✦SIBILA

✦ DISCRETION ✦

Privacy Policy

1. Who is the controller

Sibila, trading as Comupp Web, is operated by Rafael Vieira Stromdahl, CNPJ 16.873.347/0001-89, the controller of personal data processed in the app under Brazil's General Data Protection Law (LGPD). Channel for privacy matters and for exercising your rights: sibila@asibila.app.

2. Data we process

Account: when you sign in with Google we receive your name and email; we do not ask for or store a password, phone number or address. Readings: deck, spread, cards drawn, the question you write (if any), language and date. Astrology: if you enter date, time and place of birth, we keep them to calculate your natal chart, horoscope and transits. Preferences and usage: language, notifications, daily and monthly usage counts, history and conversations with Sibila. Age: your declaration that you are 18 or over and, if confirmation is needed, only the minimum data for that purpose. Crisis situations: when the support feature is triggered, we keep the message that triggered it, the date and the account, for safety and team review. Payment: Stripe processes card or Pix data; we only receive the confirmation, the plan and subscription identifiers. Browsing: technical data (such as IP, handled in pseudonymized form to limit abuse) and, if you accept cookies, usage metrics.

3. Purposes and legal bases

Providing the service and generating readings (contract performance); keeping your account, history and usage limits (contract performance); billing for plans and credits (contract performance and legal obligation); confirming age and protecting users in crisis situations (legitimate interest and protection of life); sending service emails such as the card of the day (legitimate interest, with an opt-out at any time) and notices about changes; preventing fraud and abuse (legitimate interest); measuring and improving the app with analytics and marketing cookies (consent); using readings anonymously to improve Sibila (only if you allow it in preferences).

4. Artificial intelligence

To generate the interpretation we send AI providers your question, the cards, the language, your first name (when signed in), a summary of previous readings and, if you have a saved chart, the calculated astral positions and the day's transits. We do not send your email, surname or the date, time and place of birth. The current providers are Alibaba Cloud (Qwen), DeepSeek and Google (Gemini). Please do not include health data or third parties' data in your questions if you do not want to share it.

5. Who we share with

Processors that provide services to us: Supabase (database, São Paulo region), Cloudflare (hosting and security), Stripe (payments), Resend (email delivery), Google (sign-in and analytics) and Meta (ad measurement, only with your consent). We do not sell your data. We may disclose data when required by law or court order, including the reports to authorities described in the Terms of Use.

6. International transfers

Some processors handle data outside Brazil (for example the AI providers, Stripe, Google and Cloudflare). We rely on contractual clauses and security measures consistent with the LGPD.

7. How long we keep it

We keep your data while your account exists. When you delete a reading or your account from the dashboard, the content is permanently erased after a 48-hour period; technical copies and security logs may be kept as long as needed for legal obligations and defense in proceedings. Tax-related payment data follows statutory retention periods.

8. Your rights

You may at any time: confirm that we process your data, access it, correct it, request anonymization, blocking or deletion, request portability, know whom we share it with and withdraw consent. Much of this is in the dashboard (delete reading, delete account, email and data-use preferences). For the rest, write to sibila@asibila.app. You may also complain to Brazil's data protection authority (ANPD).

9. People under 18

Sibila is intended for people aged 18 or over and does not intentionally collect data from minors. Data used to check age serves only that purpose. If we find that an account belongs to someone under 18, it will be suspended and, once the age is confirmed, closed, and the data handled according to the law. If you are responsible for a minor who uses Sibila, write to sibila@asibila.app.

10. Cookies

We use essential cookies (language and session) and, only with your consent, measurement and marketing cookies (Google Tag Manager, Google Analytics and Meta). You can change your choice at any time via the “Cookies” link in the footer.

11. Emails

If you have an account, we may send service emails such as the card of the day. Every email has a link to stop receiving them, and you can also turn them off in the dashboard.

12. Security

We use encrypted connections, access control and key segregation. No system is completely immune to failures; if a relevant incident occurs, we will notify you and the ANPD as required by law.

13. Changes

This policy may be updated. Relevant changes will be announced in the app or by email. Last updated: October 14, 2026.