated, so the words of every entry are sent to those picture services. If there is something you do not want them to receive, do not write it in the journal.

For content of this kind we rely on your consent. You decide what to write, and you can take your consent back at any time by deleting an entry or your whole account.

5. Our legal grounds for using your data

The data protection laws of the EU and the UK (the GDPR and the UK GDPR) allow personal data to be used only where there is a legal ground for it. Ours are:

• To carry out our contract with you. Running your account, storing and showing your journal, generating pictures, working out your readings from your birth details, managing your subscription, and sending service emails such as a password reset.
• Your consent. Where what you write reveals something the law gives special protection, as described above. You can withdraw it at any time by deleting the content.
• Our legitimate interests. Keeping the journal secure and working: session records, technical logs, and investigating misuse. You can object to this; see “Your rights”.
• To comply with the law. Where a law requires us to keep a record or hand one over.

6. Who else handles your data

We do not sell your data, rent it out, or share it for advertising. The companies below handle some of it because the journal cannot run without them. Each one gets only what is listed.

Vercel: hosting

Vercel runs the journal's website and servers. Everything you send to the journal, and everything it sends back, passes through Vercel's systems, and Vercel keeps the technical logs described above.

Neon: database

Neon hosts the database that holds your account, your sign-in sessions, your journal and its pictures, your birth details, your progress and your subscription status. The database is in Northern Virginia, United States.

Gumroad: payment

Gumroad sells the subscription as the merchant of record. You give Gumroad your payment details, your email address and your billing country directly, and it handles them under its own privacy policy, as a controller in its own right rather than on our behalf. Gumroad tells us about your subscription, as described above. We send Gumroad nothing from your journal.

Resend: email

Resend delivers the emails the journal sends, such as a password reset link. It receives your email address and the content of that email.

The services that write picture descriptions

Before a picture is drawn, a language model rewrites the passage as a short description of the scene. Afterwards a model looks at the finished picture to check that nothing you mentioned is missing. Depending on how the journal is set up at the time, this is done by Anthropic's Claude or by Google's Gemini.

They receive the passage being illustrated. For a storyboard, they receive every step of that entry, so that people and objects carry across the frames. For the check, they receive the generated picture and the list of things it should show.

The services that draw the pictures

The description is then sent to an image model. We use Google's Gemini first, then Higgsfield, then Cloudflare, moving to the next when one is unavailable.

They receive the description. It is based closely on your words, and when no description could be written it is your words themselves.

The description and picture services are not sent your name, your email address, your birth details or anything else from your account: only the text, and for the check the picture. The requests come from our servers, so they do not see your IP address either. What each company does with what it receives, including how long it keeps it, is governed by its own terms.

Open-Meteo: finding your birthplace

When you search for your place of birth, what you typed goes to our server, which asks Open-Meteo's place-name service for matches and gets back the coordinates and time zone. Open-Meteo sees the place name and our server's address. It is not told who you are, your IP address or when you were born.

Google Fonts: typefaces

The journal's screens, including the public welcome page and the sign-in screens, load their typefaces from Google Fonts. To fetch them your browser contacts Google, which therefore sees your IP address and browser type. Nothing from your account or your journal is sent. This page and the Terms of Service do not load them.

Voice dictation: your browser

If you dictate an entry, the speech is turned into text by your browser, not by us. Some browsers, including Chrome, send the audio to their maker's servers to do this. We receive only the resulting text.

The Schumann observatory: a link

The journal links to the website of the observatory in Tomsk that publishes the Schumann resonance chart. Nothing is sent to it unless you follow the link. If you do, your browser contacts that site, which sees your IP address and browser type but is not told who you are or where you came from.

When the law requires it

We may have to disclose data to a court, a regulator or the police where the law obliges us to. We will tell you when that happens, unless we are forbidden to.

7. Where your data goes

We are based in the Netherlands. The database is in Northern Virginia, United States. Vercel, Neon, Gumroad, Resend, Anthropic and Google are companies based in the United States, and the other services named above may handle data in other countries too. So your data will be handled outside the country you live in, including in places whose privacy laws are not the same as yours.

Where the law requires a safeguard for a transfer like this, we rely on the data protection terms the company offers, which include the European Commission's standard contractual clauses, and the UK's addendum to them, where those are needed. You can ask us for a copy of the safeguard that covers a particular transfer.

8. How long we keep it

• Your account, journal, pictures, birth details and progress: for as long as you have an account. Nothing is deleted on a timer.
• An entry or picture you delete: removed from the database straight away.
• Sign-in sessions: a sign-in lasts until you sign out, or for up to 90 days after you last used that device. Signing out deletes its record straight away. The record of a sign-in that ran out on its own is deleted by a clean-up that runs every day, so it is gone within a day or so of running out.
• Password reset links: one hour, and one that was never used is deleted by the daily clean-up once it has expired.
• Sign-in attempt counters: a day or two at most. The count that slows down password guessing is deleted by the daily clean-up once it is a day old.
• Gumroad's reference for a subscription of a deleted account: for as long as the journal runs, with the date and nothing else: no name, no email address and no account. A membership can outlive the account, and Gumroad can go on sending news about it. See “If you delete your account” below.
• Technical logs: a limited time, set by our hosting plan with Vercel.
• Database restore history: the database keeps a rolling history of itself so that it can be restored after a fault. Something you delete can remain in that history for up to [DATABASE RESTORE WINDOW], and is then gone.

If your subscription ends

We keep your account and your journal, so that you can still sign in, read it, export it or delete it. Nothing is deleted because you stopped paying. It stays until you delete it or ask us to.

If you delete your account

When you delete your account, your account, your sign-in sessions, your journal and its pictures, your birth details, your progress and your subscription record are deleted from the database straight away. The rows are removed, not marked. To do it you must be signed in, give your password and type a confirmation. Copies in the restore history expire within [DATABASE RESTORE WINDOW].

Some things deleting your account cannot undo. Gumroad keeps its own record of your purchases, as tax and accounting law requires of it, and it goes on billing a membership until you cancel it with Gumroad: deleting your account does not cancel it, so cancel it first. After you delete your account we keep Gumroad's reference number for your subscription, with the date and nothing else: no name, no email address and no account. It is kept for as long as the journal runs, because a membership can outlive the account, and it is there so that Gumroad's later messages about that membership are ignored and not stored again. The records we keep of Gumroad's sale messages about it are deleted with your account. If you left the membership running, you can put it on a new account by signing up again and pasting the license key from your Gumroad receipt. The words of entries already sent to the services that draw the pictures are with those services, under their own terms. A purchase that was never linked to an account is held without one, and deleting an account does not reach it: write to us and we will delete it.

The account screen also clears this browser's copy of your journal, your birth details, your drafts and your vision board when you delete. It cannot reach other devices you have used, and it leaves your meditation recordings.

9. How we protect it

• Everything between your browser and the journal travels over an encrypted connection, and so does everything between the journal and its database.
• Passwords are stored only as salted hashes, and must be at least 10 characters long.
• Every request for your journal, your birth details or your progress is checked against a live sign-in session, and a journal can be opened only from its own account.
• The sign-in cookie cannot be read by scripts running on the page.

We want to be straightforward about the limits. Your journal is not end-to-end encrypted. It is stored in a form the journal's servers can read, because they have to show it to you and turn it into pictures. That means the person who runs the journal, and the companies named in this policy, are technically able to see it. No online service can promise perfect security.

If something goes wrong and your data is exposed, we will tell you, and the regulators we are required to tell, without undue delay.

10. Your rights

Wherever you live, you can ask us what we hold about you, have it corrected, or have it deleted. If you live in the EU or the UK, the law (the GDPR and the UK GDPR) spells your rights out:

• See it and take it with you. You can ask for a copy of what we hold about you, in a form you can take elsewhere.
• Correct it. You can have anything inaccurate put right.
• Delete it. You can have your data erased.
• Restrict or object. You can ask us to stop or limit a use of your data, including any use that rests on our legitimate interests.
• Withdraw consent. Where we rely on your consent, you can take it back at any time. That does not undo what was done before.
• Complain. You can complain to a regulator, as set out below.

In the app

You can do most of this yourself in the app, without asking anyone:

• Export. Your account settings let you download your journal, its pictures and the details we hold about you, as one file.
• Delete. Your account settings let you delete your account and everything in it. You can also delete any single entry or picture where it appears in the journal.
• Correct. You can change your birth details on the Natal Chart screen or in your account settings. To change your name or email address, write to us.

By writing to us

You never have to use the app to do any of this. Write to [CONTACT EMAIL ADDRESS] and we will do it for you. We will answer within 30 days. We may need to check that it is really you, for example by asking you to write from the email address on your account. There is no charge.

Complaining to a regulator

If you think we have handled your data wrongly, we would like the chance to put it right, so please write to us first. You can also complain to a regulator at any time:

• in the Netherlands, where we are based, the Autoriteit Persoonsgegevens;
• in the UK, the Information Commissioner's Office;
• elsewhere in the EU, the data protection authority of the country where you live or work.

11. Children

The journal is not for anyone under 16, and we do not knowingly collect data from anyone under 16. If you believe a child has made an account, write to us and we will delete it.

12. Cookies and storage on your device

The journal sets one cookie. It holds your sign-in session, lasts up to 90 days, and cannot be read by scripts on the page. The journal cannot keep you signed in without it, so there is no option to refuse it. There are no advertising cookies and no analytics cookies.

The journal also stores things in your browser so that it opens quickly and keeps working if the connection drops: a copy of your journal, your progress and your settings, your vision board, the meditation recordings you add, and the files that make up the app itself. None of it is used to track you.

Gumroad's checkout pages belong to Gumroad, and set Gumroad's own cookies under its own policy.

13. Changes to this policy

When we change this policy we will change the date at the top. If the change affects how your data is used, for example a new company handling it or a new purpose, we will tell you by email or by a notice in the app before it takes effect.

14. Contact

Questions about this policy or your data: [CONTACT EMAIL ADDRESS].

By post: [POSTAL ADDRESS].