When you use the optional Oracle feature, the text of your question or intention is transmitted to an AI provider, which may be a third party, to generate the oracle interpretation (section 06). We use analytics and similar technologies to understand how the Service is used and to protect it from abuse (sections 07 and 09). We do not sell your personal data.
The Psibyl web application is operated by Psibyl (“Psibyl”, “we”, “us”, “our”), which is the controller of the personal data described in this policy. This policy explains what we collect, why, where it is held, how long we keep it, and what you can do about it. It applies to the Psibyl web application and to nothing else.
This policy sits alongside our Terms of Service, which govern your use of the Service.
We collect the information the Service needs in order to work, to improve, and to stay secure. In general terms, that falls into the following categories:
Emails we send. We send service emails — such as confirming your account, resetting your password, and notices about your account or these documents — as part of providing the Service. We also send occasional update emails about the Service, its features and fixes, and stories readers have chosen to share. Update emails may be tailored to how you use the Service. Depending on where you are, you receive these when you join or we ask you first. Every update email includes a link to unsubscribe.
We derive aggregate and de-identified data from use of the Service — for example the distribution of draw outcomes, statistical distributions across readings, entropy consumption, which layouts and corpora are chosen, error rates, and performance measurements. This data describes the system in aggregate and does not identify any individual user.
We use aggregate and de-identified data for any internal business purpose, without restriction — including but not limited to improving the signal amplifier engine, evaluating oracle quality, capacity planning, product and commercial decisions, scientific and statistical research into quantum entropy, consciousness, and divination, and publishing aggregate findings.
We conduct research using data from the Service. Research is carried out on aggregate or de-identified data. Where research would involve the content of your readings in a form that identifies you, we do so only as applicable law permits and obtain your consent where consent is required; you may contact us at any time to object to your data being used for research. We do not attempt to re-identify de-identified data, and we require the same of anyone with whom we share it.
When you take a reading, the intention you write is held in your session and, for a recorded reading, stored with it. Entropy for the draw comes from quantum random number sources, which receive no user data. The statistical analysis and the draw are computed on our servers. Your intention, the symbols drawn, and the interpretive framework for the corpus are then sent to an AI provider (section 06) to generate the oracle interpretation, which is returned to you and stored with the reading.
Because your intention text is sent to an AI provider, do not enter information in an intention field that you would not want transmitted to a third party — including sensitive personal, medical, financial, or identifying details about yourself or anyone else.
Oracle interpretations are generated by large language models, which may be operated by third-party providers or by Psibyl's own AI infrastructure. We may use any one or more of them, for any reading, at any time, at our discretion and without notice. Providers receive what is needed to generate the interpretation and may retain data under their own policies.
We use cookies and similar technologies that are strictly necessary for the Service to work — such as keeping you signed in, holding your session, and limiting abuse. Our network provider may also set strictly necessary security cookies. Strictly necessary cookies do not require consent.
We use analytics and tag management technologies — cookies, pixels, click tracking, SDKs, and similar identifiers — in the Service and in the emails we send, to understand which features are used, how the Service performs, where users arrive from, how to improve the product, and to help keep it secure. This may involve third-party analytics and tag management providers acting on our behalf.
Where applicable law requires consent before non-essential cookies or similar technologies are used, we obtain consent first, and where it requires that the choice can be changed later, you can change it. Where applicable law requires us to recognize opt-out preference signals such as Global Privacy Control, we honor them. You can also block or delete cookies through your browser, though parts of the Service may not work if strictly necessary cookies are blocked.
Your browser's local storage holds interface preferences on your device. You can clear it through your browser's site-data controls.
Where the Service offers paid subscriptions or reading credits, payments are processed by third-party payment and billing providers. We do not receive or store your full payment card details. We receive and retain the transaction record — what was purchased, when, the amount, the status of the payment, and the credits applied to your account — together with any billing information you provide.
We retain transaction and billing records for as long as we need them for accounting, tax, audit, and fraud-prevention purposes, which will typically be longer than we retain other account data, and we may retain them after your account is deleted where the law requires it.
To protect the Service, its users, and the free tier from abuse, we collect and analyze technical signals from your browser, device, and connection. These signals are used to detect and prevent fraud, the creation of multiple accounts to circumvent limits, automated access, and attacks against the Service. We rely on our legitimate interest in keeping the Service secure and available, and obtain consent where applicable law requires it.
We rely on service providers in the following roles:
We may add, remove, or replace providers as the Service develops.
Account and reading data are stored in the United States. Traffic in transit may be routed through data centers outside your country, and AI providers process prompts on their own infrastructure.
If you are located outside the United States — in the United Kingdom, the European Economic Area, or elsewhere — your data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction. Where such transfers require a legal safeguard, we rely on the mechanisms operated by our service providers, such as standard contractual clauses. By using Psibyl, you understand that your data is processed in the United States.
We use technical and organizational measures we consider appropriate to protect personal data.
No method of transmission over the internet, and no method of electronic storage, is completely secure. While we work to protect your personal data, we cannot guarantee its absolute security, and you provide it at your own risk.
Personnel operating the system can access stored data for maintenance, troubleshooting, security, and responding to support requests. We may disclose data where legally compelled to do so, or where necessary to protect the rights or safety of any person.
Subpoenas, warrants, court orders, and preservation requests go to “legal”, here at this particular domain (psibyl.com), with LEGAL PROCESS in the subject line, and should include the account email address or reading identifier the request concerns.
For users covered by the UK GDPR or EU GDPR, we process personal data on these bases:
Depending on where you live, data protection law may give you some or all of the following rights. We will honor them to the extent applicable law requires:
California residents. Under the CCPA/CPRA you have the right to know what personal information we collect and why, to request deletion, to request correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising those rights. We do not sell personal information for money. Some analytics and tag management technologies may constitute “sharing” for cross-context behavioral advertising as the CCPA defines it; where they do, we provide a “Do Not Sell or Share My Personal Information” control and recognize opt-out preference signals such as Global Privacy Control, as the law requires.
You can delete readings, export your data, and delete your account yourself, in the app. Deleting your account is permanent and cannot be undone, so export anything you want to keep first. To stop update emails, use the unsubscribe link in any update email.
Any other request — or any of the above, if you cannot do it in the app — goes to “requests”, here at this particular domain (psibyl.com), from the address on your account. We respond within the timeframes applicable law sets. We may need to verify your identity before acting on a request, and where the law permits we may decline or charge a reasonable fee for requests that are manifestly unfounded, repetitive, or excessive.
Psibyl is for adults. You must be 18 or older to hold an account, and we do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we will delete it and its data. If you believe a minor has created an account, contact “requests”, here at this particular domain (psibyl.com).
If a breach affecting your personal data occurs, we will notify affected users and the relevant authorities as and when applicable law requires.
We may update this policy from time to time to reflect changes in the Service, our providers, or the law. The revised policy takes effect when posted here, and the “Last updated” date reflects the most recent revision. Where a change is material and applicable law requires it, we will give you additional notice — by email or through the Service — and will obtain your consent where consent is required. Your continued use of the Service after a revision takes effect means you accept it.
Privacy questions, data requests, and account deletion requests go to “requests”, here at this particular domain (psibyl.com).
Subpoenas, warrants, court orders, and preservation requests go to “legal”, here at this particular domain (psibyl.com), as section 12 describes.
Your choice about optional analytics cookies, for this device. Change it.
Psibyl is in beta. It is under active development, and you are using it while it is being built. Along the way you may experience:
During beta there are no performance promises.
Beta is generous by design: every feature is open to every member. When beta is over, some features will become part of paid plans, and beta early access members will be offered 0G status, which can mean substantial discounts on paid plans.
We appreciate your feedback: what works, what doesn't, and what you would like to see. Tell us any time with FEEDBACK inside Psibyl.