Privacy Policy

Last updated: October 2026. Available in English only.

This policy describes what AtmaKoshe collects, why, and how it's handled. It reflects what the Service actually does today, not a generic template.

1. Account data

When you register, we store your email address and a salted hash of your password (never the password itself). We send a verification link to that email before your account can log in.

2. Profile and practice data

Your display name, time zone, language, and preferences; goals, practices, and reflections you record in your journey; and your Akashic Journey session state (your question and reflection) are stored so the Service can show them back to you. This data is private to your account.

3. Payments

Donations/contributions are processed entirely by Stripe. We never see or store your card number — Stripe handles that directly. We store only whether your account has been marked as paid, and (for verification) the Stripe checkout session reference.

4. Newsletter

If you subscribe for email alerts, we store the email address you provide for that purpose. You can ask us to remove it at any time (see Contact below).

5. Visit analytics

We log basic visit data for every page load: the page path, your IP address, your browser's user agent string, and an approximate country derived from your IP via a third-party geolocation lookup (ip-api.com). We use this only in aggregate, to understand traffic and distinguish automated/bot traffic from real visitors — not to individually track you across sessions.

6. Cookies

We use two functional cookies: one to keep you signed in, and one that records whether your account has unlocked access. Both are required for the Service to work and are not used for advertising or cross-site tracking.

7. Third parties

We share data with: Stripe (payment processing), and ip-api.com (IP-to-country lookups for visit analytics, receiving only your IP address, not your account identity). We do not sell your data.

8. Your choices

You can update your profile at any time from your account page. To request a copy of your data, ask us to correct it, or ask us to delete your account and associated data, contact us using the details below — account deletion isn't yet self-service, so we handle these requests manually.

9. Contact

Questions about this policy, or data requests, can be sent to the contact address listed on the Support page.