OXSTROLOGY1. What we process
Before purchase, the website keeps the entered birth profile in your browser. When a signed-in customer purchases a report, we save the name, birth date, birth time, location, cycle-direction gender, report language and one-way chart fingerprint to that customer’s report library. We also store the signed-in email, report type, payment status and Stripe transaction identifiers. The iOS app keeps entered birth profiles and generated report state on your device. If you choose to link the app to a website account, the app sends a chart fingerprint, Apple transaction identifiers, a device label and a protected account-session credential. Saving or synchronising an account report also sends its birth profile and report language. The device-session credential is kept in the iOS Keychain and transmitted over HTTPS; the server stores a one-way hash of it.
Your private observation journal
In the iOS app, the This device journal stores observations and their birth profiles in the app’s private files. It works without sign-in and does not send those observations to your OXSTROLOGY account. Account journals are separate and local entries are not uploaded automatically. Your device backup settings may include this app’s local data. Deleting the app removes its local journal from that device.
When you choose My account and save an observation, we store its event date, theme, title, factual notes, your interpretation, any planned action, follow-up, and selected chart reference under your account. We also save that chart’s name, birth date, birth time, birthplace, cycle-direction gender and fingerprint so you can reopen it on linked devices. Creating a journal entry does not require buying a report. Entries are used to provide your private journal and time-based review; they are not included in report-sharing links.
2. Payment information
Stripe processes website payment and billing information. Apple processes iOS in-app purchases and supplies the app with purchase entitlement status. OXSTROLOGY does not receive or store your complete card number or card security code.
3. Why we process data
For the website, we process account and order data to provide purchased reports, prevent duplicate charging, restore access, handle support and comply with accounting, fraud-prevention and legal obligations. In the iOS app, StoreKit checks entitlement status so purchased access can be granted or restored.
4. Retention and private report links
Website birth profiles, order records and entitlement records are retained while needed to provide the customer’s saved report library and meet legal obligations. They are available only after sign-in to the matching account. Data is shared only with service providers needed to operate the relevant product, including Stripe, Apple and hosting providers, or where required by law.
When a customer creates a private report link, OXSTROLOGY calculates a separate redacted report snapshot and stores that snapshot with a one-way hash of the random link token, the report type, language, expiry, revocation state and view count. The snapshot excludes the entered name, exact birth date and time, location and gender. After the link is opened, the token is exchanged for a shorter-lived secure, HttpOnly browser session and removed from the visible address. The interpretation and derived chart patterns may still be personal and may reveal approximate life-stage information, so a link should be shared only with trusted recipients. Links expire after 90 days and may be revoked earlier by the owner.
5. Your choices
You may correct birth details on your device. You can edit or delete individual observations in Journal. Local journal records stay on the device until deleted or the app is removed. In the account journal, deleting the last observation for a chart also removes its journal-specific saved birth profile. Journal entries remain stored until you delete them or request account-data deletion. A separately purchased report may retain its own copy of the profile. You may ask for access, correction or deletion of account-linked personal data by contacting support@oxstrology.com. Some transaction records may need to be retained for legal or accounting reasons.
6. Referral measurement
If a visitor follows a private report link, OXSTROLOGY exchanges the link token for a time-limited, secure HttpOnly browser session. If the visitor makes an eligible first purchase, we record the sharing record, purchaser account, Stripe session, product and discount amount to apply the saving, prevent repeat use and measure referrals. We do not expose the report owner’s email to the visitor.
7. International use
Our providers may process data in more than one country using their applicable safeguards. Do not enter another person’s birth details unless you have their permission.