Privacy and data

Written as behaviour, not promises. Where the app has a control for something, the paragraph says where it is.

WEAVEN stores your profile, chart, conversations and settings in your account; sends the AI provider only the current message, the selected profile's calculated chart, approved memories and recent turns, and only after your consent; deletes readings photos after processing unless you keep them; sets no advertising or analytics cookies; and lets you export or delete everything yourself from the Account screen.

Last updated 26 September 2026. Questions: hello@weavan.app.

Who is responsible

WEAVEN 天纹 is operated by Ejoshi Software Inc. This page describes the WEAVEN web application at weavan.app/app and this website.

What is collected

Data the app holds, by feature
DataWhen it is createdWhere you control it
Guest sessionWhen you start as a guest, an anonymous account is created for your browser. No email or phone is involved. Sign-in state is kept in the browser's local storage.Clearing site data ends the session; creating an account attaches the same data to it.
Account identityEmail address and password, or a Google sign-in, or a phone number with an SMS code.Account screen: sign in, sign out, create account from guest.
Birth profilesName or label, relationship, date (Gregorian or lunar), time or time range, birthplace, coordinates, time zone, optional gender, dominant hand, notes, preferred language.Profiles screen: edit or delete; deleting a profile deletes its charts.
Calculated chartsStored with the calculator name, version, method, input snapshot, warnings and confidence.Recalculate or delete with the profile.
Conversations and messagesYour messages, the replies, the mode used, model and provider names, token usage, latency and any safety flags.History drawer: rename, archive, delete.
Photos for palm or face readingsOnly after explicit consent. Checked for format, stripped of EXIF/XMP metadata, stored in a private bucket, processed once and deleted afterwards by default.Account → Images: default handling ("process once" or "save privately") and deletion of kept images.
MemoriesNothing is remembered automatically. Items you add, and only with the memory consent switched on.Account → Memory: add, edit, delete, clear all, switch off.
Saved readings, feedback, preferencesReadings you save; helpful/not-helpful votes with optional reason; language, appearance, reading perspective and reply-language settings.Account screen.
Usage countsDaily and per-minute message and image counts per plan, used to enforce limits.Shown on the Account screen.
Local browser dataPreferences, the consent record, the journal and sample-map progress from the older prototype, the guest reminder flag.Account → Export local data / Delete local data.

What is sent to the AI provider, and when

Replies are generated by a large language model from Anthropic through its commercial API. Nothing is sent before you tick two boxes on the consent sheet (18 or over; agreement to the processing). For each message the app sends: the message itself, a compact summary of the selected profile's calculated chart, memories you have approved, the recent turns of the current conversation within your plan's history limit, and, for palm or face readings, the verified photo. It does not send other profiles, other conversations, your email or phone, or your journal.

The provider's commercial terms state that API inputs and outputs are not used to train its models; see Anthropic's commercial terms. WEAVEN itself does not train models on your data. WEAVEN's interface names the assistant WEAVEN; if you ask which company's model is behind it, it answers truthfully.

Where data lives

Account data, profiles, charts, conversations, memories and photos are stored with Supabase (database, authentication and private file storage) in the United States (us-east-2 region). The web application is served by Railway. All traffic uses HTTPS. Database rows are protected by row-level security so that every query is scoped to the signed-in user, guests included; provider keys are held server-side and never reach the browser.

Retention

Your controls

Cookies, analytics and this website

The app keeps your sign-in and preferences in the browser's local storage, which is essential for it to work. Neither the website nor the app sets advertising cookies, uses third-party analytics or embeds social widgets. Links from this website into the app carry a short source label (for example "site-home-hero") so that the operator can count in its own server logs how many visits turn into app openings; the label contains nothing about you.

Safety and sensitive topics

If a message suggests you might be at risk, WEAVEN shows crisis resources first and stops the reading. Replies that would diagnose, predict a death, guarantee an outcome or infer personal traits from a photo are rewritten by a server-side validator. Birth details, relationships and personal questions are treated as sensitive information throughout.

Children

WEAVEN is for adults 18 and over. The consent sheet asks you to confirm this before the first message.

Changes

When the app's behaviour changes, this page changes with it and the date at the top is updated.