Privacy Policy

Who we are

Karmori is provided by DREAMEC STUDIOS LTD (“Dreamec”, “we”, “us”), a company registered in England and Wales with company number 17304431. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the controller of the personal information described in this policy.

Contact us about privacy at studio@dreamec.com.

In short

• Your chart, birth details, connections, check-ins, reflections and Guardian chats are kept in your browser on your device. We do not receive them for ordinary readings.
• Your Karmori account holds your email address and an optional name.
• The Guardian sends information to an AI provider only when you choose to ask an AI question.
• If you subscribe to a paid plan, Stripe takes the payment. We never see or store your full card number.
• We count anonymous visits without cookies, device storage, IP addresses or account IDs.
• We do not sell personal information and we do not use it for advertising.

Information kept on your device

Your name, birth date, birth time, birthplace, chart, connections and their birth details, check-ins, reflections, answers to “This is you” questions, saved dates and your Guardian chats are stored in your browser’s local storage. Karmori calculates ordinary readings in your browser. This information does not sync to our servers or between your devices.

You control this information: use Export my space to keep a copy and Clear device data to remove it, both in Settings. Anyone with access to your browser or an exported backup may be able to read it.

If you add someone else as a connection, please only add their birth details with their permission. Those details stay on your device.

Your account

To keep your chart and open the full app you create a free account. Sign-in is provided by Netlify Identity, which stores your email address, an optional name and your password in protected form. If you choose Google sign-in, Google shares your basic profile and email address with the sign-in service.

Sign-in uses two essential cookies, nf_jwt and nf_refresh, which keep you signed in for up to 30 days and are removed when you sign out. Karmori uses no advertising or analytics cookies.

We send account emails, such as email confirmation and password reset, through our email delivery provider. Creating an account does not subscribe you to marketing emails.

Our server keeps Guardian account, access and usage records linked to your account so we can check access, apply allowances and control costs.

Paid plans

If you subscribe, payment is handled by Stripe, which collects your card or other payment details, your email address and your billing address. Stripe uses your address to work out tax. We receive and keep a link between your account and your Stripe customer record, and your subscription status, price and renewal dates, so we can unlock your plan. We do not receive your full card number.

Stripe also uses payment information to prevent fraud and meet its own legal duties, as an independent controller under the Stripe Privacy Policy.

When you ask Guardian AI

Before an AI question is sent, Karmori asks for your permission. If you do not give it, nothing is sent to the AI provider.

When you ask, our server receives your question, recent conversation and your birth date, birth time and time-zone region so it can calculate your chart context. Your profile name and birthplace text are not included. Raw birth details are used for that calculation and are not saved in our Guardian database.

OpenAI, through Netlify’s AI gateway, receives your question, up to eight recent messages and the calculated chart context, but not your profile name or raw birth details. Anything you type can reach the AI provider, so please avoid sharing private information you do not want to share. OpenAI processes this information under its own terms.

Guided answers written by Karmori do not use the AI provider.

Anonymous visit counts

To understand whether Karmori is useful, we count steps such as opening the welcome page, viewing the reveals, creating an account, opening Daily and asking The Guardian. Each count records only the step, the day and a general source such as Instagram, Google or “direct”.

These counts use no cookies, store nothing on your device and do not record your IP address, account, name, email or birth details. If your browser sends a “Do Not Track” or Global Privacy Control signal, Karmori does not count your visit.

Website delivery and voice

Netlify hosts Karmori and receives technical information such as your IP address, browser type and the pages requested, which is used to deliver the site and keep it secure. Ordinary page requests do not include your birth details.

Microphone input and spoken replies start only when you choose those controls. Your browser’s speech service may process audio or spoken text under its own policies.

Why we use information

Where UK or EU data protection law applies, we rely on these legal bases:

• Providing the service you ask for (contract): creating and securing your account, sending account emails, answering Guardian questions and providing a paid plan you subscribe to.
• Your consent: sending an AI question after you give permission. You can stop at any time by not sending AI questions.
• Our legitimate interests: keeping Karmori secure, preventing abuse, controlling AI costs, handling billing questions and payment disputes, and understanding anonymous usage so we can improve the app. These uses are limited and do not override your rights.
• Legal obligations: where the law requires us to keep or disclose information, such as payment records for tax and accounting.

Who receives information

We use these service providers to run Karmori. They process information on our behalf or under their own terms as described above:

• Netlify: hosting, sign-in, our database and the AI gateway.
• OpenAI: AI answers for Guardian questions you choose to send.
• Resend: delivery of account emails.
• Stripe: payments, receipts and subscription management, if you subscribe.
• Google: only if you choose Google sign-in.

Wherever you live, your information is processed in the United States and other countries where our providers operate. Where the law requires it, we rely on the transfer safeguards in their data processing terms, such as the UK International Data Transfer Addendum, Standard Contractual Clauses or the UK–US data bridge. We may also disclose information if required by law or to protect people’s safety.

How long we keep information

• Information on your device stays until you clear it.
• Your account stays until you delete it.
• Guardian AI answer text is kept for up to 72 hours to recover interrupted replies, then deleted by an hourly clean-up.
• Guardian usage and request records stay until you delete your account. After deletion we keep a minimal opaque identifier and deletion timestamps so old sessions cannot reopen your account.
• Anonymous visit counts contain no personal information.
• Subscription and payment records are kept for as long as tax and accounting law requires, usually six years, even after you delete your account.

Our providers may keep their own records for limited periods under their terms.

Your rights and choices

Depending on where you live, including under the data protection laws of the UK, the EU, Singapore, Malaysia, Indonesia and Thailand, you may have the right to access, correct, delete, restrict or object to the use of your personal information, to receive a copy of it, and to withdraw consent. You can use the tools in the app: Export my space, Clear device data and Delete Karmori account in your account settings. Step-by-step help is on the Help page.

You can also email studio@dreamec.com. We may need to confirm it is your account before acting on a request, and we reply within one month.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Guardian AI answers are reflections you choose to request.

If you are unhappy with how we handle your information, please tell us first. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority where you live.

Age limit

Karmori is for adults aged 18 or older. Please do not create an account if you are under 18. If we learn that an account belongs to someone under 18, we will delete it.

Changes and contact

We will update this policy when Karmori’s handling of information changes and show the new date above. If a change is significant, we will tell you in the app.

A detailed, plain-language description of where Karmori keeps each kind of information is on Your data in Karmori. Our Terms of Use explain the rules for using Karmori.

Questions: studio@dreamec.com.