Privacy Policy

This policy covers the Patch Plus membership and the Spirit Studios family of apps: Patch Tarot, Spirit Sky, Spirit Runes, Signkeeper, Pocket Academy, Lightwork Missions, Daily Practice, MoonTime, Aura, and Kindred. Patch Tarot and Spirit Sky also publish their own app policies (linked at the bottom of this page). Where an app's own policy is more specific, that policy applies to that app. Everything below applies to the whole family.

The short version

Our apps work without an account. Your readings, charts, signs, notes, progress, and settings live on your device. Sharing to a community space is optional and happens under an anonymous handle. Purchases are handled by Apple or Google. We never sell your data.

What stays on your device

Saved readings, birth details and charts, logged signs, journal notes, lesson progress, streaks, your settings, and any photos you attach inside an app are stored locally on your device, and they are removed when you delete the app. There are three exceptions. Your community name (the display name you choose or, in some apps, an anonymous handle the app assigns) and, in some apps, your current streak count are shared if you join a community space. Anything you share to a community space is stored on our servers. And what an app sends to write a reading is described under "Readings written for you" below, which in Signkeeper can include the words you wrote about a sign.

Community spaces

Some apps include an optional community space: The Grove in Patch Tarot, Earthlight in Spirit Sky, Rune Hall in Spirit Runes, The Circle in Signkeeper, The Field in Pocket Academy, and the Grove in Lightwork Missions. Kindred currently keeps everything on your device; this section will apply to it when shared circles arrive. These spaces share one database, and each app shows only its own space, so treat anything you share as public rather than private to a single app.

When you choose to share to a community space, and in apps that offer them, to react, reply, or follow, that content is stored on our servers (hosted by Supabase) together with a random anonymous identifier for your device and your community name: either the display name you chose or, in some apps, an anonymous handle the app assigns. Your community name is stored with your posts so other members can see it, and in some apps your current streak count is shared so a badge can appear beside your name. No email or password is involved, and neither your community name nor your streak is linked to your real identity.

Two things in Signkeeper are worth naming. Your anonymous Circle handle is created when the app first starts, before you have shared anything. And if you pair with someone, a three-part summary of your recent patterns (your top category, symbol, and number) is stored on our servers beside the pairing code and sent to the reading service to write the shared reading; it carries no journal text. Leaving a pairing clears it on your device, and deleting your Circle identity removes your side of it from our servers.

Depending on the app, you can delete individual posts from within the app, or delete your whole community identity. In Spirit Sky, Settings has a Delete account button that removes your Earthlight account and every note and light you shared from our servers, erases Spirit Sky's data on your device, and tells you if any part of that could not be completed. In some apps, deleting your community identity also unlinks the Apple or Google account on that device, so your membership is not recognized again until you sign in or restore your purchases. It does not sign you out of Apple or Google themselves: on Android, choosing to unlink in Settings does that as well, and on iPhone Apple gives apps no way to do it. When you report a post, the report is stored so we can review it. Blocking an author is handled on your device. To request removal of all content associated with your device from our servers, email us at the address below.

Patch Plus and signing in

Patch Plus is purchased inside our apps through the App Store or Google Play. Our subscription service (RevenueCat) receives that app's store receipt when you buy, restore, or sign in, along with a random or account-linked identifier, so your membership can be recognized. It never receives your payment details, and neither do we. Patch Tarot also sends RevenueCat your IP address and a device identifier, which are used for ad measurement as described under Advertising below.

To use one membership across several of our apps, you can sign in with Apple or Google. We receive a stable identifier from Apple or Google, which we use only to link your membership across our apps. If you choose to share your name or email with Apple or Google at sign-in, it stays on your device and is not sent to our servers or to RevenueCat. You can sign out or unlink your account in Settings, and delete your account in Settings wherever an app offers it.

Purchases

Subscriptions and one-time purchases are processed by Apple or Google through your Apple ID or Google Play account. We never see your payment details. You can manage or cancel a subscription from your store account.

Notifications

Reminders are scheduled on your device, and no app in the family registers a push address with our servers, so every notification you receive is sent by your own device rather than by us. You can turn all notifications off at any time in the app's settings or in your device settings. If that ever changes, we will update this page before it ships.

Lightwork Missions

Lightwork Missions has no sign-in. Your progress, your reflections, and your settings stay on your device, and your daily reminders are scheduled there too. An anonymous identity, a handle and a colour, is created on our community server only the first time you share a reflection or report a post, not when you open the app. Sharing sends what you wrote along with that day's mission and its archetype. Reporting sends the report and the post it refers to. Reading the Grove, and the counts of what the community did today, reads from the server and sends nothing of yours. Deleting your account in Settings removes your local data and your community account, and the app checks afterwards that it is really gone; if it cannot confirm that, it tells you so and asks you to try again or to email us for help, rather than saying it worked.

Daily Practice

Daily Practice keeps your journal, your progress, your streak, and your settings on your device. There is no account and no sign-in. When it opens, it asks our community server for a single number: how many posts were shared across the family today. That request carries no identifier and none of your writing, and nothing of yours is published by it. Reminders are scheduled on your device, share cards are drawn on your device and leave only through your phone's share sheet when you tap share, and support is an email link.

Apps that keep everything on your device

Aura sends nothing to our servers at all. Your birth details, your chart, your lessons, your decision log, your check-ins, and your notes stay on your phone. The only thing that leaves is what you choose to send yourself through your phone's share sheet, which carries your Type, Authority, Profile and Strategy, and never your birth date, time, or place. Its reminders are scheduled on your device.

MoonTime also keeps everything on your device and sends nothing to us. Your daily check-ins, which are a mood and energy rating and an optional note, your events, your birth date, and your settings are all stored on your phone only. If you turn on showing your device calendar, MoonTime reads your existing events on the device to draw them in the grid. If you turn on writing events and choose a calendar, saving or deleting an event in MoonTime creates, updates, or deletes it in that calendar. Your phone or your calendar provider, such as iCloud or Google, may then sync it in the ordinary way, but MoonTime never sends it to us.

Location and sensors

Spirit Sky estimates your approximate city from your IP address, using an IP-location service, so Earthlight matches where you are. The estimate is kept on your device, and when you add a light in Earthlight its approximate location is stored with it on our servers. Spirit Sky uses the places you enter and, in Point mode, your phone's motion sensors to draw the sky. It never uses GPS or collects a precise location. Spirit Sky may also ask our reading service for an approximate city based on your connection, which is not stored. Kindred uses your device's motion sensor on the device to notice a shake and does not record or send sensor data. No app in the family collects your precise location. When you search for a place in Spirit Sky, the text you type is sent to OpenStreetMap's Nominatim service so it can suggest matching places.

Readings written for you

Some readings are written with the help of language models. The app sends only what that reading needs to our reading service, which runs on Cloudflare and uses models from Anthropic and Cloudflare to write the text. Most readings are sent only when you ask for one; where a reading writes itself as soon as a screen opens, that is said below. In Spirit Sky, opening the Readings page sends your sign placements and the current transits for your daily, weekly, or monthly reading; opening a friend's compatibility reading sends both sets of placements together with that friend's name and pronouns, without being asked; and asking for a memory reflection sends the memory text, its year, and your age. In Patch Tarot it is the cards you drew, their positions and meanings, and the question you wrote. In Signkeeper, asking for guidance on a single sign sends that sign's title, the description you wrote, and its symbol; and with Patch Plus, opening Readings sends a summary of your patterns (how many signs, their categories, repeating symbols and numbers, the weekday you log most) as soon as the screen opens, without being asked and without any of your journal text. In Spirit Runes it is the runes you drew, their positions, and the question you typed, only when you ask for a seer reading, and nothing that identifies you or your device is sent with it.

No reading is kept on our servers. Every reading is written fresh when you need it and then let go: that includes Patch Tarot's readings, Spirit Sky's compatibility readings and memory reflections, Signkeeper's guidance and pattern readings, and Spirit Runes' seer readings. Our reading service is built so that it could keep a copy of Spirit Sky's daily, weekly, and monthly readings to load them faster, but that cache is switched off. If we ever switch it on we will update this page first, and what it would hold is a general reading shared by everyone with the same rising sign, carrying no name, account, or device identifier, and a Patch Plus reading under a random identifier the app creates for that install, which is not linked to your name, your community account, or your membership. Kindred's companion lines are pre-written, and Pocket Academy does not send content to the reading service.

Advertising

No app in the family currently shows ads. Spirit Runes, Signkeeper, Pocket Academy, and Kindred include no advertising software at all. Patch Tarot and Spirit Sky still include Google's AdMob software, but neither app starts it, so no ad is ever requested or shown. On Android, the presence of that software means the advertising ID may be available to it. Both apps describe this in their own policies, linked below.

Patch Tarot does advertise itself on Facebook and Instagram, and includes Meta's software so we can see which of those ads work. It tells Meta when the app is installed, when it is opened, and when a purchase is made, along with basic device information such as the model and operating system. On Android that includes your advertising ID, which you can reset or delete in your device settings. On iPhone it does not, and we never ask to track you.

For the same purpose, our subscription service may report a purchase to Meta so it can be credited to the ad that led to it. That report says what was bought, what it was worth to us after the store's share, when it happened, your IP address, your device type and language, your advertising ID if your phone provides one, and an identifier that stands in for you rather than your name. It does not include your name, your email, or anything you wrote in the app. Meta handles what it receives under its own privacy policy.

Diagnostics and server logs

Some apps may send anonymous technical diagnostics, such as crash reports or membership sync errors, tied to a random identifier so we can fix problems. These are never linked to your identity.

Separately, whenever your device connects to our servers, the companies that host them keep the ordinary connection logs that every web service keeps, and those include your IP address. Supabase does this for the community spaces, and Cloudflare for the reading service. We do not use those logs to work out who you are, and we do not join them to your community name, your readings, or your membership.

Our reading service also checks the address a request came from, so one device cannot flood it and spoil the readings for everyone else. The company that hosts it holds that address for about a minute to make the check, and nothing of ours keeps it: it is never stored with your reading or tied to anything else about you.

Service providers

• Apple and Google process purchases and, if you choose, sign-in.
• RevenueCat recognizes your Patch Plus membership.
• Supabase hosts our community spaces and the shared daily readings.
• Cloudflare runs our reading service.
• Anthropic and Cloudflare provide the language models that write readings.
• OpenStreetMap's Nominatim service answers place searches in Spirit Sky.
• NOAA's public space weather feed is read by Spirit Sky for solar activity.
• IP-location services (ipwho.is, ipapi.co, and GeoJS) estimate an approximate city for Spirit Sky's Earthlight.
• Google's AdMob software is included in Patch Tarot and Spirit Sky, although neither currently shows ads.
• Meta receives install, open, and purchase events from Patch Tarot so its ad campaigns can be measured.

Children

Our apps are not directed at children under 13, and we do not knowingly collect personal information from them.

What we don't do

• We don't sell your data.
• We don't collect your contacts or your precise location.
• We don't read your photo library. A photo you attach inside an app stays on your device.
• We don't profile you across other apps or websites.

Your choices

• Delete your own community posts inside the app, where offered.
• Delete your community identity inside the app, where offered.
• Report or block anyone in a community space.
• Turn notifications off in the app or in your device settings.
• Sign out or unlink your Apple or Google account in Settings.
• Delete the app to remove everything stored on your device.
• Email us to have all content associated with your device removed from our servers.

App by app

Changes

If this policy changes in a meaningful way, we will update the date at the top and note the change in the apps.

Contact

Questions or removal requests: appmaster@spiritstudios.com

Spirit Studios also publishes Terms of Use and Community Guidelines for the family.