Privacy Policy

This Privacy Policy describes how Apollo ("the App", "we", "us") — operated by Høi Z ENK ("HØISETH"), a sole proprietorship registered in Norway — collects, uses, and protects your information when you use the Apollo mobile application.

We are committed to protecting your privacy and handling your data with care. By using Apollo, you agree to the practices described in this policy.

1. Information We Collect

We collect the minimum information necessary to provide the App's features:

• Account information: email address and authentication credentials, used to create and secure your account.
• Journal and ritual content: text, mood entries, soul slider values, and any content you create within the App. This data is stored encrypted and is private to your account.
• Usage data: rune unlocks, ritual streaks, oracle interactions, and other in-app progress used to power features such as the AI Oracle and the Grimoire.
• Device data: non-identifiable technical data (device type, operating system version, app version, crash logs) used for stability and improvement.
• Purchase data: subscription status and entitlement information processed via Apple and RevenueCat. We do not receive or store your payment card details.

2. How We Use Your Information

• To provide and maintain the App's features (Shadow Journal, Tarot, Oracle, Runes, etc.).
• To personalize content such as the daily AI Oracle message based on moon phase, tarot draw, numerology, and your soul slider averages.
• To manage subscriptions and in-app purchases.
• To diagnose technical issues and improve app stability.
• To communicate with you about service-related matters when necessary.

3. Biometric Authentication

The Shadow Journal feature can be locked with biometric authentication (Face ID / Touch ID). This authentication is performed entirely on your device by iOS. We do not collect, store, or have access to your biometric data.

4. AI Oracle Feature

When you request a daily Oracle reading, anonymized contextual data (such as moon phase, tarot draw, numerology numbers, and aggregate soul slider averages) is sent to a Supabase Edge Function which generates a poetic message. We do not share your private journal entries or raw personal content with third-party AI providers.

5. Data Storage and Security

Your account and content data are stored securely using Supabase, with data centers located in the European Union. Data is encrypted in transit (TLS) and at rest. Access to backend systems is restricted and authenticated.

While we apply industry-standard security measures, no electronic transmission or storage system is 100% secure. We cannot guarantee absolute security.

6. Third-Party Services

Apollo relies on the following third-party services to function. Each has its own privacy policy:

• Apple App Store — account, distribution, in-app purchases.
• Supabase — backend, authentication, and database services.
• RevenueCat — subscription management.

We do not sell or rent your personal information to any third party.

7. Your Rights (GDPR / Norwegian Personal Data Act)

If you are located in the EU/EEA or Norway, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your account and associated data.
• Restriction — request that we limit processing of your data.
• Portability — request your data in a portable format.
• Objection — object to certain processing activities.
• Complaint — lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

To exercise these rights, contact us at privacy@hoiseth.no.

8. Account Deletion

You can delete your account and all associated data at any time directly within the App, via Settings → Account → Delete Account. Deletion is permanent and irreversible. You may also request deletion by contacting privacy@hoiseth.no.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data is removed from our active systems within 30 days. Backup copies may persist for an additional period (typically up to 90 days) before being permanently overwritten. Anonymized, non-identifiable data may be retained for analytics.

10. Children's Privacy

Apollo is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. International Data Transfers

Your data may be processed in countries outside your country of residence, including in the EU/EEA where our backend is hosted. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the App or via email where appropriate.

13. Contact

For questions about this Privacy Policy or your data:

• Email: privacy@hoiseth.no
• Operator: Høi Z ENK (HØISETH), Norway