Settings
Privacy Notice
Last updated: 17 October 2026
Controller and contact
FIGLISH LTD is the data controller for personal data processed to provide Işık. Contact figlish@mail.com for privacy questions or to exercise your rights. Stripe separately processes payment information under its own privacy notice.
Data and purposes
Account data includes email, account identifier and a name supplied by your sign-in provider, used for sign-in, security and greetings. Your wishes, gratitude notes, mood, energy, goals, zodiac and language preferences, day logs, meditation records, saved readings, favourites and AI chats are processed to provide features and sync your account across devices. Usage events and voice-message reservations enforce allowances. Subscription identifiers, status and billing periods manage Premium access. Support messages are used to answer your requests.
Photos, AI and microphone
Prompts, relevant recent chat context, selected cards, preferences and coffee photos may be sent to AI providers through Lovable to produce the requested output. Coffee photos are resized and are not saved in your reading history; generated readings are saved. AI and hosting providers may process requests under their own retention terms. Microphone recognition depends on your browser and may use its speech provider; we cannot promise that recognition stays on-device. Recognised text is sent as a chat message. Device speech and generated speech use the selected text. Avoid uploading sensitive personal data or images you do not have permission to share.
Devices, notifications and technical data
With permission, push endpoint identifiers and encryption keys, timezone, reminder times, preferences and delivery status enable notifications. Hosting and error-reporting services may process IP addresses, device/browser information and diagnostic errors for security and reliability. We do not sell your personal data or use your journal entries for advertising.
Legal bases
Account, content, AI and subscription processing is necessary to perform our contract with you. Security, diagnostics and responding to support rely on legitimate interests in operating a reliable service. Optional microphone, photo access and notifications depend on your consent or device permission, which you may withdraw. Accounting and legally required disclosures rely on legal obligations.
Sharing and international transfers
Recipients include Lovable Cloud hosting, AI and operational service providers; Stripe for sales, payments, subscription management, tax compliance and invoicing; professional legal or accounting advisers where needed; and authorities when legally required. We do not receive full card details. Processing may take place outside the UK/EEA; where required, transfers must use adequacy decisions, Standard Contractual Clauses or equivalent lawful safeguards. Contact us for details of safeguards relevant to your data.
Retention and deletion
Account content is retained while your account is active unless removed through available controls; there is no automatic expiry for saved chats or readings. Account deletion removes app-held content through the deletion process; cancel a renewing subscription first. Security, support, billing and legal records may be kept only as long as needed for their purpose or legal duties, then deleted or anonymised. Provider systems and backups follow their own retention schedules and are not necessarily erased immediately. Local records made before sign-in remain on that device until cleared.
Your rights and security
Where applicable, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw consent without affecting earlier lawful processing. Email figlish@mail.com; we aim to respond within one month, with any legally permitted extension explained. You may complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority. We use appropriate technical and organisational safeguards, including encrypted transport and owner-scoped access controls; no system is completely risk-free.
Advertising measurement
We may use Google cookies to measure whether a Google Ads campaign brought you to a Premium membership. That measurement sends your visit to the ad page, device/browser information and the membership-started event to Google so ad budget can be directed to people who actually subscribe. The Google tag loads for permitted visits; Google may attribute eligible ad interactions to membership events, but not every visit is attributable to an ad; your account content, journal entries and AI chats are never sent to ad measurement. In required regions (EEA, UK, Switzerland, Quebec) measurement turns on only with your consent, which you can withdraw from the 'Cookie settings' link on the page; without consent or with unresolved location, measurement stays blocked; an explicit refusal applies everywhere. Country-only location means all Canadian visitors are asked, including those outside Quebec. A random visitor reference, choice timestamp, notice version and previous decisions are retained in browser storage. Membership events use a one-way transformed billing-period identifier rather than an account ID.
Cookies and browser storage
Essential cookies or browser storage support sign-in, language, settings and local records. You can manage or clear them in browser settings; doing so may sign you out or remove unsynced records. Advertising measurement cookies are non-essential and require separate consent where required by law.
FIGLISH LTD · figlish@mail.com
← Back to Işık