Oraculum Privacy Policy
This policy explains how the Oraculum symbolic-reading app handles personal data and usage data. The data controller is Rafael Silveira Gomes, responsible for Oraculum under the Dark Sand Labs brand. For privacy questions or to exercise your rights, email support@darksandlabs.com.
Responsible for Oraculum: Rafael Silveira Gomes, operating under the Dark Sand Labs brand; electronic contact support@darksandlabs.com.
1. Data stored on your device
Questions, completed readings, cards and positions, displayed meanings, Daily Card, journal notes, physical readings, study and preferences remain on your device until you delete them. This data is not sent to our servers or to third parties.
Card patterns and study are calculated locally and do not analyze questions or notes. The app offers no account, sync or backup.
2. Data processed by online services
Readings work offline. Some technical data is processed to run the app and, if you choose, to record a voluntary contribution:
| Feature | Data | Purpose |
|---|---|---|
| Operations and security | Random installation identifier, transient IP, usage limits and technical request metrics | Authenticate installations, prevent abuse and operate the service |
| Usage metrics | App usage events (screens opened and actions such as starting or completing a reading, chosen spread and deck), random installation identifier, app and OS version; no questions, notes, meanings or email and no IP geolocation | Understand usage and improve the app |
| Voluntary support, when you choose to contribute | Anonymous identifier generated by RevenueCat, chosen product, purchase date and receipt reported by the store; payment details stay with the store | Process and record the purchase |
| Support and privacy | Sender address and email content | Answer questions and fulfill requests |
Oraculum does not send questions, readings, journal entries, contacts or location to online services. We do not infer location from your IP address.
3. Providers and international transfers
- Cloudflare: Worker hosting, D1 database, network, operational protection and public email routing.
- PostHog: app usage metrics, with data hosted in the United States.
- Google Play and Apple App Store: processing of support payments under each store's policies.
- RevenueCat: recording of support purchases with an anonymous identifier.
- Google: Gmail as the monitored support destination.
These providers may process data outside Brazil. We use the contractual and security measures available for the requested purpose and limit each transfer to the data needed for the service.
4. Legal bases and purposes
We process data to provide requested features, comply with legal or regulatory obligations, and protect the service against fraud and abuse. Where consent is legally required, you may withdraw it through the contact channel in this policy without affecting lawful processing that occurred before withdrawal.
5. Retention
- Local data remains until you erase it or remove the app.
- The anonymous installation record remains while it is active and is removed within 180 days after revocation; usage-limit counters expire within minutes.
- Usage metrics stay in PostHog for the retention period configured in the project.
- Support records are kept by the store and RevenueCat for the periods in their policies and applicable tax obligations.
- Accounts created in test versions remain until a deletion request.
- Providers may apply their own retention required by law, fraud prevention or dispute resolution.
6. Data deletion
You can erase all local data in Settings; uninstalling the app also removes it, and it cannot be recovered. If you created an account in a test version, you can request its deletion on our public deletion page.
7. Your rights
Subject to applicable law, you may request confirmation and access, correction, anonymization, restriction or deletion, portability, information about sharing, and review or withdrawal of consent. We may request proportionate information to verify your identity before fulfilling a request. Email support@darksandlabs.com.
8. Security and changes
We use HTTPS transmission, protected credentials and minimal collection in the online services. No measure eliminates every risk.
We will update this policy when there is a material change to data, purpose, provider or retention. The date at the top identifies the current version.