Privacy Policy: The Hermetic Flight app

Effective date: October 14, 2026

Who we are

The Hermetic Flight app (“the app,” “we,” “us”) is a tarot learning and journaling companion made by Quigley Multimedia LLC. This policy explains what the app collects, where it goes, how long we keep it, and what you can do about it. It covers the app only. Our website, thehermeticflight.com, has its own privacy policy.

You can reach us at any time:

Quigley Multimedia LLC 202 N Lyle St # 166 Roy, Washington 98580 contact@thehermeticflight.com

The short version

The app is offered in the United States only for now.
Most of the app works on your phone. Recall games, your drafts and your settings stay on your device.
If you don’t sign in, your journal stays on your phone too. Readings you save are also copied to our cloud database under a random guest ID that isn’t linked to your name or email.
If you sign in, your journal and saved readings are kept in our cloud database so you can get them back on another phone.
Your writing goes to Anthropic, the company that makes the Claude AI models, only when you tap “Get feedback” or “Get follow-up” on something you wrote (older versions of the app also had an AI coach). This needs an account, and the app asks your permission once before anything is sent. Only that writing, its cards and, for a follow-up, the earlier feedback are sent, never your name, email or account ID.
Anthropic does not use that writing to train its models. It deletes it within 30 days, but may keep a request for up to 2 years if its safety systems flag it, or longer if the law requires (see “How Anthropic handles your writing”).
If you allow it, we use PostHog to count which parts of the app are used. It never receives anything you write.
We don’t sell your information, we don’t show ads, and we don’t use advertising trackers.
You can delete your account and your data from inside the app, or by asking us (see “Deleting your account and data”).

What we collect, feature by feature

Using the app without an account

You don’t need an account to learn, practice and journal. If you don’t sign in, the app creates a random guest ID on your phone the first time you use the app without signing in. The ID isn’t linked to your name or email. Your journal, Recall practice, drafts and settings are kept only on your phone. Readings you save are also kept in our cloud database under that guest ID (see “Readings and spreads”).

Creating an account

You can sign up with an email address and password, or with Sign in with Apple or Google.

Email sign-up: we store your email address and a scrambled (hashed) version of your password with our hosting provider, Supabase. We send you a confirmation email, delivered by an email service called Resend. Signing up does not add you to any marketing list.
Sign in with Apple: we receive the email address Apple gives us, which may be a private relay address, and your name the first time, if you choose to share it.
Sign in with Google: we receive your Google email address and basic profile details so we can sign you in.
Profile: we store a display name if you have one, and app preferences such as your experience level.

Your journal

Without an account, journal entries stay on your phone in the app’s private storage. We never receive them.
With an account, journal entries are stored in our cloud database and linked to your account, so they follow you to a new phone. With each entry we also store any AI feedback and follow-up feedback you asked for on it, and a note of which words in the entry are yours and which came from the app’s prompts or feedback. That note exists so the share feature shares only your own words.

Your journal is never sent to an AI service unless you tap “Get feedback” or “Get follow-up” on a piece of writing (see below).

Readings and spreads

When you lay out a spread, do a Digital Draw, practice a card or explore a card and save it, the cards, the spread, and any question you typed are saved on your phone. Saved readings are also kept in our cloud database, linked to your account or, if you’re not signed in, to your phone’s guest ID.

Recall practice

Recall games run entirely on your phone. Your progress, levels, streaks, story drafts, and up to 30 recent practice sessions (including your notes and stories) are kept in private storage on your phone. They are not uploaded and don’t move to a new phone. Older sessions are replaced as you complete new ones.

Voice dictation

If you dictate instead of typing, the app uses your phone’s built-in speech recognition, set to run on the device. Your voice recording is not sent to us. The text it produces is treated like anything you type. The app asks for microphone and speech-recognition permission before you use dictation for the first time.

The AI coach (older versions of the app)

Older versions of the app offered an AI coach that asked you questions about a card. In this version, “Reflect on something” and the reflection you start from “Explore a card” open a card deep dive instead (see “AI feedback on your writing”), and a new coaching session can’t be started. If an unfinished Recall coaching session from an older version is still on your phone, you can finish it, and our servers still accept coach requests from older versions of the app. The coach is available only when you’re signed in and have agreed to send your writing to Anthropic.

When a coaching session starts, we send Anthropic the card, whether it is upright or reversed, your experience-level and depth settings, and The Hermetic Flight’s guidebook text for that card, so the coach can ask its first question. Each time you answer, we send your answers so far and the coach’s earlier questions: at most three answers of up to 500 characters each.

AI feedback on your writing (“Get feedback”)

The app is built so you do the reading and the writing. AI feedback is optional, only appears when you ask for it, and responds to work you’ve already written.

The first time you ask for AI feedback, the app asks “Send your writing to Anthropic?” and explains what is sent. Nothing is sent unless you tap Agree. “Not now” sends nothing. You can withdraw your agreement at any time in Profile, under Privacy, with the “AI feedback on this phone” switch; after that, nothing is sent until you agree again.

Once you have agreed, when you tap “Get feedback,” we send Anthropic only what that feedback needs:

Card deep dive (from “Reflect on something” or “Explore a card”): the card, whether it is upright or reversed, and your three answers: what’s on your mind, what stands out to you in the card or its guidebook entry, and how that speaks to your situation.
Digital Draw reflection: your reflection text and the card or cards it is about.
Spread reflection: your writing for each position, the spread’s name, its positions, the cards and whether each is upright or reversed, and the spread’s question.
Recall “Build a Story”: your story, the question you wrote for it (if you wrote one), its three cards, and up to three of your notes about those cards.

With each request we also send The Hermetic Flight’s own guidebook text for those cards (for a deep dive, the card’s full guidebook entry), so the feedback is grounded in the deck.

Getting feedback later: if you saved a deep dive, a guided spread or a journal entry with Hermetic Flight cards attached without asking for feedback, you can ask for it later from your Journal. We send the same details listed above, taken from the saved entry.

Adding to a reflection and follow-up feedback: after you get feedback on a journal entry, you can add to your writing. Saving an addition sends nothing to Anthropic. If you then tap “Get follow-up,” we send Anthropic your original writing and its cards (the same details as the first request), the most recent feedback you received on that entry, and your newest addition. This means feedback the AI wrote earlier is sent back to Anthropic along with your writing.

The feedback you receive is saved with your writing: in the cloud with your journal entry if you’re signed in, or on your phone for Recall stories. Follow-up feedback is saved with the entry’s earlier feedback, and your additions are saved as part of the entry.

“Get feedback” and “Get follow-up” require an account. Each feedback request uses one AI review; your first follow-up on an entry may be free (see “AI reviews”).

Reporting an AI response

If you tap “Report this response” on AI feedback or a coach reply, we store the report in our cloud database with your account ID, which of the two it came from, the text of that response and any reason you add, so we can review it, and we delete it when you delete your account.

What we never send to Anthropic

For feedback, follow-ups and the older coach, we never send Anthropic your name, email address, account ID, guest ID or the ID of your journal entry. Our servers use those only to sign you in, apply daily limits and count reviews. Anything personal you choose to write in your reflection, story or question is sent as part of that writing, so leave out details you don’t want shared.

How Anthropic handles your writing

We use Anthropic’s commercial API. Under Anthropic’s published terms for it:

Anthropic does not use your writing, or the AI’s replies, to train its models.
Anthropic automatically deletes what we send and what it returns within 30 days.
If Anthropic’s automated safety systems flag a request as breaking its Usage Policy, Anthropic may keep that request and its reply for up to 2 years, and the safety scores for up to 7 years.
Anthropic may also keep data for longer when the law requires it.

We have not arranged “zero data retention” with Anthropic, so the 30-day period above applies. Sources: https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data and https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training

You can make a picture of a card or a reading to share. The image is made on your phone and handed to your phone’s share sheet. We don’t upload it and we can’t see where you send it. Sharing only happens when you choose to share. Once you share something, whoever receives it has their own copy under their own terms.

Analytics

The app uses PostHog, a product analytics service, to help us understand which parts of the app people use. Analytics are off until you allow them: the app asks once, after the welcome tour, and you can change your answer at any time in Profile, under Privacy. If you allow them, the app records a short list of events:

that the app was opened;
whether the welcome tour was finished or skipped, and at which step;
that a reading was completed, with the spread type and number of cards;
that a journal entry was created, with yes/no details (such as whether a card or mood was attached), a rough length range, and whether it was typed, dictated or both;
that an optional AI request failed, with an error code;
for Recall practice: that a session started or finished, each round’s score as numbers only, whether a miss note was written, whether story feedback was received, a rough session length, and your streak day or whether your streak was kept.

Each event carries a random ID for this install of the app. If you’re signed in, events are also linked to your account ID so we can count individual people. Analytics never includes anything you write, no card names in Recall events, no photos, and no email address. PostHog’s software also adds basic device details: the type of device, the screen size, and the app’s name and version. PostHog receives your phone’s internet address with each event, but our project is set to discard it, so PostHog does not store it or use it to work out your location. Our PostHog project is hosted in the United States.

Usage limits and abuse prevention

To keep AI costs fair and stop abuse, our servers record a small counter each time an AI feature is used: the date, the type of action, and your account ID or guest ID. They don’t record your writing.

To stop automated abuse, our servers also look at the internet address (IP address) a request comes from and limit how many AI requests can come from one network in an hour or a day. We don’t store the address itself, only a scrambled version made with a secret key, which our servers delete automatically after about a day (see “How long we keep things”).

Like most online services, our hosting provider keeps standard technical logs of requests (such as the time, internet address, device or browser type, the address requested, and error details) to keep the service running and secure. A journal search you run can appear in the address requested. On our current plan these logs are kept for 1 day. The sign-in system also keeps its own records of sign-ins, with the internet address and device or browser type used, for security.

AI reviews

“Get feedback” and “Get follow-up” use AI reviews. Your review balance is kept in our database as a simple running tab linked to your account: one line for each set of reviews added and one line for each review used. Each line says what it was for (for example, “beta,” the kind of feedback, or a free follow-up), but it never contains your writing. When a review is used on a journal entry, its line also holds that entry’s ID, so we can tell whether the entry’s first follow-up is free. A free follow-up is recorded as one review added and one used. These lines stay in your review history after you delete the entry, until you delete your account. During the beta, we add reviews by hand.

Reviews belong to the account they were added to. They can’t be transferred, and deleting your account permanently deletes your review balance and its history.

Purchases in the app are not available yet. When they are, they will be made through Apple’s App Store or Google Play. You pay Apple or Google directly, and we never receive your card number or other payment details. We will receive a record of each purchase (such as the product, the date and a transaction number). We will update this policy to describe exactly what we keep before purchases go live.

Companies that handle your information

We share only what each company needs to do its job for us.

Supabase hosts our database, sign-in system and the server functions that talk to Anthropic. It handles account details, signed-in journals, saved readings, reports, usage counters and review balances. Our Supabase project is hosted in the East US (North Virginia) region.
Anthropic runs the Claude AI models behind “Get feedback,” “Get follow-up” and the AI coach in older versions of the app. It receives only the writing, earlier feedback and card details described above, only when you’re signed in and have agreed, and only when you use those features. How long Anthropic keeps it is explained in “How Anthropic handles your writing” above.
PostHog provides product analytics (see “Analytics”). Our project is hosted in the United States.
Resend delivers account emails, such as sign-up confirmation.
Apple and Google handle Sign in with Apple or Google if you choose them and distribute the app. Apple also distributes test builds through TestFlight.

Supabase, Anthropic, PostHog and Resend each process this data on our behalf under a data processing agreement with us.

We do not sell your personal information or share it for advertising. We may disclose information if the law requires it, or to protect the safety of our users, the public or the service.

How long we keep things

Account, profile and signed-in journal entries, with the feedback and follow-ups saved on them: until you delete an entry or delete your account.
Signed-in saved readings: until you delete your account. The app has no way to delete a single saved reading yet.
Reports of AI responses: until you delete your account.
Review balance and history: until you delete your account.
Purchase records, once purchases exist: five years after the purchase, because Washington law requires businesses to keep tax records for five years. If you delete your account, the purchase record is kept for that period but is no longer linked to your app data.
Analytics events in PostHog: until you delete your account. When you delete your account, we also delete your analytics data within 30 days.
Guest saved readings on our servers: until you use “Delete my data” (or “Delete account” on the same phone), or until 12 months after that guest ID was last active, whichever comes first. A guest ID is active when it saves a reading or uses an AI feature. One exception: a reading linked to a journal entry is kept for as long as it stays linked.
Usage counters: deleted automatically once they are 90 days old.
Card-scan records (card scanning isn’t available in the app today): deleted automatically after 30 days, together with their usage counters.
Scrambled internet addresses used for abuse limits: deleted automatically every hour once they are more than 22 hours old.
Server request logs: 1 day on our current plan.
Account emails (such as sign-up confirmation) are kept in Resend’s delivery logs for 30 days.
Writing sent to Anthropic: deleted by Anthropic within 30 days; flagged requests up to 2 years (safety scores up to 7 years); longer where the law requires. See “How Anthropic handles your writing.” We don’t keep a separate copy of the request beyond the feedback saved with your writing.
Everything on your phone (guest journal, Recall practice, drafts, settings): until you delete it, use “Delete my data” or “Delete account,” or remove the app.

Deleting your account and data

You can delete your data inside the app, under Profile.

With an account: “Delete account” permanently deletes your account. That also deletes your profile, journal entries, saved readings, feedback, reports, usage counters, and review balance and history. When you delete your account, we also delete your analytics data within 30 days. If this phone also holds guest readings from before you signed up, those are deleted too. The app then clears its data from your phone.
Without an account: “Delete my data” deletes the saved readings and usage counters linked to your guest ID on our servers, and clears the app’s data from your phone, including your journal and Recall practice.

You can also ask us to delete your account without opening the app. Follow the steps at thehermeticflight.com/companion, or email contact@thehermeticflight.com and tell us the email address you signed up with. We will email a confirmation to the address on your account, including Sign in with Apple private-relay addresses, and we delete only after you confirm. An emailed request deletes:

your account and everything linked to it in our cloud database (profile, journal entries, saved readings, feedback, reports, usage counters, and review balance and history);
your analytics record and its events in PostHog.

We complete it within 30 days of your confirmation and reply when it’s done. An emailed request cannot reach two things:

data stored on your phone: use “Delete account” or “Delete my data” in the app, or remove the app;
readings a phone saved as a guest before you signed up, which are linked to that phone, not your email: use “Delete account” in the app.

Removing the app from your phone deletes only the data on your phone. It does not delete your account or anything on our servers, including guest data. Use “Delete account” or “Delete my data” first if you want both gone.

Your rights

Wherever you live, you can ask us to:

show you the personal information we hold about you, or send you a copy;
correct anything that’s wrong;
delete your information;
stop using it for a purpose you object to.

Email contact@thehermeticflight.com. We may need to confirm the request comes from you, and we’ll use that check only for that purpose. We’ll respond within the time the law that applies to you requires, and we won’t treat you differently for asking.

If you’re in California

You have the right to know what personal information we collect, use and disclose; to access it; to correct it; to delete it; and not to be discriminated against for using these rights. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We don’t use sensitive personal information to infer things about you. To make a request, email us at the address above. You may use an authorized agent.

Adults only

The app is for adults 18 and older. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a younger person has given us personal information, contact us and we will delete it.

The Hermetic Flight’s card art shows aerial performers in artistic poses that are often suggestive.

Security

The connection between the app and our servers is encrypted. Your sign-in details, guest journal, drafts and Recall practice are kept in the app’s private storage on your phone, which other apps can’t read. In our database, access rules limit your cloud data to your own account. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Changes to this policy

We’ll update this policy as the app changes and change the date at the top. If a change matters, for example a new feature that sends your information somewhere new, we’ll tell you in the app before it takes effect.

Governing law

This policy is governed by the laws of the State of Washington, USA.

Contact

Quigley Multimedia LLC 202 N Lyle St # 166 Roy, Washington 98580 contact@thehermeticflight.com