Qabalah Ltd. | Tree of Life Reader
Privacy Policy
Tree of Life Reader
Operated by Qabalah Ltd., Company Registration No. 12385548, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Last updated: 10 August 2026
1. Who we are and what this policy covers
This Privacy Policy explains how the Tree of Life Reader, operated by Qabalah Ltd. ("Qabalah Ltd.", "we", "us" or "our"), Company Registration 12385548, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, collects, uses, stores, shares and protects information when you use the Tree of Life Reader website or Android app.
The Tree of Life Reader provides personalised Tree of Life, astrology and Hermetic-oracle features, account access, Reader and Support Credits, saved Reader information, transactional emails and, on Android, Google Play purchases for Reader credit top-ups.
We aim to collect only the information reasonably necessary to provide, secure and support the service.
2. Information we collect and process
Account and sign-in information
When you use the Reader we may process your email address, account identifiers, authentication/session information, access status, entitlement information, Reader Credit balance and Support Credit balance. The Reader uses email-based access verification for normal customer sign-in.
Information you provide to Reader features
When you request a reading or use an interactive Reader feature, we process the information you choose to provide for that feature. This can include chart or profile details requested by the Reader, questions or prompts, and other information you deliberately submit to obtain the requested response.
Please avoid supplying personal information about another person unless you have an appropriate reason and permission to do so.
Google Play purchase information
On Android, eligible digital purchases are processed through Google Play Billing. Qabalah Ltd. does not receive or store your full payment-card details. Our billing service may process the Google Play purchase token and fingerprint of that token, product identifier, app/package identifier, purchase status and transaction-verification information required to verify, fulfil and prevent duplicate fulfilment of a purchase.
Support and communications
If you contact us for help, we may process your email address, the content of your support request and information reasonably necessary to investigate or respond to the issue.
Technical, security and service information
We may process limited technical and security information needed to operate the service, authenticate requests, diagnose errors, protect accounts, prevent duplicate purchase fulfilment and investigate misuse or fraud.
Personal Journal - local only
The Tree of Life Reader includes a personal Journal. Journal entries are stored locally in the browser or app storage on the user's own device. Journal text is not uploaded to Qabalah Ltd. servers and is not sent to Supabase, Vercel APIs, our AI services, Brevo or other third parties by the current Journal implementation.
The Journal is not linked to the user's email address or Reader account. Qabalah Ltd. does not hold a server-side copy of Journal content and cannot normally access or recover a user's Journal on their behalf.
3. How we use information
We may use information to:
- authenticate users and maintain authorised Reader sessions;
- provide the Reader features and generate responses requested by the user;
- maintain Reader Credit and Support Credit balances and entitlements;
- verify Google Play purchases and grant the corresponding credits;
- prevent duplicate, invalid or fraudulent purchase fulfilment;
- send access, account, service and purchase-confirmation emails;
- provide customer support and investigate technical problems;
- maintain the security, reliability and integrity of the service;
- comply with applicable legal, accounting, platform and regulatory requirements.
We do not sell personal information to advertisers. The Reader does not use Journal content for advertising or profiling.
4. Legal bases for processing
Where UK data-protection law applies, our legal basis depends on the activity. We may process personal information because it is necessary to provide the service you request or perform a contract with you; because it is necessary for our legitimate interests in operating, securing and improving the Reader, preventing fraud and supporting users; because we must comply with a legal obligation; or, where required, because you have given consent.
Where we rely on consent, you may withdraw that consent at any time, although this does not affect processing that was lawful before withdrawal.
5. AI-assisted Reader features
Some Tree of Life Reader features use a third-party AI service to generate the response requested by the user. Information submitted to those features may be transmitted to the AI service only as needed to generate the requested output.
The Personal Journal is separate from these AI-assisted features: Journal entries are not sent to the AI service by the current Journal implementation.
6. Google Play purchases and Reader Credits
Purchases made within the Android app are processed using Google Play Billing. Google processes the payment transaction under Google's own terms and privacy practices. Qabalah Ltd.'s billing backend verifies eligible transactions before granting Reader Credits and Support Credits.
The Android app does not grant credits locally. Purchase fulfilment is performed by the server after verifying the package, product and Google Play purchase token. Purchase-token fingerprints may be retained to make fulfilment idempotent and prevent the same purchase being credited more than once.
7. Transactional email
We use Brevo to send transactional emails relating to the Reader, including access codes, account/service information and Google Play purchase confirmations. For this purpose Brevo may process your email address and the information needed to construct and deliver the relevant message.
Transactional service messages are not treated as permission to send unrelated marketing. Any marketing communication will be handled in accordance with applicable consent and electronic-marketing rules.
8. Service providers and recipients
We use specialist service providers to operate the Tree of Life Reader. Depending on the feature used, personal information may be processed by the following types of provider:
| Provider / category | Purpose |
|---|---|
| Supabase | Account/database services, Reader and Support Credit records, entitlement and account information. |
| Vercel | Application hosting and server-side functions. |
| Google / Google Play | Android distribution, Google Play Billing and purchase verification. |
| Brevo | Transactional email delivery. |
| AI service provider(s) | Processing information submitted to AI-assisted Reader features to generate the requested response. |
We may also disclose information where required by law, to establish or defend legal rights, or to protect users, Qabalah Ltd. or the security and integrity of the service.
9. Personal Journal, export and recovery
Journal entries are stored only in local browser/app storage on the user's device. They are stored as local data and are not encrypted by the Journal feature itself.
Users can export the Journal as a backup file. The backup is an unencrypted, plain-text JSON file containing the Journal content. It is not password protected. Users are responsible for storing exported Journal files securely.
Journal recovery is performed locally by importing a previously exported backup file. Recovery does not retrieve Journal content from Qabalah Ltd. servers.
If browser/app storage is cleared, or an app is removed in a way that clears its local data, Journal content may be lost unless the user has retained an exported backup.
10. Data Retention and Account Deletion
We retain server-side account, entitlement, credit, purchase-verification, support and security information only for as long as reasonably necessary for the purposes described in this policy, including provision of the Reader, accounting, fraud prevention, dispute handling and compliance with legal obligations.
Authentication/access-code information is short-lived or retained only as required to operate and secure the sign-in process. Purchase and credit-ledger records may be retained for longer where necessary for accounting, fraud prevention, chargeback handling or legal compliance.
Account deletion
You may request deletion of your Tree of Life Reader account and associated server-side personal information. Deletion requests can be sent to [email protected].
You can also use our public Tree of Life Reader account-deletion page to begin the account-deletion process:
Delete your Tree of Life Reader account
The Android app also provides an in-app route to the account-deletion process.
We may need to verify a deletion request before acting on it to prevent unauthorised deletion. Certain limited records may be retained where required by law or reasonably necessary for accounting, fraud prevention, security or the establishment, exercise or defence of legal claims.
Local Journal deletion
Because the Journal is stored only on the device, deleting the server-side Reader account does not by itself delete the local Journal. The Reader provides a separate local Journal deletion choice so the user can deliberately keep, export or delete their Journal.
Deleting the local Journal removes the Journal from that device; it does not delete copies the user has previously exported.
11. Security
We use technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration or loss. These include authenticated Reader sessions, restricted server-side credentials, environment separation, exact-origin controls for the Android billing bridge, server-side purchase verification and idempotent fulfilment controls.
Communications with our web services use secure transport where supported. No internet-based system can guarantee absolute security. Journal backup files are not encrypted by the Reader, so users should store those files securely.
12. International processing
Some service providers operate infrastructure in more than one country. Information may therefore be processed outside the country in which you live. Where required, Qabalah Ltd. will rely on appropriate legal safeguards for international transfers and processing.
13. Children
The Tree of Life Reader is not designed or directed specifically at children. We do not knowingly seek to collect children's personal information contrary to applicable law. The Google Play target-audience declaration will be kept consistent with this policy.
14. Your data-protection rights
Depending on the law that applies to you, you may have rights concerning your personal information. Under UK data-protection law these can include the right to be informed, access personal data, correct inaccurate data, request erasure, restrict or object to certain processing, and receive certain data in a portable form. Where processing is based on consent, you may also withdraw consent.
To exercise a privacy right, contact [email protected]. We may need information to verify your identity before responding.
If you are in the United Kingdom and remain concerned about how we handle personal information, you also have the right to complain to the Information Commissioner's Office (ICO).
Qabalah Ltd. ICO Registration: ZB211149.
15. Changes to this policy
We may update this Privacy Policy when the Reader, our service providers, our data practices or applicable requirements change. The current version will show its latest revision date. Material changes will be communicated where appropriate.
16. Contact
Legal operator Qabalah Ltd.
Company registration 12385548
Registered office
71-75 Shelton Street,
Covent Garden,
London,
WC2H 9JQ,
United Kingdom
Privacy / data protection / account deletion [email protected]
Account-deletion page www.stoicqabalah.com/treereaderdeleteaccount.html
ICO registration ZB211149
Website www.stoicqabalah.com
