Privacy policy
A Sanctuary is only worth something if what you leave there stays there. Here, plainly, is what we collect, why, who sees it, and how to erase it all.
Who is responsible
Inspiriel is published by INTRAPRISE - SARL au capital de 3 570 €, RCS Fort-de-France 529 689 382, 6 boulevard Général François Reboul, 97200 Fort-de-France, Martinique, the controller of your data. For any question or to exercise your rights: contact@inspiriel.com.
What we collect, and why
We only ask for what makes your Sanctuary work. Nothing is collected without your knowledge. We rely on the contract (your account, your purchases), on your consent (your Tradition, your photos, sending your data to the artificial intelligence, emails and notifications, the Master reading your journal), on our legitimate interest (security, measuring presence) and on our legal obligations (invoices).
- Your account - name, alias if you give one, email address, password (kept as an encrypted fingerprint, never in clear), language, country and time zone: to recognise you and serve you at your own hours.
- Your birth - the date, asked at sign-up to check that you are 18 and for the youth rate (the first date given is kept for that purpose); if you wish, the time and place: to compute your Birth Chart, your numerology, your dates and your guardian angels. It is shown to no one.
- Where you live, if you give it - a chosen town, or “locate me”: an approximate position (in the app, with the approximate location permission), rounded to about one kilometre on your device, before anything is sent: for the rising and setting of the stars, and nothing else.
- The birth of someone close to you - it is never recorded in your account. For the numbers for two, their date stays only in your session, on our server, until you clear it or sign out, and at most seven days after your last visit. For the sky for two, their first name and computed sky are entrusted to our AI provider for the time it takes to write the reading; only that reading, which bears their first name, is kept with your account.
- Your Tradition - the path or paths you choose; it may reveal a belief, and you agreed at sign-up that it should shape your Sanctuary.
- What you write - intentions, inner weather, study notebook, letters to yourself, draw questions, exchanges with the Master: to give them back to you. They are shown to no one; only an intention you place in the Constellation of Light is shared with other members - without your name.
- The Constellation of Light - the intention you place there, the date you accepted its rules, your reports and the people you no longer wish to see: for moderation. A report is written to the access log.
- Your practices - draws, logged meditations, favourites, stones and the care you note for them, the features of your hand that you confirm (never its photo), course progress: to keep your golden thread.
- Your orders - delivery address, phone, invoices and payments: to deliver, to invoice and to meet our accounting duties.
- Your presence - the pages you open, how long each stays on screen, the minutes spent in the Sanctuary and the closed doors you meet (a feature your tier does not open), linked to your account and kept as long as it exists: to understand what is useful and what is missing. These measures are never shown to you, never rank you and never trigger a reminder.
- Your notifications - what you ask for in Settings, the linked devices and their model (for example “Pixel 7 · Android 15”), the date of the latest sends and, in the app, whether your phone allows notifications: to understand why one might not arrive. Kept as long as your account exists; a device's model goes with its access key. Nothing else is read on your phone.
- Security - IP address, browser or device used and date of sign-ins and refused attempts, devices and access keys: to protect your account.
- Your profile picture, if you set one - a photo reduced to 256 pixels, stripped of its date and place, or one of the house's avatars; it appears only on your profile card, and you can remove it whenever you like.
Your path: data that belongs to you more than any other
The Tradition you choose may reveal a religious or philosophical belief - the law protects it specially. You give it to us knowingly, at sign-up. It is used to compose your Sanctuary (its Lights, its practices, its colours); it also enters our internal statistics, counted with everyone else's; and, if you have accepted the artificial intelligence, it goes with what you entrust to it, so that it answers you within your Tradition. It is never published, never passed to an advertiser, never used to rank you. You can change or remove it whenever you wish, and erasing your account takes it away.
What we do not do
- No advertising - neither on the site nor in the app.
- No selling or renting of your data - to anyone.
- No advertising tracker or third-party analytics - no Google Analytics, no social network pixel.
- A single cookie - your session cookie, needed to stay signed in; it follows you nowhere else. A few display preferences (folded panels, rosary position) stay in your browser and never reach us.
- No unrequested notification - regular emails and app notifications only leave if you turned them on, and stop with one gesture in Settings.
What never leaves your device
Some practices use your phone without sending us anything:
- The pendulum - the device's movements are read on the spot to draw chance; they are not sent to us.
- The crystal ball, the quiz, the rosary - everything happens in the page; no draw, score or round is recorded.
- Reading aloud - it uses your browser's voice; no text is sent to a speech service.
- The camera - to scan an object's seal, read on the spot; a photo of your cards, stones or hand, however, is sent to be read (see above).
Who receives what
A few providers help us run the house. Each receives only what it needs, and nothing more, and each is bound to us by a contract requiring it to protect your data at least as well as this policy describes. Some of them (Google, Apple, Stripe, Printful and our artificial intelligence provider) may process this data outside the European Union, notably in the United States, under the safeguards provided by the GDPR (EU-US Data Privacy Framework or standard contractual clauses).
- OVH (France) - hosts the site, the database and outgoing email.
- Stripe - collects card payments. It receives your email address (for its receipt), what you buy and what is needed to deliver it: the delivery address of an object, or the date, time and place of birth given for My Guardian Angels. Your card number never passes through our servers and we do not keep it.
- Google Play - collects purchases made in the Android app; we receive the proof of purchase (order, product, subscription status), never your payment method.
- Apple (App Store) - collects purchases made in the iPhone and iPad app; we receive the proof of purchase (transaction, product, subscription status), never your payment method or your Apple ID. To link a purchase to your account, we give it only a purchase number that says nothing about you. Apple also delivers notifications on iPhone and iPad.
- Anthropic - writes the Master's answers, astral readings, draw interpretations and the reading of your hand. It receives your first name, your question and a summary of your Sanctuary (path, flame, intentions, inner weather, latest draw: details on the Artificial intelligence page), your study journal only if you allowed it; for the sky for two, the first name and computed sky of someone close to you. Your surname, email address, postal address, invoices and payment details are never sent to it. The photograph of your own cards, of your stones or of your palm is sent to be read: we never keep it, our provider keeps it only for the limited time set by its terms, and a photo of your hand is never used to recognise you.
- Google Firebase - delivers the app's notifications (on iPhone and iPad, it hands them to Apple). The text of each notification (the Light of the day and its source, a reminder) passes through its servers; your device's technical identifier is entrusted to it when you sign in, and its kit, built into the app, sends it some technical operating data (installation identifier, app and system versions). No notification is sent until you turn them on in Settings.
- Google Fonts - provides the site's typefaces; your device downloads them from Google, which then sees your IP address.
- Our print workshop (Printful, in the United States, or Gelato) - for an ordered object (tee, mug, print), it receives your name, delivery address and, depending on the workshop, your phone or your email address, to make and ship it, and passes them to the carrier who delivers. It sends us back the parcel tracking (carrier, tracking number, shipping and delivery dates), which we keep with the order to show it to you.
Everything about artificial intelligence - what it receives, what it refuses to do - is detailed on the Artificial intelligence page.
How long
- Your account and what you wrote there - as long as your account exists; everything goes with it.
- The measuring of your presence and the state of your notifications - as long as your account exists; they go with it.
- Invoices and payments - ten years, an accounting obligation; when the account is erased they are kept without your other data.
- The access log (IP addresses, reports) - ninety days at most.
- Security links (forgotten password, two-step codes) - valid for one hour at most, then erased: they remain no longer than about two hours.
- The photograph of your cards, your stones or your hand - never kept by us; our AI provider keeps it only for the limited time set by its terms.
- An address left on the waiting page - until opening, then erased on request.
- Backups - those of the database, one a day, kept for fourteen days, and the first of each month for six months; those of the files, including profile pictures, one a week, kept for eight weeks; and a copy of the whole, made each week outside our host, kept for four weeks. A deleted account therefore disappears from them after seven months at most. They are used only to recover from a failure.
- An AI answer you report - one year at most, the time to review it; it goes with your account.
Your rights
Your data is yours. At any time you can:
- See and correct it - from My profile and Settings, or by writing to us.
- Receive a copy - on request, in a readable format.
- Withdraw a consent - the consent given to the artificial intelligence, Lights by email and notifications are switched off in Settings; sharing your notebook with the Master, on the Master's page.
- Object to the measuring of your presence - write to us: your account is set aside from the statistics.
- Erase everything - see below.
We reply within one month. If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.
Delete my account and my data
You do it yourself, right away: Settings → “Delete my account”, at the very bottom. Your password is asked again, the erasure is immediate, your subscriptions paid by card stop with it and a message confirms it. A subscription taken in the app, however, is cancelled in its store (see below). If you can no longer sign in, write to us from your account's address at contact@inspiriel.com: we do it within thirty days.
A subscription taken in the app is not stopped by deleting your account: only the store that collects it can do so, and it keeps billing it until it is cancelled there. So cancel it too, before or after: on iPhone and iPad, in Settings, then your name, then Subscriptions (your App Store subscriptions); on Android, in your Google Play subscriptions.
- What is erased - your identity, your path, your birth, your place, your writings, your draws, your exchanges with the Master, your preferences, the measuring of your presence, your devices and access keys.
- What is kept - invoices, payments and orders, for ten years, because the law requires it; they then carry only the name and town shown on the invoice (and, for an order, the delivery address). The access log keeps your email address and IP addresses for ninety days at most, backups for seven months at most.
How we protect it
The site is only served over an encrypted connection (HTTPS). Passwords are kept as a fingerprint (Argon2id) and cannot be read back, even by us. You can turn on two-step sign-in or a biometric access key in Settings → Security. Sign-in attempts are limited and logged. Access to the administration is reserved to the publisher.
Minimum age
Inspiriel is intended for people aged 18 and over. We do not knowingly collect any data from minors; a sign-up declaring a younger age is refused and nothing is kept.
Changes
If this policy changes significantly, we will tell you in your Sanctuary before the change applies. Last updated: October 1 2026.