Privacy Policy

Who we are

OneHealth-Lab LLC operates SpiritualVita and VOTUM. This notice covers the website, companion app, account services and optional cloud backup. For privacy questions or requests, contact policy@spiritualvita.com.

Using VOTUM as a guest

Guest ritual results, reflections and optional profile details are saved on your phone. Bluetooth pairing credentials and connection details are held locally. The phone communicates directly with the charm for pairing, reading sync and collection transfers. Browsing online collections still sends requests to our content service.

Your account and email

When you register, we process your email address, a protected password hash, optional account name, preferences and session information to provide and secure your account. Registration and password recovery send a code through our transactional email provider. Codes expire after ten minutes and can be used once. We record the Terms of Use and Privacy Policy versions you accepted or acknowledged and when. The age confirmation is part of your agreement; registration does not require a birth date or identity document.

Bringing your guest library along

After registration or sign-in, the app copies the phone’s guest library into the account’s local library, retaining the original guest library. In versions offering account sync, these copied ritual results and reflections become eligible for upload when you allow account sync. Check the guest library before signing in on a shared phone.

Account sync — your choice

In app versions that offer account sync, a separate Account sync screen explains the change before automatic uploads begin, including when an existing account is restored after an upgrade. If you choose Allow account sync, VOTUM uploads ritual results and reflections to your account and automatically synchronizes changes while you use the app. Results can include their source charm serial, timestamps and interpretation. This includes guest records copied into your account. Reflections may contain sensitive personal information; consider what you write and upload.

The app records your choice, the disclosure version and its date on this phone for this account. An old backup setting or a previous sign-in is not treated as this choice. If you decline, the app retains a local copy of your current records and signs you out without uploading them. You can continue as a guest. Signing out later stops account sync on that phone; existing cloud records remain until deleted through the app or an account/data-deletion request. Other signed-in phones have their own choices.

Optional cloud backup

Account sync and optional backup are separate. Once you allow account sync, turning optional backup off does not stop synchronization of ritual results and reflections. Enabling optional backup additionally saves your profile (including an optional birthday or photo), preferences, download information and any previously saved favorites, and keeps recovery snapshots. It does not upload downloaded collection files or Bluetooth owner credentials and does not restore physical pairing authorization. Account device registry uploads are a separate user action. Earlier app versions without account sync upload their personal library only when optional backup is enabled.

Technical and security information

Our services process IP addresses, request metadata, session information and operational logs to deliver content, protect accounts and diagnose failures. Authentication send limits store hashed identifiers rather than raw recipient addresses or IP addresses in rate-limit records. Account records and email delivery still require your email address. Confirmation-code records store a hash, expiry and attempt information rather than the plaintext code. We do not add advertising trackers to the app or website.

The website launch list

If you join the optional website launch list, we store your email, selected interest, signup time, consent version and a hashed removal token. Cloudflare hosts the website and its launch-list database. The signup screen provides a private removal link. Browser sample readings are not submitted to our servers, and the website does not add analytics or advertising cookies. Joining the launch list is separate from accepting the app’s terms. Launch-list information is kept while you remain subscribed; using the removal link removes the active signup record.

Why we use information

We use information to deliver the services you request, synchronize your results and reflections when you allow account sync and maintain extra recovery copies when you choose optional backup, protect accounts, respond to requests and send requested launch-list updates. Where applicable law requires a legal basis, providing the account and selected backup service relies on our agreement with you; the account-sync addendum requires your separate in-app choice before its uploads begin; proportionate service security relies on legitimate interests; required disclosures or recordkeeping rely on legal obligations; and optional marketing relies on your separate choice where consent is required. Acknowledging the base notice does not itself enable account sync, optional backup or marketing and is not blanket consent to every kind of processing.

Service providers and international processing

The account service is hosted on Oracle Cloud Infrastructure in the United States, currently the San Jose region. Cloudflare provides website delivery, network security and launch-list storage, and Resend handles transactional email. These providers may process information in countries other than where you live. Information may be disclosed when required by applicable law or necessary to protect rights and security. Service availability remains subject to applicable international-transfer and local requirements; this notice does not promise that every country is supported.

Keeping information

Account and cloud-library information is kept while you use the account, until you remove it or delete the account, subject to information needed for a specific legal obligation or dispute. Legal acceptance versions are kept with the account. Session tokens stop authorizing access when revoked or expired. Expired security records become eligible for maintenance cleanup; removal may happen after expiry. Code challenges more than one day past expiry are pruned when further code requests are processed. Account-deletion receipt records become eligible for cleanup after thirty days. Expiry controls access even if an expired record has not yet been removed.

Logs and recovery backups

Network access logs normally rotate daily, with up to fifty-two retained rotations. Application operational logs are maintained for security and diagnostics and removed through operational maintenance. Private server recovery backups are retained while needed for recovery and may temporarily contain information already removed from the active service. They are access-restricted and separate from ordinary app use. Account deletion does not immediately erase every backup or copies on your other phones. Contact policy@spiritualvita.com for requests concerning retained information.

Your choices and rights

You can use the app without an account, edit or remove optional profile details, control optional backup, stop account sync by signing out, clear local data and request account deletion. Turning optional backup off leaves existing cloud copies in place and does not stop separately enabled account sync. Local information stays on a phone until removed through the app or device controls. Depending on applicable law, you may also request access, correction, deletion, a copy of information, restriction of processing or objection to processing, withdraw optional consent, or complain to your local data-protection authority. Send requests to policy@spiritualvita.com. We may need to verify that you control the account before acting on a request.

Adults and changes

Accounts and cloud backup are intended for people aged eighteen or older, and the account agreement includes this confirmation. If you believe a child has created an account, contact policy@spiritualvita.com so we can review the account and its information. We keep this notice available at this address and identify its version. When acknowledgement of a new version is required, the app asks you to review it.