Privacy Policy
The short version: Natal Path keeps what you enter on your own device. We collect only what's needed to run accounts, payments and orders, we never sell it, and you can ask us to delete it at any time.
This policy covers the Natal Path app (app.pathsofatangledheart.com) and the Paths of a Tangled Heart website and shop (pathsofatangledheart.com), run by Paths of a Tangled Heart ("POATH", "we") in South Carolina, USA.
1. What stays on your device
Most of what you do in Natal Path never leaves your phone or computer. It's saved in your browser's storage and nowhere else, so we can't see it.
- Birth details, charts (yours and anyone else's you look up), readings and tarot draws
- Journal, offering and tracing notes; planner dates; meditation sessions
- Settings, discoveries, coin designs, and medallions while you're signed out
- Your location, if you choose "Use my location"
Clearing your browser's data for the app deletes all of it. The app's Backup button saves a copy to a file you control.
2. What we collect, and why
We collect only these, and only when you use the feature that needs them.
| What | When | Where it's kept | Why | How long |
|---|---|---|---|---|
| Email address | You sign in (Google or an emailed code) | Supabase (our account service) | To keep your medallion wallet across devices | Until you delete your account |
| Medallion balance and history | You're signed in | Supabase | To show your balance and prevent errors or fraud | Until you delete your account, or as tax law requires for purchases |
| Purchase records | You buy medallions or a bracelet | Stripe; order details in our shop | To process payment, deliver, refund, and keep tax records | As tax law requires (usually 7 years) |
| Name and shipping address | You order a bracelet | Our shop (Squarespace) and the shipping label service | To ship your order | As tax law requires |
| Messages, feedback and problem reports | You send them | Our email (Google Workspace) | To answer you and fix problems | Up to 2 years, or until you ask us to delete them |
| Website visit data | You visit the website | Squarespace | To run and secure the site | Per Squarespace's policy |
We never ask Google for more than your email address, and we never see your card number.
3. Who we share it with
Only the services that make POATH work, and only what each one needs.
- Stripe: payments, refunds and fraud screening (Stripe's privacy policy)
- Supabase: account sign-in and the medallion wallet (Supabase's privacy policy)
- Google: "Continue with Google" sign-in, and our business email
- Squarespace: the website and shop
- Shipping carriers (such as USPS): your name and address, to deliver orders
- Cloudflare (Pages): serves the app's files
- The law: if we're legally required to, such as a valid court order
We never sell your information, share it for advertising, use advertising trackers in the app, or let anyone else use it for their own purposes.
4. Your choices and rights
- See or delete your data: email support@pathsofatangledheart.com, or use "Delete account" in the app once accounts are live. We answer within 30 days. Purchase records we're required to keep for taxes are kept only as long as the law requires.
- Use it signed out: everything except syncing your wallet and buying medallions works without an account.
- Location: only used if you choose "Use my location", and it stays on your device. You can switch it off in Settings.
- Camera, microphone and motion (future walking features): asked for only when a feature needs them, switchable in Settings, and what they capture stays on your device. If you use speech-to-text, your browser (Google or Apple) converts the speech; we say so before you start.
- Cookies: the app uses no advertising or tracking cookies. The website uses Squarespace's essential cookies, and any optional ones are described in its cookie banner.
- Children: Natal Path isn't directed to children under 13, and we don't knowingly collect their information. If you believe a child has given us information, tell us and we'll delete it. Friends and sharing features, when they arrive, are for ages 13 and up.
5. Security, changes and contact
- Security: connections are encrypted (HTTPS). Account data is protected so each person can read only their own records, and secret keys stay on the server, never in the app. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you as the law requires.
- Where it's processed: in the United States.
- Changes: if this policy changes in a meaningful way, we'll post the new version with its date and note it in the app before it takes effect.
- Contact: support@pathsofatangledheart.com · Paths of a Tangled Heart, South Carolina, USA.