Privacy Policy

Who We Are

OnaNuru is operated by OnaNuru (trading name). If you have any questions about this privacy policy or how we handle your data, please contact us at [email protected].

What Data We Collect

We collect the following information when you use OnaNuru:

• ·Birth data — date, time and place of birth. This is used to calculate your astrological, numerological and other tradition-based readings. We treat this as sensitive personal data.
• ·Full name — used for numerology calculations.
• ·Email address — if you create an account, used for authentication and notifications.
• ·Questionnaire responses — psychological self-assessment answers used to personalise your Inner Blueprint. These may include sensitive information about your personal history and childhood experiences, all of which are optional.
• ·Connected people data — birth data for people you choose to add. By adding someone you confirm you have their consent to store their information.
• ·Payment information — processed securely by Stripe. We never store your card details.

How We Use Your Data

We use your data solely to provide the OnaNuru service:

• ·To calculate and display your readings across all supported traditions
• ·To generate your AI Deep Reading when purchased
• ·To send timing notifications and batch release alerts you have opted into
• ·To process payments and manage your subscription

We do not sell your data, share it with advertisers, or use it for any purpose other than providing this service.

Sensitive Personal Data

Some information you provide — particularly questionnaire responses about childhood experiences, mental and emotional patterns, and personal history — may constitute sensitive personal data under UK GDPR. We process this data on the basis of your explicit consent, given when you choose to complete those sections. You may request deletion of this data at any time.

The Adverse Childhood Experiences (ACE) questionnaire section is entirely optional and clearly marked as such. Responses are stored only if you choose to answer and are never shared with any third party.

Data Storage and Security

Your data is stored securely using Supabase, hosted in the EU (West Ireland region). We use industry-standard security practices including row-level security policies to ensure your data is only accessible to you.

Readings and questionnaire results are stored indefinitely so you can revisit them. If your account becomes dormant for an extended period, we will contact you before taking any action on your data.

Your Rights

Under UK GDPR you have the right to:

• ·Access the personal data we hold about you
• ·Correct inaccurate data
• ·Request deletion of your data
• ·Object to processing or withdraw consent
• ·Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

Third Party Services

• ·Supabase — database and authentication
• ·Vercel — hosting and deployment
• ·Stripe — payment processing
• ·Anthropic — AI generation for Deep Readings
• ·Nominatim / OpenStreetMap — location search

Each of these services has their own privacy policy. We select providers who meet appropriate data protection standards.

Changes to This Policy

We may update this policy as the service evolves. We will notify you of significant changes via email if you have an account. Continued use of the service after changes constitutes acceptance of the updated policy.