Privacy Policy

ELA Map accounts are for adults. You must be 18 or older to create an account, and you confirm this when you sign up. We do not knowingly collect personal information from anyone under 18, and if we become aware that an account belongs to someone under 18, we will close it and delete all associated data.

The ELA Map connection for AI assistants needs no account and does not store the birth details it is given (see "If you use ELA Map through an AI assistant" above). Continuing from it to ELA Map to save a chart means creating an account, which is limited to adults.

If you believe we might have any information from or about a child under 18, please contact corporate@spiritriver.life.

We collect information:

• Directly from you when you provide it to us;
• Automatically as you use ELA Map, but only where described below; and
• From third parties you choose to use with ELA Map: Google or Apple when you sign in with them, Apple or Google (through RevenueCat) and Stripe when you make a purchase, and your AI assistant when you use the ELA Map connection there.

Information you provide to us

Account and identity data

When you register, we collect:

• Email address — used for login and communications
• Display name or full name — as you provide it at registration
• Authentication method — email/password, an emailed sign-in link, Google Sign-In, or Sign in with Apple (we receive a token from Google or Apple, along with the name and email address they share with us; we do not receive your Google or Apple password). If you choose Apple's "Hide My Email" option, the email address we receive is the relay address Apple gives us.
• Marketing email preference — whether you have opted in to email about offers and updates. It is off unless you tick it at sign-up, and you can change it at any time in your account settings.

Astrological and birth data

This is the most sensitive data we hold, and we treat it accordingly. When you set up your birth chart or save charts for other people, we collect:

Third-party charts: ELA Map allows you to save charts for people other than yourself. When you do this, you are providing a third party's personal information. By saving a third-party chart, you confirm you have a lawful basis to do so — either their consent or a legitimate interest consistent with applicable privacy law. See our Terms of Service for your responsibilities.

Birth details you enter for a report: when you order a report about another person, you can type in their name and birth details instead of saving a chart. We keep those details only with that report, never as a saved chart, and we delete them when you delete your account. If a purchase is never completed, we delete them within a few days. The same lawful-basis responsibility applies as for third-party charts.

Current location (city-level)

During onboarding, if you use the "Detect my location" feature, ELA Map uses your device's GPS to identify your approximate city-level location. We then save this city-level location to your account for astrocartography features.

Your notes, daily ledger, and messages

• Notes and marks: stars and short notes (up to 600 characters each) that you add to a day's reading, saved with the chart, place, and day they belong to, so we can show them back to you when a similar pattern returns. They are not shown to other users.
• Daily ledger: a saved copy of the readings the Today view showed you each day, for each chart and place, so we can tell you what is new compared with the day before. It is built from your chart and the day's sky, and we can rebuild it at any time.
• In-app messages: the notifications we send you (for example, a sky change at a place you follow, or a report being ready), kept in your in-app inbox along with whether you have seen or read them. Messages are deleted automatically 90 days after they are sent.
• Correspondence and feedback: records and copies of your messages if you contact us or send feedback, including any screenshots you attach.

If you use ELA Map through an AI assistant

ELA Map offers a connection (MCP) that lets an AI assistant show your lines or your Human Design type. When you use it, your AI assistant sends us the birth date, birth time (if you give one), birth place, and any destination place you typed in the conversation. No account is needed and we do not save these details in our database. We send the birth details and place names to our computation engine (Open Ephemeris) to find the places and compute the result, then return the result to your AI assistant. To limit abuse, we record your IP address briefly for rate limiting.

The result includes a link that opens ELA Map with your details filled in. The link carries your birth date, birth time, birth place (name and coordinates), time zone, and any destination place. These are encrypted inside the link, so they cannot be read or altered from the link itself — but anyone who opens the link before it expires will see them filled in, so treat it like the details themselves. It expires 15 minutes after it is created. When you open it, ELA Map reads the details, removes them from your browser's address bar, and keeps them out of our analytics. The details are kept in your browser's local storage to fill in the sign-up form, and are cleared when you sign out. They are saved to your account only if you create one. How your AI assistant handles your conversation is covered by that assistant's own privacy policy.

Payment data

Payments on the web are processed by Stripe, Inc. ELA Map does not receive or store your payment card number, CVV, or full billing address. We receive a payment confirmation, transaction ID, and the last four digits of the card used. See Stripe's privacy policy.

Purchases in the mobile app are processed by Apple (App Store) or Google (Google Play), and we do not receive your payment details for them. We use RevenueCat to confirm these purchases: it links them to your ELA Map account ID and tells us what you bought, the store, the transaction ID, and the status of your subscription. See RevenueCat's privacy policy.

Information we collect through automatic data collection technologies

As you use ELA Map, we may use automatic data collection technologies to collect certain information about your equipment and how you use ELA Map. Apart from what is strictly necessary to run ELA Map and keep it secure, these technologies run only with your consent:

Analytics data (PostHog)

We use PostHog to understand how ELA Map is used and to improve the product. PostHog collects pages visited, session activity, device information, and general geographic region. PostHog is used solely for product improvement — not for advertising. It runs only if you accept analytics in the cookie banner, and you can withdraw that at any time in your account's Privacy Preferences. See PostHog's privacy policy.

Error and diagnostic data (Sentry)

We use Sentry to detect and fix bugs. Sentry may capture error messages, stack traces, limited session context, and device information. This data is used solely for diagnosing technical issues. Like analytics, Sentry stays switched off until you accept error tracking in the cookie banner. See Sentry's privacy policy.

Bot protection (Cloudflare Turnstile)

Forms that are open to the public — sign-up, sign-in, password reset, the waitlist form, and the signed-out chart preview — run a Cloudflare Turnstile check to keep automated abuse out. The check loads from Cloudflare, which receives your IP address and browser and device signals in order to decide whether the request looks human, and may store a short-lived token in your browser so it does not have to re-check you. When you submit the form, we send Cloudflare the resulting token together with your IP address so it can confirm the check was genuine. Cloudflare does not receive your account, birth, or chart data. See Cloudflare's privacy policy.

Cookies

We use cookies and similar technologies only as necessary to operate ELA Map and to collect analytics. We do not use advertising cookies or tracking pixels. See our Cookie Notice for full details and opt-out instructions. We do not currently respond to "Do Not Track" browser signals.

Information we do not collect

• We do not collect data from users under 18. ELA Map is for adults only.
• We do not collect or infer racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data.
• We do not build advertising profiles.
• We do not track you across third-party websites.

We use information that we collect about you or that you provide to us, including any personal information, for the following purposes:

Legal bases for processing (EEA and UK)

If you are in the European Economic Area or UK, we process your personal data under the following legal bases:

Contract performance (Article 6(1)(b)): Most of ELA Map's core processing — account management, chart storage, location features, payment processing — is necessary to deliver the service you signed up for.

Legitimate interests (Article 6(1)(f)): We use analytics and error tracking to improve ELA Map and to maintain its security. These interests are proportionate and do not override your privacy rights.

Consent (Article 6(1)(a)): Where we send optional marketing communications, we do so only with your consent. You can withdraw consent at any time.

Legal obligation (Article 6(1)(c)): We process data as required to comply with applicable law.

Most of ELA Map works without any AI. Our maps, lines, scores, and the bulk of our written interpretations are generated by our own deterministic and template-based systems, with no AI involved. The written interpretations themselves come from our professionally authored interpretation library, selected and sequenced programmatically for your chart. A small number of optional features, described below, additionally use a third-party large language model (LLM) to perform an editorial pass — weaving that already-selected material into flowing prose or speech. Their readings are compiled from our interpretation library, refined by AI. These features are only active when you choose to use them.

Which features use AI, and what we send

When you use any of the features below, we send the relevant chart information to Anthropic, PBC (the maker of Claude) so its model can refine and stitch the selected interpretive material into finished text. We send only what each feature needs:

• Daily readings on the Today view (each section's reading): we send derived chart information — the names of the astrological and Human Design placements active for you (for example a planet's sign, house, gate, and line, the day's aspects), the city name you are viewing, your first name, and the date. We do not send your raw birth date, birth time, or birth coordinates for this feature. You can turn AI-refined readings off at any time in Account settings; when off, nothing about your chart is sent to an AI provider, and your readings are built from ELA Map's own written interpretations instead.
• Location Reports: we send derived chart and place information — the lines in orb at that location, their interpretive keywords, your relocated angles, the natal sign/house context for those lines, your first name, and facts about the place, plus the focus areas you pick and anything you write in the optional "In your own words" box when ordering (up to 400 characters). We do not send your raw birth date, birth time, or birth coordinates for this feature. If you request an audio narration of a report, the report's written text (which includes your first name and the location) is sent to our text-to-speech provider, Fish Audio, to generate the audio.
• Your Year report: we send the same kind of derived chart and place information as for Location Reports, plus the themes and dates of events within the period you chose. If your solar return (the moment the Sun returns to its birth position, on or about your birthday) falls in that period, we also send its date. We do not send your birth year, birth time, or birth coordinates for this feature.
• Map chat assistant ("Copilot"), where offered: so the assistant can answer questions about your specific chart, we send a summary of the chart you have open. For this feature that summary does include your chart's birth date, birth time, birth city/region/country, and time zone, along with your conversation messages. This is the one AI feature that transmits those birth details; if you would rather they not be sent, do not use the chat assistant.

How the AI provider handles your data

Anthropic processes this data to produce the refined text and returns it to us. Based on Anthropic's commercial terms, data submitted through its business API is not used to train its models. Anthropic retains inputs and outputs only for a limited period for trust-and-safety and operational purposes. Fish Audio processes the report text only to produce the audio file. We treat all of these providers as subprocessors bound by data processing terms (see Disclosure of Your Information below).

Legal basis (EEA / UK)

We rely on performance of a contract (Article 6(1)(b)) to deliver an optional AI feature you have chosen to use, and, to the extent applicable, your consent (Article 6(1)(a)) given by choosing to use it. You can stop using these features at any time.

We do not sell your personal information. We do not share your data for advertising. We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this Privacy Policy:

• To the service providers (subprocessors) listed below, who support ELA Map and are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them;
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about ELA Map users is among the assets transferred;
• To fulfill the purpose for which you provide it, for example when you share a chart link;
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes; and
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others, including exchanging information with other companies and organizations for the purposes of fraud protection.

Subprocessors

The AI-related subprocessors (Anthropic and Fish Audio) receive data only when you use the optional feature that relies on them; see the AI Processing section above. When you create an account we add you to our Loops lifecycle list to send your welcome message and service and product updates about ELA Map; you can unsubscribe from these at any time. If we later run dedicated marketing campaigns, we will only add you to a separate marketing list with your consent.

All subprocessors are bound by data processing agreements and must process your data only as directed by us and in accordance with applicable law. We will provide 30 days' advance notice by email before adding a new subprocessor that materially changes how your data is processed. Third parties to whom we disclose personal information may also have their own privacy policies, which describe how they use and disclose personal information; we encourage you to review them. These entities or their servers may be located inside or outside the United States.

We strive to provide you with choices regarding the personal information you provide to us:

• Analytics and error tracking. PostHog and Sentry run only if you accept them in the cookie banner. You can withdraw that at any time in your account's Privacy Preferences. You can also set your browser to refuse cookies; if you do, some parts of ELA Map may not work properly.
• Marketing email. Email about offers and updates is off unless you opt in, and you can change that at any time in your account settings.
• Lifecycle and service email. You can unsubscribe from welcome and product and service update emails at any time.
• AI-refined readings. You can turn AI-refined daily readings off at any time in your account settings.
• Push notifications. We send push notifications only if you turn them on.
• No third-party advertising. We do not share your personal information with third parties for their advertising or promotional purposes.

• Access: You can view your account data and charts within ELA Map at any time.
• Correction: You can update your account information and edit charts directly in the app.
• Deletion: You can delete your account and all associated data at any time from your account settings, or by emailing corporate@spiritriver.life.
• Data portability: To request an export of your personal data, email corporate@spiritriver.life.

We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

This notice for California residents supplements this Privacy Policy and applies solely to users who reside in the State of California. Under the California Consumer Privacy Act, as amended (CCPA/CPRA), California residents have the right to know, delete, correct, opt out of sale or sharing, and non-discrimination. The categories of personal information we collect are those described in Information We Collect About You and How We Collect It. ELA Map does not sell your personal information and does not share it for cross-context behavioral advertising.

To submit a CCPA request, email corporate@spiritriver.life from your account email address. We will respond within 45 days.

We implement security measures designed to protect your personal information against accidental loss and unauthorized access, use, alteration, and disclosure. These include:

• All birth data and chart data is stored encrypted at rest (AES-256)
• All data in transit is encrypted using TLS 1.2 or higher
• Access to production databases is restricted to authorized personnel only
• We conduct periodic security reviews

If you discover a security vulnerability, please report it to security@elamap.com. We will acknowledge your report within 24 hours.

Your responsibilities

You are responsible for keeping your login details secure, for example by using a secure password and a secure connection.

Transmission risks

The transmission of information over the internet is inherently insecure. While we strive to protect your personal information, we cannot guarantee its absolute security during transmission to ELA Map. Any transmission is at your own risk.

Limitations

We monitor and update our security practices to prevent circumvention of our privacy settings or security measures. However, no system is perfectly secure, and we cannot be held responsible for actions by third parties who, despite our efforts, obtain unauthorized access to your data.

The General Data Protection Regulation ("GDPR") and the UK GDPR give certain rights to individuals in relation to their personal data. As available and except as limited under applicable law, these rights are:

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18): Request that we limit how we process your data
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests, and to processing for direct marketing
• Right not to be subject to automated decision-making (Art. 22): Not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects for you

To exercise any of these rights, email corporate@spiritriver.life. We will respond within one calendar month after verifying your identity. If you are unhappy with the way we are using your personal data, you are also free to lodge a complaint with your data protection authority.

We retain personal information only for as long as necessary to provide the services you request and thereafter for legitimate legal or business purposes, such as retention periods required by law, resolving or defending legal claims, and keeping accurate business and financial records. The periods are:

When you delete your account, we begin processing deletion within a reasonable period. Your data will be removed from active systems within 30 days and from backup systems within 90 days. Payment transaction records are retained for 7 years as required by tax law.

We post any changes we make to this Privacy Policy on this page. When we make material changes to how we treat your personal information, we will notify you by email and display a notice within the app at least 30 days before the changes take effect. The date this Privacy Policy was last revised is shown at the top of the page. Your continued use of ELA Map after a policy update constitutes acceptance of the revised policy. If you do not agree, you may close your account before the changes take effect. You are responsible for making sure we have an up-to-date, deliverable email address for you.

This Privacy Policy shall be governed by the laws of the State of New York. This does not take away any rights you have under the data protection laws of the place where you live.

ELA Map is operated from the United States. If you are located outside the United States, including in the EU, EEA, or UK, your personal data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (EU Commission Decision 2021/914) and UK International Data Transfer Agreements for EU/UK data transfers to ensure adequate protection. This includes transfers to our US-based subprocessors, such as the AI providers used by our optional features (Anthropic and Fish Audio).

If any part of this Privacy Policy is determined to be invalid or unenforceable under applicable law, that part will be replaced by a valid, enforceable provision that most closely matches its intent, and the rest of this Privacy Policy will continue in full force and effect.

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

Spirit River Inc.
1401 Pennsylvania Ave. Unit 105 #5189
Wilmington, DE 19806
United States
Email: corporate@spiritriver.life
Website: elamap.com

Response time: We aim to respond to all privacy inquiries within 5 business days and to fulfill access/deletion requests within one calendar month.