Privacy Policy · v2.1 · May 2026
Privacy Policy
soulreport.app is operated by Xirophi Pty Ltd (ABN 47 697 534 393). This policy explains what personal data we collect, how we use it, and your rights. Last updated May 2026.
1. What we collect
When you request a Soul Report, we collect: your full name at birth, date of birth, birth time, birth location, and email address. If you choose to provide them, we also collect any optional context you share — your name in current use (if different from your birth name), what is alive for you right now, a pattern you have noticed repeating, and a transition you are inside. We also record your IP address, browser user agent, the timestamps at which you accepted each consent checkbox, and the version of this privacy policy you consented to.
2. How we use your data
Your personal data is used solely to generate your Soul Report. Your birth data is the source material for all astrological, numerological, and energetic calculations within the report. Your email address is used to deliver your report and permanent web portal link.
3. Internal access — a condition of service
By requesting a Soul Report, you expressly consent to your report and associated personal data being accessible to the directors and authorised personnel of Xirophi Pty Ltd for the following purposes: quality assurance, service improvement, practitioner oversight, research and development, and business administration. This internal access is a condition of receiving your report. No report is generated without this consent. Authorised personnel operate under strict confidentiality obligations.
4. Data security
Your data is stored securely in our database (Supabase/Postgres), hosted on infrastructure with industry-standard encryption at rest and in transit. We do not store payment card details — all payments are processed by Stripe. We implement access controls to limit who within our organisation can access your data.
5. Data sharing
Your personal data will never be sold, rented, or shared with any third party for marketing or commercial purposes. We use the following service providers to operate the platform: Supabase (database and storage), Vercel (hosting), Anthropic (AI generation), Stripe (payments). Each provider processes data solely to deliver their service and is bound by their own privacy commitments.
6. Retention
We retain your report data indefinitely so that your permanent web portal remains accessible. If you wish to have your data deleted, you may request this by contacting us. We will delete your personal data within 30 days of a verified deletion request, except where we are required by law to retain it.
7. Your rights
You have the right to: access a copy of the personal data we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent (note: this will result in termination of access to your report). To exercise any of these rights, contact us at the address below.
8. Contact
For all privacy-related enquiries: privacy@soulreport.app