PRIVACY POLICY
Last updated: 6 September 2026
Who is responsible for your data
The data controller is SOLYSIA ENERGY S.L.U. ("Raynebow"), Son Prohens, Primera Volta, 110, 07200 Felanitx (Illes Balears), CIF B16610438. For any privacy matter, contact us at rayne@raynebowreading.com.
What data we collect
- Account data: your email address; and, if you sign in with Google, your name and basic profile information from Google.
- Membership data: your plan, its renewal date, and how many readings you have used. Card details are handled by our payment provider and are never stored by us.
- Reading data: the cards drawn, the spread used, the date, and the written interpretation produced. Where Rayne prepares a reading for you personally, your name and, if you asked us to send it, your email address.
- View counts: when a reading is shared by link, we record how many times it has been opened and when it was last opened — and nothing else. Not who opened it, not where from, not on what device. A share link can be forwarded, so we could not tell you who a viewer was, and we choose not to try.
- Launch interest: if you ask to be told when memberships open, your email address and which plan you were interested in. Nothing else, and we use it for that one message.
- Session notes. If you have a live reading with Rayne and agree to it being recorded, the audio is transcribed and Rayne keeps written notes from it. The audio itself is never stored — see How long we keep it. The notes are the most sensitive information we hold and are treated accordingly.
- Birth data, where you choose to provide it for astrological features: your date of birth, and optionally your time and place of birth.
- Technical data: limited information necessary to operate the service securely, such as connection data and timestamps.
Special categories of data
People sometimes discuss health, relationships, bereavement, or beliefs during a reading. Where that happens, the resulting recording or notes may contain special category data under Article 9 GDPR. We process it only on the basis of your explicit consent. Rayne will ask before any session is recorded and will record the fact that you agreed. You may decline, and you may withdraw consent at any time, in which case the notes from that session are deleted — see Your rights.
We ask that you avoid entering sensitive details about other people where it is not necessary.
How your readings are made
Readings in the app are written by an artificial intelligence system, trained on Rayne's own writing. When Rayne reads live, it is her. Both are stated clearly wherever a reading is offered, and you should know which one you are receiving.
To write a reading, we send data to Anthropic, which runs the model. What we send depends on the reading:
- For a card reading, the cards you drew and the spread they were drawn in.
- For your birth chart readings — the natal reading, the Love and Career readings, the plain-language notes on them, and the day read against your chart — your full chart placements: the positions of the planets at your birth and, where you gave a birth time, the houses and angles too.
- Where you recorded a session, the transcript is sent to be tidied into notes.
Anthropic processes this on our behalf under a data processing agreement and does not use it to train models.
This is profiling: we use your birth data to shape what you're shown. It has no legal effect on you and doesn't affect your access to anything. If you'd rather a person looked at something, email rayne@raynebowreading.com and Rayne will. Where we rely on our legitimate interests to personalise what you see, you can object at any time under Article 21 GDPR.
Why we use it and our legal basis
- To create and manage your account — performance of a contract.
- To produce, store, and deliver your readings — performance of a contract.
- To take payment and manage your membership — performance of a contract.
- To record, transcribe, and write up a live session — your explicit consent.
- To send you sign-in links and essential service messages — performance of a contract.
- To send you optional updates or a daily reading reminder — your consent, withdrawable at any time.
- To tell you when memberships open, if you asked — your consent, withdrawable at any time.
- To keep the platform secure and prevent fraud or abuse — our legitimate interest.
- To comply with legal obligations, including tax and accounting — legal obligation.
We do not use your data for advertising and we do not sell your data.
What is public
Nothing is public by default. If you or Rayne create a share link for a reading, anyone holding that link can view the cards and the written reading. A share link never exposes session recordings, transcripts, or Rayne's notes, and never exposes your email address. Do not forward a share link to anyone you do not want to read it.
Who processes data on our behalf
We use named service providers who act as data processors under contract:
| Who | What they do | Where | Safeguard |
|---|---|---|---|
| Supabase | Database, accounts, and file storage | EU (Frankfurt) | Data stays in the EEA |
| Vercel | Website hosting and delivery | EU regions configured; US parent company | SCCs and/or, where certified, the EU-US Data Privacy Framework |
| Postmark | The emails we send you — sign-in links, and your readings, including the reading text and its PDF when you or Rayne send one | US | SCCs and/or, where certified, the EU-US Data Privacy Framework |
| Anthropic | Writes your readings, as described above | US | Standard Contractual Clauses under their DPA |
| OpenAI | Transcribes session recordings, only where you consented to recording | US | Standard Contractual Clauses under their DPA |
| Stripe | Payment processing. Stripe acts as an independent controller for its own purposes; see Stripe's privacy policy | Ireland / US | SCCs and/or, where certified, the EU-US Data Privacy Framework |
| Only if you choose to sign in with Google | US | SCCs and/or, where certified, the EU-US Data Privacy Framework |
Birthplace search runs on our own database, hosted with the rest of your data in the EU — no external geocoding service sees where you were born.
International transfers
Your account, your readings, and your birth data are stored in the European Union. Some processing crosses it: Anthropic (US) receives your cards and chart placements to write readings; OpenAI (US) receives session audio for transcription, only where you consented to recording; Postmark (US) handles every email we send, including reading text and attached PDFs; and Vercel's parent company is in the US. Each transfer is protected by the European Commission's Standard Contractual Clauses and/or, where the recipient is certified, the EU-US Data Privacy Framework.
How long we keep it
- Account data: for as long as your account is active.
- Readings: saved readings are kept until you ask us to delete them — including, on readings Rayne prepared personally, the name she saved them under. We do not delete them on a schedule, deliberately: a reading is something people return to, sometimes years later, and your share link keeps working for as long as you want it to. Ask, and we delete.
- Session recordings: we never store them. Audio is held in memory only for as long as it takes to transcribe, then discarded. It is not written to our servers, our database, or our file storage at any point. Our transcription provider does not retain it either. Rayne's written notes from the session are kept for as long as your account is active, so she can refer back if you read together again, and you may ask for them to be deleted at any time.
- Session notes can be deleted separately, at any time. If you ask, we delete Rayne's notes from your session and the record of your consent to recording, while the reading itself and its share link remain yours. This deletion is immediate and cannot be undone.
- Payment and invoice records: retained for the period required by Spanish tax law, currently six years.
If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to comply with legal obligations or resolve disputes.
Children
Raynebow is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Your rights
You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent at any time. Erasure includes your saved readings: ask, and we delete them — the reading, its share link, and the name on it — keeping only what tax law obliges us to keep about payments. Withdrawing consent to a recorded session deletes the notes and the consent record as described above.
To exercise these rights, contact rayne@raynebowreading.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Cookies
See our Cookie Policy for details on the cookies we use.
Security
We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and database-level rules that prevent session notes from ever being served through a share link.
Changes
We may update this policy. We will post the updated version here with a revised "last updated" date and, where the changes are significant, notify you.