Privacy & Terms

Who we are

The Wee Company (“we”, “us”), the developer of Inner Cipher. You can reach us about anything on this page at hello@theweecompany.com.au.

What stays on your phone and never leaves it

When you set up Inner Cipher you enter your name, the name on your birth certificate, and your date, time and place of birth. All of that stays on your device. It is stored locally and, if you have iCloud enabled, in your own private iCloud storage, which we cannot read. In particular:

• Your birth-certificate name never leaves your device. The app uses it to compute two numbers (Expression and Soul Urge). Only those numbers are ever sent. The name itself is not transmitted, and this is enforced by an automated test in our codebase.
• Your date, time and place of birth are not sent. The app computes your chart on the device and sends only the results: a sun sign, a life-path number, and similar.
• The name you are greeted by is filled in on your device, everywhere except a tarot order. Where a generated reading addresses you by name, our server writes a placeholder and your phone substitutes your name locally, so the name never reaches us. A tarot reading is written by a person rather than generated, and your first name goes with the order. See below.

What we send to our server, and why

To write your readings we send a set of derived facts. These are numbers and category labels, not personal details. For example: a life-path number, a sun sign, a moon phase, which day of a repeating sixty-day cycle today falls on. We send these because the readings are generated from them. We do not send, and do not hold, your email address, your birth date, your birth time, your birthplace, your device identifier, your location, or your contacts. Your name is not sent either, with one exception: a tarot order, which is written by a person and addressed to you.

These facts are not unique to you. Readings are cached and shared: everyone whose relevant facts match receives the same text. That is a deliberate design choice and it is why the system needs no idea who you are.

One exception, and we want to be straightforward about it. Some facts we send are precise enough that, combined, they could narrow down a birth date. We treat them as personal information and protect them accordingly, even though they never carry your name.

If you ask for a tarot reading

This is the one part of Inner Cipher where a person reads what you send, and it works differently from everything above. It is worth reading properly.

• Your question is free text and a human being reads it. If you order a reading that takes a question, whatever you type is stored and read by the person who writes your reading. That is the whole point of the product. We do not filter it, and we cannot know what is in it. Please do not put anything in there you would not want a person to read, including other people’s names or details.
• Your chart travels with the order, as the same derived facts described above, so the cards can be read against it.
• Your first name travels with it too, and this is the one place in Inner Cipher where your name reaches us. It is the name you are greeted by in the app, not the name on your birth certificate, and it is there so that a reading written by hand can be addressed to you. It is stored on the order, seen by the person who writes it, and used for nothing else: not for marketing, not for analytics, and never shared. If you would rather it did not travel, clear your name in the app before ordering.
• Your order is stored, and unlike everything else on this page it is yours. It holds the spread, your question, those derived facts, your first name, what it cost, the cards that were pulled, any notes the person writing it made about individual cards, and the reading written back to you. It is filed under a random identifier your phone generates, not under your name.
• The cards are pulled by hand, when your reading is written, not when you order. Nobody, including us, knows what they are until then.
• We keep it indefinitely, because you paid for it and it should still be there when you look.

If you add other people

You can add people you know to compare charts. The same rules apply: their birth details stay on your phone, only derived facts are sent, and their name is substituted locally. This holds for tarot as well: a reading about you and someone else sends two sets of derived facts and only your first name. The other person is never named to us, because they are not the one who agreed to this policy. You are responsible for having their permission before entering someone else’s details.

If you connect with someone by code

Inner Cipher also lets two people connect directly, by one of you generating a short code and the other typing it in. This is the only feature where information about you is shown to another person, so it is worth setting out carefully.

What our server holds, and what it can read. Each side’s chart information is encrypted on the phone that sends it, and only the encrypted result is uploaded. The key is derived from the code itself, which we never receive. We receive a different, one-way scrambling of the same code, enough to match the two of you up and not enough to open either package. Our server cannot read what it is passing between you. It is deleted once collected, and in any case expires after seven days; an unused code simply stops working.

What the other person receives. They get the same kind of derived chart facts described above: sun sign, moon sign, life-path number, the sexagenary pillars, and so on, plus the name you are known by in the app.

We want to be straight about what that implies. We do not send your birthplace, your coordinates, or your birth-certificate name, and no screen in the app shows a connected person’s birth date. But some of those facts are precise enough that somebody determined could work out the year you were born, and roughly the time of day. We would rather say so plainly than let you assume otherwise: connect with people you are content to share a chart with. Removing a connection removes it from your own device.

Subscriptions and purchases

Subscriptions are handled by Apple. We never see your payment details. When you subscribe, your phone sends our server a receipt that Apple has digitally signed, so we can confirm you are entitled to the features you paid for. We check the signature and, for some features, keep a one-way hash of the subscription identifier for up to a day, to limit how often the same subscription can request expensive readings. We cannot reverse that hash into your Apple ID, and we do not store your Apple ID.

Credits, and the one identifier we do keep

Tarot readings are paid for with credits, which are bought the same way: Apple handles the payment and we never see your card. A credit balance has to belong to somebody, and this app has no accounts. So your phone generates a random identifier, once, and keeps it in your own private iCloud storage so that your credits survive changing phones or reinstalling the app. It is a random number. It is not derived from you, your device, or your Apple ID, and it tells us nothing about who you are.

Your phone sets that identifier on each purchase; Apple returns it to us inside the signed receipt, which is how we know which balance to credit without you ever having to tell us who you are. We store only a one-way hash of it, and your credit balance and any tarot orders are filed under that hash.

Apple also notifies our server directly when a purchase is made or refunded, so that a refund takes the credits back. That notification carries no more about you than the receipt does.

Who else processes your information

• Google Cloud: runs our server and database, in Sydney, Australia.
• Anthropic: their Claude models write the reading text from the facts above, in the United States.
• Google (Firebase App Check): confirms requests come from a genuine copy of the app, not a bot.
• Apple: subscriptions, and your own iCloud storage.

Anthropic processes the facts we send in order to generate your reading. Your name is not among them. Tarot readings do not go to Anthropic at all: those are pulled and written by a person, which is why they are the one place your first name is sent.

Some of these providers are outside Australia, so your information may be processed overseas. We only use providers with appropriate protections in place.

How long we keep things

Readings are cached so that the same text can be served again without being regenerated:

• Daily and monthly readings are kept for a matter of weeks and then deleted automatically.
• Reference readings, meaning explanations of terms and the tradition-specific passages, are kept indefinitely, because they describe a chart shape rather than a person and do not change.

Because these are keyed on facts rather than on you, deleting “your” copy is not meaningful: there is no copy that belongs to you specifically.

Tarot orders and credit balances are the exception, and they are different in kind. They are filed under the hashed identifier described above rather than under a set of facts, which means each one belongs to one person. We keep them indefinitely and on purpose: a credit you have bought and not spent is money, and a reading somebody wrote for you should still be there whenever you go back to it. Neither expires.

Invite codes are the short-lived exception. The encrypted package each side uploads when you connect with someone is deleted as soon as the other person collects it, and expires automatically after seven days whether or not anyone does. We could not read it in the first place.

Tarot orders and credit balances are the only things we hold that could be deleted on request.

What we do not do

• No advertising: there is none in the app, and no advertising software in it. We removed both deliberately.
• No tracking: the app does not ask for permission to track you, because it has nothing to track you with. Our privacy manifest declares no tracking and no tracking domains.
• No analytics: we do not measure your behaviour in the app.
• No location access: searching for your birthplace is a text search. The app never asks for your location and cannot read it.
• One thing declared to Apple, and only one: our App Store privacy manifest declares a single collected data type, your name, linked to you, for app functionality and never for tracking, which exists because a tarot order carries your first name so the person writing your reading can address it to you. It declares no tracking and no tracking domains at all.

Notifications

If you allow them, Inner Cipher sends you one reminder each morning, and tells you when a tarot reading you ordered has come back. Both are scheduled on your own device. We do not send push notifications from a server, we hold no device tokens, and we do not know whether you opened one: the app notices your reading has arrived the next time you open it, and tells you then. You can turn them off in iOS Settings.

Your rights

Under Australian privacy law, and under the GDPR if you are in the UK or EU, you have rights to access, correct and delete your personal information. We have to be honest about a limitation, and about its one exception. Inner Cipher has no accounts. For almost everything we hold, we have no way to connect it to you: readings are keyed on facts rather than on people, and nothing identifies a copy as yours. The exception is tarot. Your credit balance and your tarot orders are filed under the hashed random identifier your phone generates. You hold that identifier; we cannot work out who you are from it, but you can prove which records are yours by giving it to us. If you want it, ask us and we will tell you where to find it in the app. What this means in practice:

• To delete everything about you: delete the app. Your birth details and most readings live on your device and in your own iCloud. Removing the app and its iCloud data removes them.
• To delete your tarot orders, or to get a copy of them, write to hello@theweecompany.com.au with your identifier. Deleting them also destroys any unspent credits filed under it, and we will say so before we do it. That part is not reversible.
• To correct your details: edit them in the app.
• If you believe we hold something about you and want it removed, write to the same address and we will help as far as we are able.

If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or your local supervisory authority if you are in the UK or EU.

Children

Inner Cipher is not directed at children and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, contact us.

Security

Requests to our server must carry a token proving they come from a genuine copy of the app. Data is encrypted in transit. Our database is access-controlled and hosted in Australia. No system is perfectly secure, but the strongest protection here is structural: we hold very little. Outside a tarot order, none of it names you, and a tarot order holds a first name and nothing else that could identify you.

Changes to this policy

If we change this policy we will update the date at the top. If we ever begin collecting something materially different, we will tell you in the app before it takes effect.

What Inner Cipher is, and is not

Inner Cipher blends numerology, Western astrology and the sexagenary calendar into a daily reading written in plain language. It is for reflection and entertainment. Nothing in it is advice.

Specifically, readings are not medical, psychological, legal, financial or professional advice of any kind, and must not be relied on as a basis for any decision that matters. If you need advice, speak to someone qualified to give it. If you are struggling, please talk to a doctor or a crisis service in your country.

The traditions Inner Cipher draws on are not scientifically validated, and we make no claim that its readings predict anything.

Most readings are generated by software. The daily reading, the whole-life reading, the month ahead and everything else in the app is written by an AI model from facts computed from your birth details. No human writes or reviews one before you see it.

Tarot readings are the exception, and they are the opposite. A tarot reading is ordered, paid for with credits, and written personally by a person; nothing about it is generated. The cards are laid out by hand from a real deck at the time your reading is written, not by your phone, not by our server, and not when you order, so nobody, including us, knows what they are until then, and there is nothing to redraw. Everything in this section still applies to it: it is for reflection, it is not advice, and it predicts nothing.

Who can use it

You must be at least 13 years old. If you are under 18, you may only use Inner Cipher with the involvement of a parent or guardian.

Your details, and other people’s

You are responsible for the details you enter. If you add another person to compare charts, you must have their permission to enter their birth details. Do not enter anyone’s details without their agreement.

Connecting with someone. You can also connect with another Inner Cipher user by sending them a one-time code. When you both use it, each of you receives chart information about the other, and each of you can see it from then on. Two things follow, and you should be clear about both before you send a code:

• Only connect with people you are willing to share a chart with. What crosses is chart information, not your birth details as you typed them, but it is enough for someone determined to work out roughly when you were born. Our privacy policy sets out exactly what does and does not travel; read that section before you decide.
• A code is a secret while it lives. Anyone who has it can complete the connection, so send it to the person you mean and nobody else. It works once and expires after seven days.

Tarot readings and credits

Credits are a one-off purchase through Apple. They do not expire. A tarot reading costs several credits, and how many depends on how deep a reading you ask for. The price is the same for everyone: a subscription does not change what a reading costs, and buying credits while subscribed does not change what they will buy later. When you order, the credits are spent immediately. The cards are not drawn then; they are laid out by hand when your reading is written. One person writes every reading, so:

• We may stop taking orders, and the app says so before you order rather than after. When orders are closed, nothing is taken.
• If nobody picks your order up within 48 hours, your credits are returned automatically. That is a promise, not a courtesy. It applies to an order nobody has started; once someone has started writing it, the 48 hours no longer applies.
• A reading normally comes back within a day or two. That is what we aim for, not a guarantee, and the 48-hour return above is what backs it.

Anything you type as a question is read by a person. Do not include other people’s personal details, and do not include anything you would not want read.

Delivered readings stay in the app, filed under a random identifier your phone keeps in your own iCloud, so they follow you to a new phone. If you turn iCloud off or delete that storage, we have no other way to find them.

Credits themselves have no cash value and cannot be exchanged for money or transferred to anyone else. Refunds are Apple’s.

Subscriptions

Inner Cipher offers a free tier and paid subscriptions. Initiate and Adept are auto-renewing subscriptions, available monthly or yearly. Prices are shown in the app in your local currency before you buy. (You may see these called “Premium” and “Pro” on Apple’s own purchase and subscription-management screens. Those are the older internal names for the same two plans, and we are in the process of updating them with Apple.) The following applies to all subscriptions:

• Payment is charged to your Apple ID account at confirmation of purchase.
• Subscriptions renew automatically unless auto-renew is turned off at least 24 hours before the end of the current period.
• Your account is charged for renewal within 24 hours before the end of the current period, at the price of the plan you chose.
• You can manage and cancel your subscription in your Apple ID account settings after purchase. Cancelling stops the next renewal; it does not refund the period you are in.
• No free trial is offered. If we ever add one, any unused portion is forfeited when you buy a subscription.

Moving between plans. Adept sits above Initiate. Moving up takes effect immediately and Apple credits the unused part of your current term. Moving down takes effect at your next renewal.

Refunds are handled by Apple, not by us, under Apple’s Media Services terms. We cannot issue refunds for App Store purchases. To request one, use Apple’s “Report a Problem” page.

What a subscription buys. Access to features while it is active. It does not buy ownership of any reading, and it does not guarantee a particular volume of content, a particular reading, or uninterrupted availability.

Acceptable use

Please do not:

• try to break, overload, or work around the app’s security or its limits;
• automate access to our servers, or use the app other than through the app;
• attempt to extract, resell, or redistribute readings at scale;
• reverse-engineer the app except where the law expressly permits it;
• use Inner Cipher to harass anyone, or to make claims about another person based on their chart without their consent;
• send, in a tarot question, another person’s personal details, anything unlawful, or anything intended to abuse or distress the person reading it.

We may decline a tarot order and return the credits. One person writes these, and that person is not obliged to write anything. If we decline one, the credits go back. We may suspend access if you do these things.

Content

Your details are yours. We claim no ownership of the birth details you enter. The app, its writing and its design are ours. You may read, screenshot and share individual readings for your own personal, non-commercial use, including posting one to social media. You may not republish readings in bulk, use them to train a model, or present them as your own work or as a competing product. A tarot reading written for you is yours to keep and to share, on the same terms. Your question is yours, and we use it only to write your reading.

Availability

We will try to keep Inner Cipher working, but we do not promise it will always be available or error-free. Readings depend on services we do not control, and those can fail. We may change, suspend or discontinue features, and we may stop offering the app entirely. If we discontinue a paid feature you have an active subscription to, you may be entitled to a refund of the unused portion, which, because Apple handles billing, you would request from Apple.

Liability

Nothing in these terms excludes rights you have under the Australian Consumer Law or other laws that cannot be excluded. In Australia, our goods and services come with guarantees that cannot be excluded, and you may be entitled to a replacement or refund for a major failure. Subject to that, and to the maximum extent the law allows:

• Inner Cipher is provided “as is”;
• we are not liable for any decision you make on the basis of a reading;
• we are not liable for indirect or consequential loss; and
• our total liability to you is limited to the amount you paid us in the twelve months before the claim.

Changes to these terms

We may update these terms. If we make a material change we will tell you in the app before it takes effect. Continuing to use Inner Cipher after that means you accept the change.

Ending this agreement

You can stop using Inner Cipher at any time by deleting it. We may end your access if you materially breach these terms.

Governing law

These terms are governed by the laws of Victoria, Australia, and you and we submit to the non-exclusive jurisdiction of its courts. This does not affect consumer rights you have where you live.