Overview
Spread Light is a wellness, journaling, tarot, dream exploration, reflection, and personal growth platform. This Privacy Policy explains the information we collect, how it is used, and how account and subscription services are handled.
Information We Collect
We may collect account information such as your email address, authentication status, subscription status, and basic profile identifiers. We may also collect user-created content that you choose to save, including journal entries, dream entries, tarot or oracle readings, reflections, marked cards, Waterfall insights, First Light entries, and saved Riverkeeper or Lighthouse content.
Some temporary app information may be stored in your browser, such as draft or locally saved readings, interface preferences, and saved exploration state.
Accounts And Authentication
Account creation, login, logout, session persistence, and password reset are handled through Supabase. Supabase may process your email address, authentication tokens, account identifiers, and related security information so you can access your Riverkeeper Profile and saved content.
User-Created Content
When you choose to preserve content, Spread Light may store that content so you can return to it later. This may include journal writing, dream details, tarot and oracle readings, reflections, saved cards, Riverkeeper entries, Lighthouse entries, and Waterfall content. Saved content is connected to your account when you are signed in and eligible to preserve content.
Subscriptions And Payments
Spread Light uses Stripe for subscription billing. Payment information, including card numbers and payment method details, is handled by Stripe. Spread Light does not store your full payment card information on its own servers.
We may store subscription-related information such as Stripe customer ID, subscription ID, subscription status, plan name, price ID, and billing period information so we can determine whether Riverkeeper membership access is active.
Data Protection And Account Security
We use account authentication, access controls, and service providers such as Supabase and Stripe to help protect account and billing information. You are responsible for keeping your login credentials secure and for using a private device when writing sensitive reflections or journal entries.