Privacy Policy
Last updated: October 4, 2026
What you bring to the goddesses is tender. This policy explains what personal information 791827777 BC Ltd, doing business as She Is Oracle ("we", "us"), collects through sheisoracle.ca, why, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
1. What we collect
| Information | Examples | Why we need it |
|---|---|---|
| Account details | Name, email address, password (stored encrypted) | To create your account and let you sign in |
| Membership and payment | Plan, billing dates, last four digits of your card, billing country | To bill you and manage your membership. Full card numbers are held by Stripe, never by us |
| Conversations | What you say to the goddesses and what they say to you | To continue your conversation over time, which is how the Service works |
| Journal | Entries you write and card draws you save | To keep your one journal across all goddesses |
| Practice history | Cards drawn, meditations played, sanctuaries visited | To remember where you are in your practice |
| Camera images | The card you hold up when using "cards that speak" | To recognise which card you are showing. Images are read in the moment and not stored |
| Messages to us | Support emails and contact forms | To answer you |
| Device and usage | Browser type, device, approximate location from IP, pages visited | To keep the Service secure and working well |
2. Sensitive information
Your conversations and journal may include things about your health, relationships, grief, beliefs or finances. We treat everything you write as sensitive. We use it only to provide the Service to you, we do not sell it, we do not use it for advertising, and we do not allow our AI provider to use it to train its models.
3. Who can see your conversations and journal
No one at She Is Oracle reads your conversations or journal, except:
- when you ask us to, for example to help with a support issue;
- when our automated safety systems flag a serious risk to your life or someone else's;
- when the law requires it.
4. Check-ins
If you share something that suggests you are struggling, or return to a difficulty many times, our systems may note this so a goddess can check in with you. This happens automatically, without a person reading your words. You can turn check-ins off in your account settings.
5. Consent
We collect, use and share your information with your consent, which you give when you create an account and use the Service. For marketing emails, we ask separately and you can withdraw at any time. You may withdraw consent for other uses too, though some features may then stop working; we will explain what changes.
6. Who we share information with
We share personal information only with service providers who help us run the Service, under contracts that require them to protect it and use it only for our instructions:
| Provider | What they do | Where |
|---|---|---|
| Lovable Cloud (Supabase) | Hosting, database and sign-in | United States |
| AI model provider | Generates the goddesses' responses | United States |
| Stripe | Payment processing | Canada and United States |
| Email provider | Account, receipt and newsletter emails | United States |
We never sell or rent your personal information. We may disclose it if required by law, to protect someone's safety, or as part of a sale or merger of our business, in which case the buyer must honour this policy.
7. Information stored outside Canada
Some of our providers store or process information in the United States and other countries. While there, it is subject to the laws of those countries, and authorities there may be able to access it.
8. How long we keep it
- While your membership is active: we keep your account, conversations and journal so the Service can work.
- If your membership ends: your journal and conversations are locked, not deleted, for 12 months so you can return to them. After that, we delete them, with an email reminder first.
- If you delete your account: we delete your conversations, journal and account details within 30 days.
- Billing records: we keep these for 6 years, as Canadian tax law requires.
You can delete individual journal entries or conversations at any time.
9. How we protect it
We use encryption in transit and at rest, access controls, and providers with strong security practices. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner as the law requires.
10. Your rights
You may ask to see the personal information we hold about you, correct it, receive a copy, or have it deleted. Write to love@sheisoracle.ca. We will reply within 30 days. If you are not satisfied, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
11. Visitors outside Canada
If you live in the European Union, the United Kingdom, Quebec or a US state with its own privacy law, you have the rights above and any further rights your local law gives you. We process your information to provide the Service you signed up for and with your consent. Write to love@sheisoracle.ca to use any of these rights.
12. Age
The Service is for adults 18 and over. We do not knowingly collect information from anyone younger. If we learn we have, we delete it.
13. Changes to this policy
If we change this policy in a meaningful way, we will email you or tell you in the Service before the change takes effect.
14. Privacy Officer
Sophia, Founder and Privacy Officer
791827777 BC Ltd, doing business as She Is Oracle
201-587 West 7th Avenue, Vancouver, BC, V6Z 1B4, Canada
love@sheisoracle.ca