Privacy Policy

Only what Radices and its supporting services need to work:

• Your email address — your sign-in identity.
• Your account ID and the display names of profiles you create.
• Private-beta approval and access records, including your email, approval or revocation status, and any internal access note.
• Birth details you enter for a profile: date, time of birth, and birthplace, including its coordinates.
• The names of the spaces you create or join.
• The email address you invite someone with — stored with the invitation’s delivery and status history so the Family owner can manage it and Radices can prevent invitation abuse. It remains until that Family or its owner’s account is deleted, unless Radices removes it earlier.
• An optional Family location you choose manually: its place-provider name, a server-derived coarse place key and display label, city or locality, region, country, coordinates rounded to two decimal places, and timezone. Radices does not retain the provider’s raw place identifier or a street-level label for Family location.
• An optional full anniversary date for you and your partner.
• The daily content generated for your spaces.
• Your AI permission choice for each Profile: the disclosure version, the account making the choice, whether it was granted or withdrawn, when you chose, and any parent or legal guardian attestation.
• Purchase and subscription records from Apple: product, transaction and original-transaction identifiers, subscription status and expiration, renewal setting, offer identifier, offer type, discount or payment mode, offer period, and the private account token used to connect the purchase to your Radices account. Radices never receives your payment-card or bank details.

Radices uses your information to sign you in, show your profiles and spaces, calculate chart placements from birth details, create daily readings, deliver invitations and account emails, and handle support or deletion requests. Family location and anniversary help present shared Family context and are saved for future personalization; they are not used to generate readings yet.

We use trusted service providers to run those parts of the app. They may process the information needed for their specific job, such as storing app data, delivering sign-in or invitation emails, resolving a birthplace, or generating a reading.

Apple processes subscription payment and sends Radices signed purchase and status information. We use it to unlock paid features, restore a purchase, prevent one purchase from being attached to multiple live accounts, identify a verified introductory free-trial period, stop paid generation when signed access ends, preserve the read-only archive after ordinary expiration, and remove paid readings after an Apple refund or revocation.

Birthplace search and optional Family location search use place lookup providers. A provider receives the place text you type and the place you choose. Birthplace timezone lookup also receives a timestamp derived from the birth date. Radices does not send the provider your name, email, or account identity.

Family location is selected from search results. Radices does not request access to your device’s current location and does not use GPS or background location services for this feature.

Within the app, birth details are readable only by the profile owner. People who share a space with you see the derived sun sign and a marker that the chart is complete — never the underlying birth date, time, or place. Radices and the service providers described in this policy process the information needed to operate the app.

A Family’s owner and partners who have accepted an invitation can see that Family’s shared location and anniversary. Pending invitees, people outside the Family, and other Families cannot see them.

Radices shows no ads, sells no data, and does not track you across other apps or sites. The iOS app contains no analytics or tracking SDKs. It handles your email, display name, user id, optional coarse Family location, optional anniversary, and the content you create; all of that is linked to your account and none of it is used for tracking.

The website uses Vercel Analytics for anonymous, cookieless page counts, including visits to the web app. These counts do not use advertising identifiers. The web app separately uses essential session cookies to keep you signed in.

Radices uses the birth date, birth time, and resolved birthplace coordinates you enter to calculate chart placements with an astrology calculation library.

Daily readings use specialized AI models operated by external AI service providers. Before sending a person’s information to these services to generate a reading, Radices asks for explicit AI permission for that profile. The information sent includes the space’s name, relationships, reading language and dates, and each person’s display name, age, and computed chart placements and transits — signs, degrees, retrogrades, and the day’s transits. It does not include your email, original birth date or time, birthplace text, or coordinates. Family location and anniversary are also excluded from reading requests for now.

Each adult chooses for their own Profile, including an invited partner. A Family owner may choose for a managed child under 18 only after confirming they are the child’s parent or legal guardian. Adding someone to a Family, accepting an invitation, subscribing, or entering birth details does not grant AI permission.

You can withdraw AI permission from Profile settings even if private-beta or subscription access has ended. This stops new readings that use that person’s data and prevents unfinished readings from being published. It does not cancel an Apple subscription or remove readings already published. Account and Family deletion controls remain available separately.

Radices uses external AI services to create your readings, with no ads, data selling, or cross-app tracking. Internal writing experiments and external evaluation exports use synthetic test profiles only.

Radices records the model name, token counts, date window, outcome, and estimated generation cost for cost control. This operational record does not store the prompt, generated reading, or birth details.

You can delete your account from the web app or the existing iOS app: tap the profile avatar in the top-right, then choose Delete account. Deletion is immediate and permanent — it removes the account and the product data it owns (profiles, birth details, spaces you created and their content, memberships). There is no soft-delete copy of that product data.

Deleting your Radices account or uninstalling the app does not cancel billing through Apple. The existing iOS app offers a link to manage the subscription before deletion, while still letting you delete immediately. Minimal verified transaction, notification, and cost-control records may be retained for accounting, fraud prevention, and purchase restoration. They are detached from the deleted account and contain no email, birth details, prompt, or generated reading.

If you can’t access Radices, write to us and we’ll delete your account for you. Invitations other people addressed to your email may remain in the inviting Family’s status history until its owner deletes that Family or account; an expired or revoked invitation can no longer be used. Daily content already generated in a space someone else owns stays with that space — it can still mention you by the display name that was used there.