Privacy Policy

1. Overview

Kaimira Ventures LLC, a Texas limited liability company, is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Sirene mobile application for iOS and Android, our website, and related services (collectively, the "Platforms").

Sirene is a tarot application offering daily card draws, readings, and a hand-illustrated deck. By using our Platforms, you consent to this Privacy Policy and agree to the collection and use of information as described here. Sirene is intended for entertainment and personal reflection and does not provide professional, medical, financial, or legal advice.

2. Scope and Applicability

This Privacy Policy applies to all users of our Platforms in the United States and is governed by the laws of Texas and applicable U.S. federal privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) where applicable.

3. Information We Collect

We collect different types of information depending on your interaction with our Platforms:

Account Information

• You may begin using the app anonymously, without creating an account
• Email address (only if you choose to create a permanent account)
• Password (securely hashed; never stored in plain text)
• User ID and account creation timestamp
• Device timezone (automatically detected, to schedule reminders)

Onboarding and Profile Data

• Your name or chosen display name
• Your birth date (used to personalize readings; optional)
• Your intentions — what brings you to Sirene (e.g., love, clarity, growth)
• Your preferred daily reading time and notification preferences

Reading and Tarot Data

• The cards and spreads you draw, and the dates of your readings
• Readings you save, and any notes or reflections you add to them
• Daily-draw history and reading streaks

Subscription and Payment Data

• Subscription tier, status, and expiration date
• Transaction ID and product ID from the Apple App Store or Google Play Store
• Purchase receipts (stored for verification and dispute resolution)
• Device ID and device name at time of purchase
• We do not store credit card numbers or payment method details — all payment processing is handled directly by Apple and Google

Device and Technical Data

• Device identifiers, operating system, app version, and build number
• Push notification token (if you enable notifications)
• App usage events (screens viewed, features accessed, actions taken)
• Error logs and stack traces for debugging
• Session recordings with text-input masking (via our analytics provider)

Information We Do NOT Collect

• Camera or photo library access
• Microphone or audio recordings
• GPS or precise location data
• Contacts or address book
• Health or biometric data

Optional Sensitive Information

If you choose to provide information such as your birth date, your intentions, or personal reflections within your saved readings, you consent to our limited processing of it solely to provide the app's reading and personalization features.

4. How We Collect Information

We collect information in the following ways:

• Directly from you — when you complete onboarding, draw and save readings, set preferences, or contact support
• Automatically — through analytics tools, usage logs, and error tracking as you use the app
• From third parties — Apple App Store and Google Play Store provide purchase verification data

You may begin using the app anonymously. An email is required only when you choose to create a permanent account.

5. How We Use Information

We use your personal information to:

• Provide tarot readings, daily draws, and a personalized experience
• Personalize content based on your birth date, intentions, and preferences
• Deliver push notifications, including daily reading reminders
• Track your reading history, saved readings, and streaks over time
• Process and verify in-app purchases and subscriptions
• Improve the app through anonymized analytics and error tracking
• Communicate with you regarding support, updates, and account-related matters
• Ensure security, prevent fraud, and comply with legal obligations

6. Analytics and Error Tracking

We use PostHog for product analytics, error tracking, and session replay. PostHog collects:

• App usage events (screens viewed, features used, buttons tapped)
• Error reports with stack traces for debugging
• Session recordings with text-input fields masked for privacy
• Network request telemetry
• Subscription and revenue events (anonymized)

This data is used solely to improve app performance, fix bugs, and understand how users interact with features. PostHog's servers are located in the United States.

7. Data Storage and Security

We take reasonable technical and administrative measures to protect your information:

Where Your Data is Stored

• Cloud database: Supabase (PostgreSQL), hosted on AWS infrastructure in the United States
• On your device: A local SQLite database stores a copy of your data for offline access. This data is cleared when you log out
• Authentication tokens: Stored securely on your device and automatically refreshed

Security Measures

• All data transmitted over HTTPS (encrypted in transit)
• Database encryption at rest
• Passwords hashed using industry-standard algorithms (never stored in plain text)
• Row-level security policies ensure users can only access their own data
• Local device data is cleared on logout to prevent cross-user data leakage

8. Data Retention and Deletion

We retain personal information only as long as necessary to fulfill the purposes described in this policy or as required by law.

• Readings, preferences, and history are retained while your account is active
• Subscription receipts may be retained up to 7 years for tax and audit compliance under federal and Texas law
• Analytics data is subject to PostHog's standard retention and sampling policies

Account Deletion

You can delete your account at any time from the Settings screen in the app, or by visiting our Delete Account page. When you delete your account, we permanently delete:

• Your profile and authentication credentials
• All readings, saved spreads, reflections, and streaks
• Your onboarding data, intentions, and preferences
• Subscription records
• Usage tracking data associated with your account
• All local data on your device (SQLite database and cached data)

This deletion is permanent and irreversible.

9. Push Notifications

Sirene uses push notifications to send daily reading reminders and related messages. Notifications are delivered through the Expo Push Notification Service.

• Notifications are opt-in — you must grant permission on your device
• Your push notification token is stored in our database to deliver notifications
• Notifications are scheduled according to your local timezone and chosen reading time
• You can disable notifications at any time through your device settings

10. Third-Party Services

We share data with the following third-party services to operate the app:

• PostHog — receives anonymized usage events, error reports, and session recordings (with text-input masking) for analytics
• Apple App Store / Google Play Store — processes all payments and provides purchase receipts for verification. We do not handle or store payment methods
• Expo — delivers push notifications and over-the-air app updates
• Supabase — provides database hosting, authentication, and serverless functions (hosted on AWS, US-based)

We do not sell your personal data to third parties.

Each third-party service has its own privacy policy. We encourage you to review them. We are not responsible for the privacy practices of these external services.

11. Children's Privacy

Our Platforms are not intended for children under 13 years of age.

If we learn that a child under 13 has provided personal data without parental consent, we will promptly delete it.

Parents or guardians may contact zac@kaimiraventures.com to request deletion.

12. Marketing Communications

We may send you marketing or promotional messages consistent with your communication preferences.

You can opt out at any time by:

• Clicking "unsubscribe" in our emails, or
• Contacting zac@kaimiraventures.com

We comply with the CAN-SPAM Act and other applicable U.S. marketing laws.

13. Your Rights (U.S. Residents)

Depending on your state of residence, you may have the right to:

• Request access to the personal data we hold about you
• Request correction or deletion of your data
• Opt out of targeted advertising or the sharing of your data
• Receive a copy of your data in a portable format
• Delete your account and all associated data directly from the app

To exercise these rights, contact us at zac@kaimiraventures.com with the subject line "Privacy Request". We may request identity verification before fulfilling your request.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

The updated version will be posted on our website or app and marked with the "Effective Date" above.

Your continued use of the Platforms after any update constitutes acceptance of the revised Policy.

15. Contact Us

Kaimira Ventures LLC

Attn: Privacy Officer

Email: zac@kaimiraventures.com

Mailing Address: 3200 Wilcrest Drive Suite 170 PMB 70085, Houston, TX 77042