Privacy Policy

Effective Date: May 2, 2026

Earth Bound Energy ("the App," "we," "us") is developed by Michael Kelly / The Energy Body. This policy explains what we collect, why, and what you can do about it.

The Short Version

• We don't sell your data. Ever.
• If you don't sign in, we don't know who you are. Charts are computed on your device.
• If you sign in, we store your email, your subscription/purchase status, and any readings you save.
• Birth data you submit for AI-generated readings is sent to Anthropic (the AI provider) only at the moment of generation, and is not retained by them per their no-training policy.
• Payments are handled by Stripe — we never see your card number.

What We Collect

Without an account

If you use the App without signing in, we do not collect personal information. Birth data you enter (name, date, time, location) stays in your browser's local storage on your device. Calendar entries you write in the journal stay on your device.

With an account (sign-in)

When you sign in via magic link, we collect and store:

• Email address. Used as your account identifier and to send you the sign-in link.
• Session token. A random identifier stored in an HTTP-only cookie that keeps you signed in for up to 30 days.

Birth data (when you generate a reading)

To generate AI prose readings, your birth data (name, date, time, location) and the relevant astrological signals are sent to Anthropic's Claude API at the moment of generation. The AI returns the reading text. We do not retain your raw birth data on our servers — only the resulting reading text is cached, tied to the inputs you provided.

Payment data

If you make a purchase, Stripe handles the entire payment flow. We never see or store your card number, CVC, or full billing details. Stripe shares with us a customer ID, your email (for receipts), and the success/failure of the transaction.

Third-Party Services

We use a small set of vendors to run the App. Each operates under their own privacy policy:

• Stripe — payment processing. Privacy
• Anthropic (Claude API) — AI reading generation. We send the chart inputs needed for the reading; Anthropic's enterprise API does not use your inputs to train their models. Privacy
• Resend — sends the magic-link sign-in emails. Privacy
• Vercel — web hosting and infrastructure. Standard server logs (IP, request path, user agent) are kept short-term for security and operations. Privacy
• Upstash / Vercel KV — secure database for sessions, entitlements, and saved readings. Privacy
• OpenStreetMap Nominatim — converts place names to latitude/longitude when you enter a birth city. We send only the city/region you typed.
• Google Fonts — typography. May log standard web requests per Google's policy.

Cookies

We use one cookie: cp_session. It is HTTP-only, secure, and contains a random session token — not your email or any personal data. Its only job is to keep you signed in. We do not use third-party tracking cookies, analytics cookies, or advertising cookies.

Data Storage & Retention

• Active accounts: we keep your email, subscription status, and saved readings as long as your account exists.
• Sign-in tokens: a temporary 15-minute token used only to verify your magic link. Discarded as soon as you sign in.
• Session cookies: 30-day rolling expiry; cleared when you sign out.
• Closed accounts: if you ask us to delete your account, we delete your email, entitlement record, and saved readings within 30 days.

Sharing

We do not sell, rent, or trade your information. We share only with the third-party services above, and only the minimum necessary to operate the App. We will disclose information if compelled by valid legal process.

Your Rights

You can:

• Sign out at any time — clears your session cookie.
• Request your data — email us and we'll send you everything we have on you.
• Delete your account — email us and we'll delete your record within 30 days.
• Cancel a subscription at any time from your account; cancellation takes effect at the end of the current billing period.

Synastry & Resonance Match

If you enter a partner's birth data for a synastry comparison, that data is treated the same as your own — used only to generate your reading, not retained on our servers, and never shared with anyone else. The Resonance Match feature compares your chart against a curated database of historical figures with publicly verified birth records (Astro-Databank ratings AA or A); no living strangers are tracked or contacted.

Children's Privacy

Earth Bound Energy is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has signed up, contact us and we'll delete the account.

Changes

We may update this policy as features change. Material changes will be announced in-app. The "Effective Date" above is updated whenever the policy is revised.

Contact

Questions, requests, or concerns: michael@theenergybody.org.