Privacy Policy
Felek turns a photo of your coffee cup into a short, for-entertainment reading. We built it to collect as little about you as possible. This policy explains what we handle, why, who helps us, and the choices you have. If anything here is unclear, email support@felek.app and we will explain it in plain words.
Who we are
Felek is operated by CVPK Digital Studio LLC, a New York limited liability company. For anything about your data, or to use any of the rights below, write to support@felek.app. For privacy purposes, we are the controller of your data.
What we collect
| Cup photo | The photo you take of your cup. Sent to an AI API provider for photo analysis. Felek deletes its stored cup photos within 30 days. Provider retention is described under AI processing. Please photograph the cup, not people. |
| Your email | Only if you create an optional account so readings sync across devices. We use a magic-link sign-in, so there is no password. |
| Name and question | Only if you choose a personalized reading. Used once to write that reading, then not reused. |
| Saved readings | If you save a reading, the text (and the cup photo for a short window) is stored in your journal until you delete it. |
| Device and diagnostic info | Basic app and device identifiers, app version, and crash data, used for fixing bugs, rate limiting, and security. |
| Product analytics | An opaque device ID and selected app events, such as a lesson completion or purchase outcome. These events can be linked to the same device. We do not record your screen or sessions. |
| Advertising data | Google AdMob may process your IP address, device and app identifiers, ad interactions and diagnostic data. An Android advertising identifier may be available. Nonpersonalized ads can still involve personal data. |
| Purchase info | When you buy a reading or an ad-free subscription, Apple or Google process the payment. RevenueCat validates store purchases and ad-free access. We keep transaction records and a protected purchase identity to restore paid access and prevent a reading purchase from being used twice. We never see your card details. |
Optional extra-reading records
Where optional extras are enabled, we keep pseudonymous reward challenges, ad reward transaction records, budget reservations and subscription quota records to verify rewards, prevent replay and honor funded credits. We send only an opaque reward challenge to AdMob for reward verification.
What we do not do
We never send cup photos, reading text, names or questions to AdMob or PostHog. We do not use facial recognition, and we do not collect biometric identifiers. A coffee-ground pattern is not a fingerprint or a faceprint, and we do not treat it as one. You do not need an account to get the core reading.
How we use your data, and our legal bases
If you are in the UK or EU, the GDPR asks us to name a legal basis for each use. Here they are:
| Generate your reading and run the app | To perform the service you asked for (contract). |
| Optional account and journal sync | To provide the account feature you chose (contract). |
| Fix crashes, prevent abuse, rate limit, keep the app secure | Our legitimate interest in a working, safe app. |
| Push notifications | Your consent, given through the system prompt. You can turn them off any time. |
| Product analytics | Our legitimate interest in understanding how the app is used and finding problems with its features. |
| Ads | Consent where required for advertising data processing. Nonpersonalized ad requests do not replace consent or your regional privacy choices. |
AI processing
To create a reading, Felek sends the content needed for each step to its AI API providers, currently Google (Gemini), OpenAI and Anthropic. Depending on the step, that content may include your cup photo or details you add. These providers process it on Felek's behalf for the reading service. Under the applicable API terms, they do not use this content to train their models, but may retain it for limited safety and abuse checks or legal obligations. The reading itself is written by AI, and we say so plainly in the app.
Who we share with
The app uses the following services. Advertising services may also process data under their own policies:
| Google, OpenAI, Anthropic | Process the photo or text needed for their part of the reading. |
| Supabase | Hosts our database and stored readings (servers in the EU, Paris). |
| Sentry | Crash and error diagnostics so we can fix problems. |
| PostHog | Receives the opaque device ID and selected app events for product analytics. No session recordings, cup photos, reading text, names or questions. |
| Google AdMob | Serves ads and handles advertising data described above. We request nonpersonalized ads only. |
| RevenueCat | Validates store purchases and subscription access using purchase records and the app's purchase identity. |
| Expo | Delivers push notifications if you turn them on. |
| Apple, Google | Process in-app purchases as the seller of record. |
We may also disclose data if the law requires it, or to protect the rights and safety of our users or the public.
Ads and privacy choices
Eligible app versions may show browsing banners on Home, Learn, lessons, Symbols, Tradition, the Practice landing page, Journal and free reading results. Paid and personal results, cup capture, the ritual, active practice, checkout and forms have no browsing ads.
Completion ads may follow an explicit continuation after a completed chapter, or Done after a newly delivered free reading. The first completed chapter and first successful free reading are exempt. Where free-reading completion ads are enabled, chapter and reading ads share limits of two per app session, six in any rolling 24 hours and at least ten minutes apart. Rewarded ads also start that ten-minute interval. Results and progress are saved first. Back, Share and Buy do not trigger a reading ad. If no ad is available, you can continue.
Purchased full and personal results have no ads. A successful reading purchase or newly delivered reading from an owned purchase pauses all ads for 30 minutes. An active monthly ad-free subscription removes all Felek ads. Full and personal readings are sold separately. Ads stay off while ad-free access or a purchase is pending or unknown.
Felek requests nonpersonalized ads only. This does not mean no personal data is processed. Required consent forms must finish and Google's consent service must allow ad requests before any ad is requested. The iOS app does not ask for Apple's App Tracking Transparency permission.
Use Ad privacy choices in Settings when offered to review or change your advertising choices. For regional advertising opt-out requests or other privacy questions, email support@felek.app.
Data retention
For an interrupted free reading, we keep a temporary result and random request ID for recovery. Recovery expires after 24 hours, and a scheduled job removes expired copies. This record contains no cup photo. Deleting your account removes it. Clearing your readings removes pending recovery from this installation.
Cup photos are deleted within 30 days from our storage. AI providers may retain submitted content under the API terms described above. Readings you save stay in your journal until you delete them or close your account. Your account and email stay until you delete your account. Diagnostic data is kept briefly and in aggregate. Records of purchases may be kept as long as needed for tax and accounting, though Apple and Google hold the bulk of that.
After account deletion, we retain transaction records and protected purchase identities for as long as needed to restore paid access and prevent a reading purchase from being used twice. The new billing records contain no account email, raw account, device or RevenueCat customer IDs, cup photos or saved reading text. They are pseudonymous, not anonymous. Account deletion removes account and email links, saved readings and cup photos. Recovering paid access does not restore a deleted account, readings or photos.
After account deletion, we keep only the minimum pseudonymous reward, transaction, budget and subscription quota records needed to prevent replay and settle outstanding obligations. Account links and extra-reading text are removed. We record deleted credit ownership so a late reward or generation result cannot restore it. These records do not restore deleted credits, readings or accounts.
International transfers
We are based in the United States. Our database sits in the EU (Paris), and some of our providers are in the United States. When data about people in the UK or EU moves across borders, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework. If you use Felek from outside the United States, you understand your data may be processed in the United States and other countries.
Your rights and choices
Wherever you live, you can:
- See what we hold about you.
- Correct it.
- Delete a saved reading or your account from Settings in the app or by emailing us. Purchase recovery records are retained as described above. See Delete account.
- Ask for a copy of your data to take elsewhere.
- Object to a particular use, or withdraw consent (for example, turn off notifications).
Deleting your Felek account or the app does not cancel an Apple or Google subscription. To cancel, open the App Store or Google Play subscription settings for the store account that bought it.
To make a request, email support@felek.app. We respond within the time the law allows (usually about 30 to 45 days), at no charge for reasonable requests, and we will not treat you differently for asking.
California privacy (CCPA and CPRA)
If you are a California resident, you have the rights above, plus the right to opt out of the sale or sharing of your personal information and to limit the use of sensitive personal information. Some advertising data disclosures may count as sale or sharing under regional privacy laws. Use Ad privacy choices in Settings when offered, or email us to exercise these rights. You may use an authorized agent to make a request.
We do not use sensitive personal information to infer characteristics about you. The categories we collect are identifiers (such as email and device identifiers), visual information (your cup photo), internet activity (app usage and ad interactions), content you submit (a name or question for a personalized reading), and commercial information (your purchases). We use them for the purposes described in this policy, including readings, product analytics and ads.
Europe and the UK (GDPR)
The controller is CVPK Digital Studio LLC, reachable at support@felek.app. Our legal bases are listed above. You have the rights to access, rectification, erasure, restriction, portability, and objection, and you can withdraw consent at any time. Providing your data is needed to deliver the reading you ask for; the account is optional. If you think we have handled your data badly, you can complain to your local data protection authority (in the UK, the Information Commissioner's Office).
Children
Felek is not directed at children under 13, and you must be at least 13 to use it. We do not knowingly collect data from children under 13. If we learn that we have, we delete it. If you are a parent and believe your child has used Felek, email us and we will help.
Security
We keep data in transit encrypted, limit who can reach it, and collect as little as we can in the first place. No app or service can promise perfect security, but we work to keep yours safe and to fix problems quickly.
Changes
We may update this policy. When we do, we post the new version here with a fresh date. If a change is significant, we will try to flag it in the app.
Contact
Questions about your data? Email support@felek.app.
CVPK Digital Studio LLC · felek.app