Privacy

OraWhale respects the private nature of reflection. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

OraWhale is operated by OraWhale LLC, based in New Jersey, United States. Contact [email protected] for privacy questions or requests.

1. Information we collect

Account information

We may collect your email address, account ID, authentication status, age-eligibility confirmation, acceptance version and timestamp, and related account information.

Oracle and journal information

We may store information you choose to create or save, including card draws, realm and zodiac selections, reflections, journal text, tags, moods, dates, Past Memories, On This Day, Year So Far, and related archive activity. Month-and-day information used for zodiac selection is not intended to verify your age.

Subscription information

Stripe processes payments. OraWhale may receive your plan, billing interval, subscription status, renewal or trial dates, Stripe customer and subscription IDs, transaction references, currency, and billing-country code. OraWhale does not store your full card number and does not need to copy your full billing street address from Stripe.

Support, reminders, and email settings

We may collect support messages, browser and device information relevant to troubleshooting, reminder settings, push subscription information, email preferences, consent timestamps, unsubscribe status, delivery events, and related records.

Technical and usage information

Essential security, sign-in, billing, webhook, fraud-prevention, and error records may be processed as needed to operate OraWhale. Optional Google Analytics and OraWhale product-engagement analytics run only when you allow optional analytics through Privacy Choices. OraWhale product analytics may record feature-use events, plan tier, device type, timezone, and date for signed-in users. Journal and reflection text are not included in analytics events.

2. How we use information

We use information to provide and secure OraWhale, save and sync eligible content, manage subscriptions and access, deliver requested reminders, answer support requests, send necessary service messages, honor optional email and analytics choices, improve the product, prevent abuse, and comply with legal, accounting, tax, and payment obligations.

3. Sharing and service providers

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Private journal and reflection content is not used for targeted advertising or to train third-party advertising systems.

We may use service providers such as Supabase for authentication and database functions, Stripe for payment processing and billing, Cloudflare for hosting and security, Resend or other email providers for communications, Google Analytics when permitted, and storage providers for assets or synced features. They may process information only as needed to provide services to OraWhale or satisfy legal obligations.

Pattern insights, summaries, recaps, and almanac-style outputs are generated by OraWhale logic from saved reflection data and are not sent to an external AI or large-language-model provider for generation.

4. Local and cloud storage

Some data is stored locally in your browser and may be lost if storage is cleared, private browsing is used, or you change devices or browsers. Eligible synced data may be stored in OraWhale cloud systems so you can use supported cross-device features.

5. Email choices

Optional reflection check-ins and optional product news are off by default. You may enable or disable them separately in Account → Email. Unsubscribing from optional email does not stop necessary sign-in, security, billing, support, account, or other transactional messages.

6. Analytics and Privacy Choices

Optional analytics are off until you make a choice. You can reopen Privacy Choices from the footer. If your browser sends a recognized Global Privacy Control signal, OraWhale treats it as a request to keep optional analytics disabled.

Some browsers offer a legacy “Do Not Track” signal. Because there is no universally accepted response standard, OraWhale does not currently respond to legacy Do Not Track signals. OraWhale honors the controls available through Privacy Choices and the Global Privacy Control treatment described above.

7. Retention

We retain active account and saved content while needed to provide the service. We may retain limited transaction, accounting, fraud-prevention, security, consent, suppression, support, and dispute records as required or reasonably necessary. Backup copies may remain until they expire through normal backup cycles. After a verified deletion request, we aim to delete eligible active-system data within 30 days unless a longer period is required or permitted by law.

8. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted connections where supported. No online service can guarantee perfect security.

9. Age and availability

OraWhale accounts are intended only for U.S. residents age 18 or older during the initial launch. If you believe an underage person created an account, contact us so we can review and remove it where appropriate.

10. Your choices and requests

You may request access, correction, export, or deletion of eligible account information by emailing [email protected]. We may verify account ownership before acting. Deleting data does not automatically cancel an active subscription.

11. California Privacy Information

OraWhale does not sell personal information and does not share personal information for cross-context behavioral advertising. Journal and reflection content is not used for targeted advertising. California users may use the request methods above to ask for access, correction, export, or deletion of eligible information.

OraWhale does not presently represent that it meets the statutory thresholds that make a business subject to every requirement of the California Consumer Privacy Act. We review those thresholds as the business grows. This section also provides transparency for California users under other applicable California privacy laws.

12. Changes

We may update this policy. We will update the date above and provide additional notice when appropriate.