Privacy Policy

Last updated: April 29, 2026

What we collect

Hexora collects the minimum required to operate:

• An anonymous device identifier — a random UUID generated on first launch and stored in your iOS Keychain. It is not linked to your Apple ID, name, email, phone number, or any other personal information. If the Keychain is unavailable, we fall back to Apple's identifierForVendor (IDFV), which is reset when you uninstall the app.
• Purchase receipts — when you start a Pro subscription (weekly, monthly, or yearly), Apple's StoreKit issues a transaction. We send the transaction identifier and your anonymous UUID to our Cloudflare Worker to verify your Pro status with Apple's App Store Server API. We do not see your payment method, billing address, or Apple ID. The Worker stores a short-lived entitlement cache in Cloudflare KV, keyed by your anonymous UUID and expiring with your subscription.
• The text of questions you submit for interpretation — sent over HTTPS to our Cloudflare Worker, which forwards it to Cloudflare Workers AI for inference. Cloudflare operates under its own privacy policy and, per its terms, does not retain inputs for model training. The interpretation is cached for up to 7 days keyed by a hash of the question and hexagram, then deleted. Question text itself is not persisted server-side beyond the duration of the inference call.

What we do not collect

• No name, email, phone number, or Apple ID
• No location data
• No microphone access, no voice recording, and no speech recognition
• No contacts, photos, or calendar access
• No advertising identifiers (IDFA)
• No third-party analytics or tracking SDKs
• No social network integrations

Local storage

All your readings, daily oracle pulls, and journal entries are stored on your iPhone using SwiftData. They are never uploaded to our server. If you delete the app, the local archive is removed by iOS along with the app.

Push notifications

Hexora does not send push notifications.

Third-party services

• Apple StoreKit — handles all purchases. See Apple's Privacy Policy.
• Cloudflare Workers + Workers AI — hosts our backend and runs the LLM that produces interpretations. Cloudflare Workers AI is the only LLM provider we use; there is no fallback provider. See Cloudflare's Privacy Policy.

Data retention

• Anonymous UUID — until you delete the app or wipe Keychain
• Subscription entitlement record — until your subscription expires
• Interpretation cache — 7 days
• Question text on the server — only for the duration of the LLM call (no persistent storage)

Children's privacy

Hexora is rated 4+ on the App Store but is intended for general audiences interested in reflection and journaling. We do not knowingly collect personal data from children.

Your rights

Because we do not link any data to a real-world identity, there is nothing to "log into" to view or delete. To erase your local data, delete the app. To erase your subscription record on our server, contact us with your transaction ID and we will remove it.

Changes to this policy

If we change this Privacy Policy, the "Last updated" date at the top will change and a notice will appear in the app. Continued use after a change constitutes acceptance.

Contact

Questions? Email elhanarinc@gmail.com.

Entertainment disclaimer

Hexora is for entertainment and personal reflection only. It is not medical, legal, psychological, or financial advice. Do not make important life decisions based on app interpretations.