Privacy Policy
Sibyl is operated by Meridion Labs, Inc. , which is responsible for the data described here. Sibyl is built to need as little about you as possible, and this policy describes exactly what the app does, and nothing it does not.
Your photos are never stored
When you request a reading, your photo is sent to our server, passed to the model that writes your reading, and then discarded. It is never written to a database, never saved to disk, never stored in cloud storage, and never used to train any model. It exists only for the seconds it takes to generate your reading.
We do not perform facial recognition, facial identification, or biometric matching. Sibyl does not attempt to identify who you are, compare you against any database, or recognise you across readings.
Accounts: none in the app, an email on the website
The Sibyl app has no sign-up, no login, and no password. It never asks for your email address or phone number.
Sibyl on the web, at sibylastro.com/app, asks for your email address before your first reading. A browser cannot hold a purchase the way a phone can — storage gets cleared, and people switch browsers — so the email is what your free reading and anything you buy are attached to. There is no password.
For a web account we store, in our own database:
- Your email address, and whether you have confirmed it.
- When the account was created and when you last visited.
- Which tagged link first brought you to the site, if you arrived through one.
- Whether your free reading has been used, how many single readings you have bought and not yet used, and a two-hour window during which a reading you paid for can finish.
- If you subscribe: your Stripe customer and subscription identifiers, your plan, its status, when the current period ends, and whether you have cancelled.
- Your archetype, one of sixteen fixed names (for example, "The Vault"), once you have read your own face.
- Sign-in links we have emailed you: a one-way fingerprint of each link (never the link itself), when it expires — 15 minutes after sending — and whether it has been used.
We do not store your name, your birth details, your photos, or the text of any reading. The one exception is your archetype's name (for example, "The Vault"), which your first reading of yourself sets and which is kept with your account so later readings stay consistent. Your web account is kept signed in by a cookie holding a signed identifier, which expires after 180 days without a visit and cannot be read by scripts on the page.
We send a web account sign-in links when you ask for one, when you enter an email that already has a purchase on it, and after you buy something, so you can get back in on another device. We also send occasional emails suggesting a new reading to try — no more than one a week, and every one has a link that unsubscribes you in one tap. Unsubscribing does not affect sign-in emails, which only arrive when you ask for one or buy something. We cannot see your readings, because we never receive them after they are generated.
The free reading on our website
Our website, sibylastro.com, offers a short reading from a month and a day. That date never leaves your browser. The page works it out on your device from a table it already downloaded, so we never receive it and there is nothing for us to store. No year is asked for, and no photo, email or account is involved.
The waitlist on our website
The same website has a form asking for an email address so we can tell you when the app is released. It is the one place we ask for an email, it is entirely optional, and it is not part of the app.
If you give us an address there, it is stored with our analytics provider and in our server logs, and it is used for one email announcing the launch. Three things are stored with it:
- The address itself.
- Which tagged link brought you to the site, when you arrived through one, so we can tell which posts worked.
- The archetype the free reading gave you, if you did one before signing up, so the launch email can open with your own line instead of a generic announcement. This is the name only — a phrase we wrote in advance, one of twelve — and never the date you chose, because we never receive that.
It is not sold, not shared, and not added to a marketing list. It is never connected to a reading made in the app: those are generated on our server, never stored, and there is no identifier linking the two. Write to support@sibylastro.com at any time and we will delete it.
What stays on your device
The following is stored only in the app's local storage on your phone — or, on the web, in your browser's storage — and is never kept by us:
- Your first name, date of birth, and optionally your time and place of birth
- Your saved readings
- For a two-person reading, the location of the two photos you chose, so the saved reading still shows them when you reopen it. The photos stay exactly where they already were on your device — nothing is copied, moved, or uploaded.
- Your daily insight and streak
- Your app preferences
On the web, the photo for a reading in progress is also held in your browser until the reading finishes — including while you complete a payment, so the reading can continue when you return. It is removed when the reading finishes, when you leave it, and the next time you open Sibyl if a payment was never completed.
Deleting the app, or using Settings → Delete my data, removes all of it permanently. We hold no copy and therefore cannot restore it. Three things are deliberately kept, none of which is personal: a random identifier, so an active subscription is not orphaned from the device that bought it; a flag recording that your free reading has been used; and a count of completed readings, so the app knows not to ask you to rate it more than once.
What we send when you request a reading
Generating a reading transmits your photo, your first name, your birth details, and the life area you selected. These are used to produce that one reading and are not retained afterwards.
Analytics
We collect anonymous usage events — such as a reading being started, a paywall being shown, or a card being shared — to understand how the app is used. These events are tied to a random device identifier, not to you.
Analytics never include your name, your birth details, your photos, or any part of your reading. This is enforced in code, not just by policy.
Our website counts the same three things in the same way: that a page was viewed, that the free reading was used, and that a download button was tapped. These are tied to a random identifier your own browser generates and keeps — we never see who you are, and the identifier is not connected to any email address you may later give us. If you use the free reading, the star sign it produced is recorded; the date you chose is not, because it never reaches us.
Purchases
In the app, subscriptions are processed by Apple or Google and managed through RevenueCat. Your purchase is linked to a random device identifier and to your store account.
On the web, purchases are sold by Meridion Labs, Inc. and processed by Stripe. Stripe receives your email address and your payment details on its own checkout page; we receive the identifiers and subscription details listed above, and never your card number.
In neither case do we see or store your payment details.
Companies that process data for us
- Anthropic — generates readings. Receives your photo and birth details for the duration of the request.
- RevenueCat — manages subscription status in the app.
- Stripe — processes payments on the web, and receives your email address and payment details to do so.
- Resend — sends sign-in emails, and receives your email address to do so.
- Cloudflare — Turnstile checks that the person entering an email on the website is not an automated script. It receives technical information about your browser and connection, under Cloudflare's own privacy policy.
- PostHog — anonymous usage analytics, and storage for website waitlist emails.
- Railway — hosts the server that handles reading requests, and the database holding web accounts.
Children
Sibyl is not intended for anyone under 13, and we do not knowingly collect information from children.
Your rights
For the app, we hold no account and no personal records, so there is nothing for us to export or delete on your behalf — clearing the app's data removes everything.
For a web account, or a waitlist address, write to us and we will send you what we hold or delete it. Deleting a web account ends access to anything bought with it. Stripe keeps its own records of payments for as long as the law requires. For any question about your data, contact support@sibylastro.com.
Changes
If this policy changes materially, the updated date above will change and the new version will be published here.