Privacy Policy

Oikoa is built and operated by Exhbt LLC, a Delaware limited liability company with its principal place of business at 601 4th Street, Unit 110, San Francisco, CA 94107 ("we," "us," or "Oikoa"). This Privacy Policy explains what information we collect when you use the Oikoa mobile app, the website at oikoa.app, and any related services we run (collectively, the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described here.

Our Promise

We do not sell your personal information. We do not rent it. We do not share it with advertising networks or data brokers. Oikoa makes money from premium subscriptions — not from your data.

01 Who this applies to

This Policy applies to anyone who uses the Service, including students, paying subscribers, and people who visit our website. You must be at least 18 years old to use Oikoa. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us at info@oikoa.app and we will delete it.

02 What we collect

Information you give us

• Account information. When you sign up, we collect your email address and, if you sign in with Apple or Google, the name and email those providers return to us. We do not see or store your Apple or Google password.
• Birth chart inputs. Your date of birth, time of birth (if known), and place of birth. We use these to compute and store your natal chart, which is the basis for every personalized reading and lesson in the app.
• Profile information. A display name and an optional avatar.
• Learning data. Which lessons you've completed, which concepts you've unlocked, your performance on questions, your unit-gate results, and your practice-module scores.
• Daily readings and journal entries. Readings we generate for you, plus any notes or reflections you save in the app.
• Tutor conversations. Questions you ask the built-in tutor, and the responses we generate for you.
• Payment information. When you subscribe, our payments processor (RevenueCat via Apple or Google) collects your payment details directly. We receive a record of the transaction and the entitlements granted, but we do not see or store your full card number.
• Support communications. If you email us or fill out a contact form, we keep what you send so we can respond.

Information collected automatically

• Device and app data. Device model, OS version, app version, language and time zone, and crash diagnostics.
• Usage data. Screens viewed, features used, and timestamps — used to keep the app working and to improve it.
• Push tokens. If you allow notifications, your device gives us a push token so we can deliver your daily reading reminder.

Information from third parties

• Sign-in providers. Apple and Google share your name and email with us when you choose to sign in with them.
• Geocoding. When you enter your birthplace, we query Google Places to resolve it to coordinates and a time zone.

03 How we use what we collect

• To provide the Service: compute your natal chart, generate daily readings, personalize lessons, run the tutor, and track your progress.
• To process subscription purchases.
• To send you transactional notifications (daily-reading reminders, account and security alerts).
• To send occasional product updates from us — you can opt out at any time.
• To keep the Service safe: prevent fraud and abuse, enforce our Terms, and respond to legal requests.
• To debug, measure, and improve the Service.
• To comply with applicable law.

We do not use your personal information to train large language models or to build advertising profiles.

04 When we share information

We share information only in the situations below. We never sell it.

• With service providers who run the Service for us, listed in "Third-party services" below. They are contractually limited to using your information to provide the services we hire them for.
• For legal reasons — if we are compelled by valid legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Oikoa, our users, or the public.
• In a corporate transaction. If we are acquired, merged, or sell substantially all of our assets, your information may transfer as part of that deal. We'll notify you and the new owner will be bound by terms no less protective than these.
• With your consent — for anything not listed above.
• Aggregated or de-identified data. We may share data that no longer identifies you (e.g., "students who pass Unit 1 retain concepts 40% better") for analytics or to promote the Service.

05 Third-party services

We use the following providers to operate the Service. Each one processes only the data they need to do their job.

• Supabase — backend, database, file storage, and authentication.
• RevenueCat — subscription management on top of Apple and Google purchase APIs.
• Apple and Google — sign-in with Apple and Google, push notification delivery, in-app purchases, and app distribution through the App Store and Google Play.
• Expo — build and deliver app updates, send push notifications.
• Vercel — host the serverless API functions that compute charts and generate readings.
• Google Places — address autocomplete and geocoding when you set your birthplace.
• Anthropic — AI generation for daily readings and the in-app tutor. See "AI features" below.
• ElevenLabs — text-to-speech narration for lesson audio. Lesson scripts are sent to ElevenLabs; per-user data is not.
• PostHog — product analytics. We send screen views and feature usage; we do not send your chart data, journal entries, or tutor conversations.

06 AI features

Oikoa uses Anthropic's Claude model for two things: your daily reading and the in-app tutor. When you open your daily reading or ask the tutor a question, we send Claude a prompt that includes the relevant pieces of your natal chart (planet positions, signs, houses) and your question. Claude returns a response, which we save to your account so you can read it again later.

Per our agreement with Anthropic, your inputs are not used to train their models. We do not send Anthropic your name, email, precise birth time, or birth location — only the astrological derivatives needed to interpret the chart.

07 Cookies and similar technologies

The mobile app uses your device's secure storage to keep you signed in. The website uses a small number of essential cookies to remember your session and to keep the site working. We do not run third-party advertising cookies, fingerprinting, or cross-site tracking pixels.

08 Your choices

• Edit your profile at any time from the Profile tab.
• Turn off push notifications in your device settings or in the app.
• Unsubscribe from product emails using the link in any email. Transactional messages (security alerts, receipts) will still be sent.
• Delete your account from Profile → Reset Prototype, or by emailing info@oikoa.app. We will delete your account and personal information within 30 days, except where we are required by law to keep something (for example, tax records of past purchases) or where retention is necessary for safety or fraud prevention.

09 How long we keep things

We keep your account information, natal chart, and learning progress for as long as your account is active. When you delete your account, we delete or de-identify your personal information within 30 days, except as noted above.

10 Security

We use TLS in transit, encrypted storage at rest, scoped access controls in our database, and reputable infrastructure providers. No system is perfectly secure. If we ever experience a breach that legally requires notification, we will tell you.

11 California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect about you and how we use it.
• Request a copy of the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information.
• Limit our use of sensitive personal information (we collect very little — mainly account credentials and birth data).
• Opt out of the "sale" or "sharing" of your personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
• Not receive discriminatory treatment for exercising any of these rights.

To exercise any of these rights, email info@oikoa.app from the address tied to your account. We will verify your request and respond within 45 days. You may designate an authorized agent to make a request on your behalf; we will need written authorization and may need to verify the agent's identity.

California Civil Code Section 1798.83 ("Shine the Light") permits California residents to ask for a notice describing what personal information we share with third parties for their direct marketing purposes. We do not share personal information for third-party direct marketing.

12 Where we operate

Oikoa is operated from the United States and is intended for users in the United States. By using the Service from outside the U.S., you consent to your information being transferred to and processed in the United States, where data protection laws may differ from those in your country.

13 Changes

We may update this Privacy Policy from time to time. If we make a material change, we will notify you in the app or by email at least 14 days before it takes effect. The "Effective" date at the top of this page tells you when the current version was published.

14 Contact us

Questions or requests about your privacy? Email info@oikoa.app, or write to:

Exhbt LLC
601 4th Street, Unit 110
San Francisco, CA 94107
United States

© 2026 Exhbt LLC · Oikoa