Privacy Policy
Last updated: June 2026
Your privacy matters deeply to us. imotionengine is built on the principle that you own your data, and we go to extraordinary lengths to protect it. This policy explains exactly what we collect, why, and how you stay in control.
1. Who We Are
imotionengine ("we," "us," "our") operates the website and application at www.imotionengine.com. For any privacy questions, contact us at hello@imotionengine.com.
2. What We Collect
Information You Provide
- Account information: email address and display name when you sign up.
- Birth profile: date of birth, and optionally birth time and location, used to generate your cosmic readings.
- Life events: dates, categories, moods, and optional descriptions you add to your timeline.
- Journal entries and notes: personal reflections you write within the app.
- Preferences: theme, engine settings, privacy level, and display options.
Information Collected Automatically
- Analytics: anonymized page views and interactions via Vercel Web Analytics (cookieless, no personal data is linked).
- Technical data: browser type and device info for compatibility (never tied to your identity).
What We Never Collect
- We never sell your data to anyone, ever.
- We never share your personal content with other users.
- We never use your data for advertising or ad targeting.
- We never store payment card details (handled entirely by our payment processor).
3. How We Use Your Data
- To power your experience: generating your spiral, cosmic readings, and engine insights.
- AI features (Brahman AI): when you use AI features, relevant data is sent to a secure AI service to generate personalized insights. You control exactly what data the AI can see via three privacy levels (see below).
- Cloud sync: keeping your data synchronized across devices.
- To improve the product: anonymized usage patterns help us build better features.
- To communicate with you: account confirmations, support responses, and important updates only.
4. Your AI Privacy Controls
imotionengine gives you granular control over what data the AI can access. You can change your privacy level at any time:
- 🔒 Cosmic Only: AI sees only your birth chart and cosmic cycles. No personal events, notes, or descriptions are ever sent. Maximum privacy.
- 🔓 Enhanced: AI sees cosmic data plus event categories and moods, but never your written descriptions or notes.
- 🔑 Full Access: AI sees everything for the deepest, most personalized insights.
A transparency log in the app shows you exactly what data was sent in every AI interaction. Full visibility, always.
5. Data Storage & Security
- Encryption: all data is encrypted in transit (TLS/HTTPS) and at rest.
- Row-level security: database-level policies ensure that users cannot access each other's data. Your personal events, journals, and readings are isolated to your account.
- Local-first option: you can use the app without creating an account. Your data stays in your browser's local storage and never touches our servers.
- Secure infrastructure: hosted on industry-leading cloud platforms with enterprise-grade security.
6. Third-Party Services
We use the following trusted services to operate imotionengine:
- Authentication: Google OAuth for secure sign-in (Google receives only what's needed to verify your identity).
- Payment processing: Stripe handles all subscription billing. We never see or store your card details.
- AI processing: Google AI services generate personalized insights. Data sent is controlled by your privacy level setting.
- Bot protection: Cloudflare Turnstile protects forms from abuse (invisible, no user tracking).
- Email: Resend delivers transactional emails (confirmations, support replies).
- Analytics: Vercel Web Analytics collects anonymized, cookieless usage data. No personal information is linked.
7. Cookies & Local Storage
- Authentication cookies: used to keep you signed in. Essential for the app to function.
- Local storage: your spiral data, preferences, and settings are stored locally in your browser for fast access and offline use.
- Analytics: anonymized, cookieless usage tracking via Vercel Web Analytics. No cookies set; no consent banner required under TTDSG §25 / GDPR.
We do not use advertising cookies or any third-party tracking cookies.
8. Your Rights
You have full control over your data:
- Access: view all data stored in your account at any time through the app.
- Correction: edit or update any of your information.
- Deletion: delete your account and all associated data directly from your Profile tab. You can also contact us at hello@imotionengine.com and we will remove everything within 30 days.
- Portability: your data is yours. Contact us to request an export.
- Withdraw consent: change your AI privacy level, disable cloud sync, or delete your account at any time.
9. Children's Privacy
imotionengine is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Compatibility Readings and Shared Links
Partner data you provide
When you cast a compatibility reading, you provide the birth date and optionally the birth time, timezone, location, and name of a second person (the partner). This data is processed only to compute the seven-engine reading. It is not stored under your account, not used to build any profile, and is held in our compatibility cache for at most 30 days before automatic eviction.
How share links work
Share links use unguessable 12-character capability tokens that resolve to the signed reading payload. Anyone with the link can view the reading for up to 30 days. We do not log recipient identities and cannot list the share links you have created. Tokens and underlying reading data expire automatically at the 30-day window.
Article 14 rights for the partner
If you are the partner whose birth data appeared in a reading you did not initiate, you have the right under GDPR Article 14 to know what data was processed, to request deletion, and to object. Email hello@imotionengine.com with the share URL (if you have it) or with the approximate date and birth data, and we will remove the cached reading within 30 days. Share PNG previews are cached at our CDN edge for typically up to 24 hours; deletion requests propagate as edge cache copies expire.
Analytics when you open a shared link
When you open a compatibility reading link that someone else shared with you, we record one anonymous, cookieless analytics event noting that the link was viewed. We do not link that event to any account or to your identity, we do not capture the reading content, and we do not store any identifier we could later join to who you are.
11. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or a prominent notice in the app. Your continued use of imotionengine after changes constitutes acceptance.
12. Contact Us
Questions or concerns about your privacy? We're here to help.