Privacy Policy

Updated October 13, 2026. Celesthread is operated by ORIZON SYSTEMS LLC. For privacy questions or requests, email talenvyre@myseena.com with “Celesthread privacy” in the subject. Do not send passwords, authenticator secrets or payment-card numbers.

Who the service is for

Celesthread is for adults 18 and older. Signup asks for a date of birth and agreement to the Terms and acknowledgment of this policy. The age screen uses information you provide; it is not identity verification. Do not create an account for a child or enter a child's information in a private profile. Contact us if you believe a child has provided personal information so we can investigate and arrange appropriate restrictions and removal.

Information we collect

Optional journal, contact matching, location discovery and social features are choices. Declining them can limit the corresponding feature. Privacy settings do not make information anonymous or stop the processing needed to provide a feature you request. Contact matching stores keyed matching tokens rather than a bulk address book; these tokens can still relate to people and are not treated as anonymous. The service does not continuously track background GPS location.

Automated reflection, advertising and analytics

Chart calculations run through deterministic software. Built-in readings and written templates remain available without external AI. Optional AI-written reflections and answers use OpenAI only after you accept the current in-app disclosure. An older daily-reading preference alone does not authorize this expanded use.

For a daily reflection, OpenAI receives calculated chart placements and current transits. For questions in Tideglass, Tarot, I Ching and Tử Vi, OpenAI also receives the question you type, the calculated or drawn symbols, the selected tradition, and the reply language. We do not add your stored name, email, birth date, birthplace, journal or memories to these requests. Personal details that you type in a question are part of that question and will be sent; leave out information you do not want to share. Requests ask OpenAI not to store the completion, but provider security and abuse-monitoring retention may still apply under its policies. See https://openai.com/policies/privacy-policy/.

You can decline AI and continue using built-in readings, or turn AI off in Settings → Allow AI-written reflections and answers. Turning it off prevents new AI requests; it cannot withdraw a request already sent to the provider. A response still in flight is discarded after consent is revoked. Previously saved readings remain in your account until removed under the account and retention controls below. Optional journal inclusion in internal reflection is requested separately. Automated text is not a human assessment, diagnosis or prediction of certain events.

We do not sell personal information or share it with advertising networks for cross-context behavioral advertising. We do not use journal or birth-profile information for advertising. No external product-analytics adapter is enabled in this release. Essential session cookies and infrastructure security/operational processing still occur; there is no advertising-cookie opt-in required to use the core service.

Providers and where information is processed

Vercel hosts the application and handles requests and operational logs. Neon hosts the PostgreSQL database; the verified production database region is AWS us-west-2 in the United States. Cloudflare provides domain/DNS services. Requests or support information may also be processed in other locations used by the relevant providers.

Optional integrations process data only when enabled and used: Apple or Google for sign-in; Twilio for phone verification; Resend or Zoho ZeptoMail for transactional email, depending on the configured delivery service; OpenAI for the opt-in features described above; Stripe for website payments; and Apple with RevenueCat for enabled iOS purchase verification and restoration. Payment-card details are entered with the payment provider; Celesthread does not store full card numbers. New purchases may remain unavailable while release acceptance is incomplete. A provider listed here is not a promise that its feature is currently available.

When configured place search is used, Google Maps or OpenStreetMap Nominatim receives the search text. Entering coordinates manually does not call that search provider. We do not send journals or private conversations to geocoding services.

Providers may keep their own security, billing or legally required records. Their retention is separate from deleting an account in Celesthread. We may disclose information when reasonably necessary to respond to a valid legal request, protect people and the service, or complete a business transfer subject to applicable privacy obligations. We do not claim that all providers or international transfers are covered by one certification or uniform retention period.

Retention and deletion

Account and feature records generally remain while you keep the account or until you remove content using an available control. Successful account deletion removes the account and related active-database content, including journals, Tideglass history, private profiles you created and associated messaging/comparison records. Some shared conversation records are removed for both participants. Copies another person saved outside the service cannot be recalled.

Audit rows are detached from the account when it is deleted, but a detached row is not necessarily anonymous: some older event metadata can contain identifiers. The service currently has no automatic expiry for these audit records. Support correspondence and provider security/billing records may remain separately; privacy requests can ask us to review those records and explain any reason for keeping them.

The database has a six-hour recovery-history setting. Separately retained backup branches can contain older information and do not inherit that six-hour expiry. At this policy's effective date, an older backup branch remains and no universal automatic expiry has been established for retained branches. Deleting an active account does not erase those copies immediately. Do not assume a deleted record disappears from every backup within six hours. Contact us to request review of retained copies; any restoration requires a separate operational review of prior deletion requests before restored data is used.

Cancel a paid subscription with its billing provider before deleting your account. Account deletion does not cancel an external subscription. The service accepts text and structured information; it does not currently offer general personal photo, video or document uploads.

Your choices and requests

You can correct profile information, change optional settings, remove supported content, export available account data and delete your account in Account settings. The current download covers core account, birth, readings, journal, connection, questionnaire and selected social records. It is not a complete export of every operational or newer feature record. Contact us for additional access, correction, deletion, portability, objection or restriction requests, and to withdraw optional permission. Changing a setting does not undo processing already completed.

If you cannot sign in, email the privacy contact above. We verify authority using the account and request context before disclosing or deleting data; we may ask for proportionate additional information. Never email a password or authenticator secret. You may use an authorized agent where applicable. Rights and exceptions depend on location and applicable law; we will explain the outcome and any available appeal or complaint route. You may contact your relevant privacy regulator. We do not penalize you for making a privacy request.

Security and updates

We use access controls and security safeguards, but no service can guarantee absolute security. Material changes will be reflected in an updated effective date and notice through the service or an appropriate contact channel. A different AI, advertising, upload or collection flow needs a revised notice before it is introduced.

ZeptoMail delivery receives the recipient address and message content for the requested transactional email. Celesthread disables ZeptoMail open and click tracking.

Optional verified phone discovery

Phone discovery is separate from signup and requires your verified phone and explicit opt-in. Only other verified opted-in members who select your number can see your username; both must opt in and blocked accounts are excluded. We store a keyed hash of your own verified number, not a bulk address book. Selected numbers are processed for each lookup without storing those numbers or results. Keyed hashes remain personal information. Turning discovery off removes your matching index. No invitations, messages or connections are sent automatically. A device contact picker appears only if your browser supports it; otherwise you can select numbers manually.

When SMS is enabled, Twilio processes the destination and verification message. Codes expire after ten minutes and stop after six wrong attempts. Challenge records containing the destination and hashed code are deleted with your account; records older than 24 hours are also cleaned up on later verification requests. Separate anti-abuse records retain only keyed phone/account hashes and timestamps after account deletion to prevent spending-limit evasion, and are cleaned up on later requests once older than 24 hours. Cleanup is event-driven, not guaranteed immediately at 24 hours. Phone verification remains optional and unavailable until the provider and spending safeguards are configured.

Optional AI daily reflections

If you enable AI-written daily reflections in Settings, Celesthread may send calculated chart placements and current transits to OpenAI to generate a reflection. This request excludes your name, birth date, birth location, journal entries and memories. Chart calculations remain deterministic within Celesthread. The resulting reflection is saved to your account for the day. You can withdraw this permission in Settings; calculated readings remain available. Account deletion removes saved readings under the deletion process described above. We do not use this permission to opt you into journal or memory analysis.

Chart image sharing on your device

When you choose to share a chart image, the native app stores the generated PNG temporarily in its private cache so your selected app can read it. On iOS, Celesthread removes that temporary file after the share sheet finishes. On Android, a successful share retains the file for the receiving app; generated files older than 24 hours are checked for cleanup when Celesthread opens, returns to the foreground or starts another share. Cleanup can be delayed while the app is closed or if the device cannot remove a file. These temporary images do not include your name, birth date, birthplace, journal or memories.