Privacy Policy

1. Who we are

Divina is operated by Brooke Builds Stuff LLC, a New York limited liability company based in Brooklyn, New York ("Divina," "we," "us"). This policy covers the Divina iOS app and divinaapp.com. Questions about it go to support@divinaapp.com.

2. What we collect

Account information. When you create an account with Apple or Google sign-in we receive your name and email address from that provider; if you sign up with an email address instead, we ask for your first name and, optionally, your last name. Practitioners you hire see only your first name and last initial. If you answer the optional personalization questions (traditions, practices, what you're seeking) or give us your birth date, we store those answers to shape what you see.

Requests, orders, and messages. When you commission a service we store your request text, order history, in-app messages with your practitioner, and any photos delivered as part of the work.

Daily readings. Your card pulls, streaks, and reading history. Without an account, readings are tied to a random identifier generated on your device; if you later sign in, your readings attach to your account so they follow you across devices.

Purchases. Payments on the web are processed by Stripe; in-app purchases are processed by Apple. Card details go directly to those processors under their own security and compliance programs. We receive transaction records — what was bought, when, and the receipt needed to deliver it.

How you use Divina. The pages you view and some of what you do on them, including what you search for in the shop. Section 5 describes exactly what this covers.

Referrals. Your referral code, the friends who join from your invite, and, if you enter it on an invite page, your email address. Section 6 describes exactly what this covers.

Support and technical basics. Emails you send us, and standard technical logs (such as IP address and device type) generated by operating the service.

3. How we use it

To run Divina: delivering readings, connecting you with the practitioner you hire, completing orders, sending transactional email (order updates, receipts), providing support, and keeping the platform safe. Safety includes automated screening of requests, listings, and messages against our Acceptable Use Policy — this screening uses an AI processor and flags content for human review; it does not build profiles of you. We also use information as needed to prevent fraud and abuse and to meet legal obligations. Your birth date, if you give us one, is used only to personalize astrology features such as chart-based readings and timing — it is optional, and you can skip it. Usage data (section 5) is used to understand what people come to Divina looking for, to improve search and which offerings and practitioners we bring on, to find where things break or people get stuck (for example, a step in checkout), and to measure whether a change or a new feature actually helps.

Notifications. On iPhone, if you allow notifications, we send push notifications about your orders, your messages, and your account (such as a referral reward you've earned). Any other push notification, including reminders about an unfinished order, counts as promotional. Promotional push notifications, which we call News from Divina, are sent only if you agree to them in the app; when you turn on notifications in the app, we tell you that this includes News from Divina before you agree. You can turn News from Divina off any time in the app under You → Notifications; order updates keep coming.

4. Your intentions

What you write in a request is personal, and we treat it that way. Request text is visible to the practitioner you hire and to our safety screening. It is not used for advertising, not shared with data brokers, and not sold — to anyone, ever. Practitioners agree to confidentiality obligations for the requests they receive.

Second-card readings.When you draw a second omen card and type what it's for, we send what you typed, along with the card you drew, to Anthropic, our AI processor. They use it only to check it against our safety rules and to write that card's short reading for you. We save what you typed and the reading in your omen history so you can read them again, and we delete them when you delete your account. Leave the box empty and nothing is sent.

5. Usage data

We record how Divina is used ourselves, in our own database. It is not sent to ad networks or data brokers, and it is not sold.

Page views, in the app and on the website: which page, when, the offering and practitioner if it's an offering page, whether it was the iPhone app, a phone browser, or a desktop browser, and your country (worked out from your connection by our hosting provider; the IP address itself isn't stored with the view).

What you do on the website: the label of a button or link you tap and where the link goes, which form you submit (never what you typed into it), whether you saw, tapped, or dismissed the "get the app" banner, daily card draws, the steps you reach in checkout, the kind of payment method you chose and Stripe's success or error code (never card details or Stripe's messages), and, when we're testing a change, which version you were shown.

Searches on the website: once you've finished typing (not every keystroke), what you searched for, how many offerings and practitioners it found, and which result you opened and where it sat in the list. Before a search is sent, anything that looks like an email address or phone number is removed, and the rest is lowercased and shortened to 80 characters. Please don't put other personal details in the search box.

Each record carries a random visitor identifier — on the website, a first-party cookie that lasts a year; in the app, an identifier generated on your device — and your account, if you're signed in. When you sign in on a browser, that browser's identifier is linked to your account, so what you did there before signing in counts as yours.

divinaapp.com also uses Vercel Web Analytics, run by our hosting provider, which counts visits in aggregate. We keep usage data while it's useful for these purposes; we haven't set a fixed deletion period yet.

6. Referrals

If you invite a friend to Divina, or join from a friend's invite, we keep a small record of it so each of you gets your omen pulls.

Your referral code. When you ask for your invite link, we make a code from the first name on your account, in capitals (for example, BROOKE), adding a number if another account already has it. The code is part of your link (divinaapp.com/r/BROOKE), so anyone you share it with sees it.

What a friend sees about you. A friend who opens your link sees your first name: on the invite page, in the app, and in the email we send them if they ask for one.

What you see about friends who join. For each friend who joins from your link, you see the first letter of their name, the date they joined, and whether they've drawn their first card (that's when your pulls are added, and we tell you by notification and email). You never see a friend's full name, email address, readings, or purchases.

Your email, if you enter it on an invite page. On an iPhone, the invite page asks for your email address so the gift can find your account after you get the app. We store that email with the code you used and send you an email about the gift. When you create an account with the same email, we match the two and record which account claimed it. To stop one inbox being flooded with these emails, we also keep a short-lived counter tied to the address. We delete invite-page emails one year after they're entered, whether or not they were used. If you'd like yours deleted sooner, email us and we will.

The referral record. We keep who invited whom, how the invite arrived (a link, a typed code, an invite-page email, or a web sign-up), when, and when each side's pulls were added, along with any note we make if we limit an account's referrals. We use it to add pulls, to show you your invites, and to spot and stop abuse of the program, such as self-referrals or duplicate accounts.

Deleting your account deletes your referral code, your referral records, and any invite-page entry made with your account's email or claimed by your account. We keep an internal record of actions we take against abuse of the program, such as a denied reward or a referral ban, for as long as we need it for safety and fraud prevention. Pulls already added to the other person's account stay theirs.

7. Who we share with

Practitioners you hire see your request and the name on your account, so they can perform the work.

Updates from a practitioner, if you ask for them. You can choose to get updates from a practitioner, after you rate an order with them or from their page. Divina sends them on the practitioner's behalf. Your email address is never shared with them, and you can stop at any time from the email or from their page.

Service providers that operate parts of Divina under contract: Supabase (database and authentication), Vercel (hosting), Stripe (web payments), Apple (in-app purchases and sign-in), Google (sign-in), Brevo (transactional email, and practitioner updates you've asked for), and Anthropic (automated content-safety screening, and writing the short reading on a second omen card when you ask for one). Each receives only what its role requires.

Legal. We disclose information if required by law or to protect the safety of our users, the public, or Divina.

We do not sell personal information and we do not share it for targeted advertising.

8. Retention and deletion

We keep your information while your account is active. Delete your account in the app or by emailing support@divinaapp.com and we remove your personal information, keeping only what we're required to retain (such as transaction records for tax and accounting) or need for safety and fraud prevention, for as long as those purposes require.

Deleting your account deletes the usage events recorded under it, including those from browsers you signed in on, and the link between those browsers and your account. Page views are not currently deleted with your account: they keep the internal account number they were recorded with, which no longer leads to a name or email once your account is gone. If you'd like those removed too, email us and we will.

9. Your choices and rights

You can access, correct, export, or delete your personal information by emailing support@divinaapp.com. Depending on where you live (including the EU/EEA, UK, and California), you may have additional rights under local privacy law — the same email is how you exercise them. We respond to verified requests within the timelines the law requires, and we don't treat you differently for exercising your rights.

10. Age

Divina accounts and purchases are for adults 18 and over. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, email us and we will delete it.

11. Security

Information moves between your device and our servers over encrypted connections, is stored with access controls, and payment details are handled end to end by Stripe and Apple under their own security programs. No system is perfectly secure, so we also keep what we collect to what running Divina requires.

12. Changes

When this policy changes we'll update the version and effective date here, and for material changes we'll tell you in the app or by email. Questions any time: support@divinaapp.com.