What this policy covers
This policy covers the Creatrix Companion apps and the reading service at creatrix.jasonbyron.com/companion/. It also describes this public privacy page, which you can read without opening a Companion session.
The physical box-set website and shop checkout are separate services with their own privacy information. This policy does not describe Shopify purchases, social platforms or other websites you choose to visit.
Information we process
- Photographs: if you choose a photo or take one using the system camera app, the Companion processes the selected image on your device to suggest cards. Android keeps a temporary app-owned copy while it is needed. The Companion does not upload the photo, its image pixels or photo metadata to our server or a cloud recognition service. You can select cards manually instead.
- Your question: the optional text you type is held on your device and shown with your reading. It is not sent to our server, analysed by an online AI service or included in narration.
- Confirmed reading choices: when you request a reading, the selected card identifiers, their positions, the spread type and your confirmation choices are sent to our Cloudflare-hosted server. These are used to return card interpretations, reading connections and a sequence of saved narration clips.
- Access and session information: opening the free Companion sends a request over HTTPS and sets a signed session cookie containing a random nonce and a free-core scope. It lasts up to eight hours and permits photo-assisted card selection, interpretations and authorised narration. It does not establish ownership of a book or any paid content. There is no registration, personal user account or email sign-in for the free core. Earlier app builds may still use the legacy password route over HTTPS; those sessions also grant only core access.
- Connection and security information: requests expose information such as your IP address, requested URL, request time and browser or device request headers to the hosting infrastructure. The application uses the IP address to limit free-session starts, repeated failed legacy logins and reading requests. Requests for card artwork and narration may indicate which content you are viewing or listening to.
- Approximate location and service diagnostics: our hosting infrastructure can derive approximate country or city information from your IP address and process connection and service diagnostics, such as network timing and request success or failure, to operate, secure and monitor the service. The app does not request GPS location or personalise readings by location.
- Support messages: if you email us, we receive your email address and whatever you include so we can respond. Please do not send passwords, payment details, private photographs or sensitive questions.
The Companion does not display ads, use advertising trackers or send reading choices to advertisers or data brokers. Confirmed choices are used to provide your reading and narration. Saved narration is downloaded from our server. The app does not record your microphone or send each reading to an external AI provider.
Hosting and security
Cloudflare provides the website, server and network infrastructure and processes requests as our hosting service provider. Operational and security metadata may be processed by that infrastructure under the applicable Cloudflare service terms and privacy information. Processing may occur outside your country. See Cloudflare’s privacy policy.
The Companion uses HTTPS for network requests. Session cookies have security restrictions, and Android does not permit insecure HTTP connections or bypass invalid server certificates. These protections reduce exposure but cannot guarantee perfect security.
The photo picker, camera app, email app and Android system components are supplied by your device or chosen providers. Their own processing, including access to any cloud photo library you use, is governed by those providers. The Companion does not upload your selected photograph through its own reading service.
Storage, retention and clearing
On iPhone and iPad: the selected photo is processed locally and its metadata is removed. The current photo, card selections, reading, session cookie and fetched narration are held in memory. Clear, session expiry and app termination remove that current state and stop playback; replacing the reading clears the previous one. The app checks the session expiry when returning to the foreground. Your appearance choice is the only app preference saved between sessions. Original photographs in your library remain there.
On Android: use Clear to clear the current reading, question, app-owned temporary photo, cookies and web storage. Normal backgrounding also clears this state, except while the system photo chooser or camera is being used for an active selection. Clearing runs again when the app starts. If Android abruptly stops the process, temporary files can remain until that cleanup or removal of the app’s data. Clearing the Companion does not delete original photos from your photo library or copies held by another app.
In an ordinary web browser: the reading, question and photograph are held for the current page and cleared when you leave or clear the Companion. The session cookie can last up to eight hours; clearing the session removes it from that browser. Your cream or dark appearance choice may remain in local browser storage until you clear it. Android’s Clear action clears that appearance preference as well.
On the application server: the current reading handler processes confirmed choices to return a response; it does not create a saved-reading history or a personal account database. IP-based rate-limit counters are held temporarily in server memory. Reading limits use one-minute windows. Free-session start limits and failed legacy-login limits use fifteen-minute windows. These counters are per server instance and are not a guaranteed global abuse limit. Expired entries are removed when later requests trigger cleanup, or when the server instance ends, so those windows are not guaranteed deletion deadlines.
Hosting records: local clearing does not erase requests already processed by Cloudflare or any operational or security records retained by the hosting provider. Retention of those records depends on the applicable service configuration, security needs and provider terms. We do not promise that every hosting record is deleted when you leave the app or after a rate-limit window.
Cloudflare also provides aggregate service metrics, including request counts, errors and processing durations. Its Pages Functions metrics can be inspected for up to three months. This is an aggregate-metrics period, not a promised retention or deletion period for individual request logs, IP addresses or session information.
Support correspondence: emails are retained as needed to address your enquiry and any applicable operational or legal obligations. Contact us about access or deletion rather than assuming that clearing the app also clears email correspondence.
Your choices
You can skip the photo step, choose cards manually and leave the question blank. A reading requires sending your confirmed card and spread choices to the server. You can stop before submitting, stop narration, or use Clear to clear the current local session.
This version has no personal account to delete. You can remove local app data through Android settings, uninstall the app, or clear the Companion’s site data in your browser. These actions do not remove your original photographs or provider-held records.
This privacy page has no JavaScript, advertising, embedded media, third-party assets or cookie-setting code. Loading it still creates a normal request to our hosting provider. Your existing Companion session cookie is restricted to the separate /companion/ path.
Support, access and deletion requests
For app support, privacy questions, or a request to access, correct or delete personal information within our control, contact:
Jason Byron - Creatrix
news@thecreatrixprophecy.com
Describe your request and, if relevant, approximately when you used the service. We may ask for reasonable information to verify the request. Because there is no personal account or saved-reading history, we may not be able to locate a particular reading. We will explain what information we control and what can be acted on; requests involving a separate provider may need to be directed to that provider. Applicable legal retention requirements may limit deletion.
We will update this page if the Companion’s data practices change. The date above identifies this version.