Privacy Policy
Data processed
Sigilla holds your email address, your Username, your Display Name, your date of birth and country, your Locale, and the records of your practice: readings, practice sessions, grimoire entries and the files you attach to them.
Your date of birth and your country are used only to check the minimum age and are shown on no screen. No real name, no precise location, no religion, no astrological sign and no photograph is required.
Lawful basis
The records of your practice reveal personal beliefs. They are handled on the basis of your explicit consent, given when the Account is created and withdrawable at any time.
The operation of the Account itself rests on the performance of the contract between you and the publisher.
Where the data lives
The data is hosted at OVH, in the European Union. Backups are encrypted before they leave the server and are kept at Cloudflare R2, also in the European Union.
Photos you attach to an entry are re-encoded on the server, which removes every detail they carry, location included. They are then encrypted by Sigilla before they leave the server and kept at Cloudflare R2, in the European Union. Only your account can request them. A photo removed from an entry is deleted within twenty-five hours.
OVH and Cloudflare are the only processors. No advertising network and no third-party analytics toolkit is present in the application.
Retention
Your data is kept for as long as your Account exists. After a deletion request the Account is deactivated for fourteen days, then purged from every module and from file storage. The encrypted backups of the database follow their own cycle — each daily backup is kept thirty days, and three monthly backups besides — so erased data may remain in them for up to about three months. An export archive you request is kept for seven days, then deleted.
Evidence that the terms were accepted is kept in anonymised form for the legal retention period, separate from your personal content.
Your rights
You may consult your data, obtain a complete copy of it and delete your Account, from inside the application and at no cost. The export contains all of your records.
You may also lodge a complaint with the supervisory authority of your country; in France that authority is the CNIL.
Audience measurement
Audience measurement is off by default. It is enabled only if you accept it, can be withdrawn at any time, contains no free text and uses no third-party service. Until you have answered the question the application asks you, the events it would count stay on your device alone — the name of the action, a few closed values and the instant, never your texts — and are sent only if you accept; if you refuse, they are deleted from the device. Events still on your device and not yet sent are deleted when you sign out or when your session ends. If you delete your account after accepting, the events waiting on the device are sent just before it is wiped, and are erased with the rest of your account. Events are kept for thirteen months.
Contact
To exercise your rights or ask a question, write to contact@sigilla-app.com.